Veille CVE

Juin 2024

3 CVE sur 10

Critique 3 Élevée 6 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2024-37079 9.8 Critique Exploitée

    VMware vCenter Server · VMware Cloud Foundation

    vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.

  2. CVE-2024-6047 9.8 Critique Exploitée

    GeoVision GV_DSP_LPR_V2 · GeoVision GV_IPCAMD_GV_BX1500 · GeoVision GV_IPCAMD_GV_CB220 · GeoVision GV_IPCAMD_GV_EBL1100

    Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.

  3. CVE-2024-34102 9.8 Critique Exploitée

    adobe commerce · Adobe commerce webhooks · Adobe magento

    Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that references external entities. Exploitation of this issue does not require user interaction.