Veille CVE

Semaine du 17 juin au 23 juin 2024

2 CVE

Critique 2 Élevée 0 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2024-37079 9.8 Critique Exploitée

    VMware vCenter Server · VMware Cloud Foundation

    vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.

  2. CVE-2024-6047 9.8 Critique Exploitée

    GeoVision GV_DSP_LPR_V2 · GeoVision GV_IPCAMD_GV_BX1500 · GeoVision GV_IPCAMD_GV_CB220 · GeoVision GV_IPCAMD_GV_EBL1100

    Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the device.