Vulnérabilités
Aggrégat CVE / GHSA / KEV / OSV — filtrage par étiquette et catégorie.
| ID | Titre | |
|---|---|---|
| CVE-2023-4734 |
|
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.
|
| CVE-2023-36741 |
|
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
|
| CVE-2023-38831 KEV |
|
[KEV] Vulnérabilité dans Rarlab winrar (CVE-2023-38831)
vulnérabilité dans Rarlab winrar (CVE-2023-38831). L'exploitation peut entraîner la prise de contrôle totale du système. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2023-32315 KEV |
|
[KEV] Traversée de chemin dans Ignite realtime ignite-realtime (CVE-2023-32315)
traversée de chemin dans Ignite realtime ignite-realtime (CVE-2023-32315). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2023-41098 |
|
XSS (Cross-Site Scripting) dans misp-project (CVE-2023-41098)
XSS dans misp-project (CVE-2023-41098). Risque d'opérations non autorisées ou de divulgation.
|
| CVE-2023-38035 KEV |
|
[KEV] Autorisation incorrecte dans Ivanti sentry (CVE-2023-38035)
vulnérabilité dans Ivanti sentry (CVE-2023-38035). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2023-27532 KEV |
|
[KEV] Vulnérabilité dans Veeam backup-replication (CVE-2023-27532)
vulnérabilité dans Veeam backup-replication (CVE-2023-27532). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2023-36787 |
|
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
|
| CVE-2023-38158 |
|
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
|
| CVE-2023-39785 |
|
Écriture hors limites dans tenda (CVE-2023-39785)
écriture hors limites dans tenda (CVE-2023-39785). Risque d'opérations non autorisées ou de divulgation.
|
| CVE-2023-39786 |
|
Écriture hors limites dans tenda (CVE-2023-39786)
écriture hors limites dans tenda (CVE-2023-39786). Risque d'opérations non autorisées ou de divulgation.
|
| CVE-2023-39807 |
|
Injection SQL dans sqli (CVE-2023-39807)
injection SQL dans sqli (CVE-2023-39807). L'exploitation peut entraîner la prise de contrôle totale du système.
|
| CVE-2023-39809 |
|
Injection de commande dans nvki (CVE-2023-39809)
injection de commande dans nvki (CVE-2023-39809). L'exploitation peut entraîner la prise de contrôle totale du système.
|
| CVE-2023-39784 |
|
Écriture hors limites dans tenda (CVE-2023-39784)
écriture hors limites dans tenda (CVE-2023-39784). Risque d'opérations non autorisées ou de divulgation.
|
| CVE-2023-26359 KEV |
|
[KEV] Désérialisation non sécurisée dans Adobe coldfusion (CVE-2023-26359)
vulnérabilité dans Adobe coldfusion (CVE-2023-26359). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2023-38838 |
|
Injection SQL dans sqli (CVE-2023-38838)
injection SQL dans sqli (CVE-2023-38838). Des informations confidentielles peuvent être exposées.
|
| CVE-2023-24489 KEV |
|
[KEV] Vulnérabilité dans Citrix content-collaboration (CVE-2023-24489)
vulnérabilité dans Citrix content-collaboration (CVE-2023-24489). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2023-39805 |
|
Injection SQL dans sqli (CVE-2023-39805)
injection SQL dans sqli (CVE-2023-39805). L'exploitation peut entraîner la prise de contrôle totale du système.
|
| CVE-2023-38180 KEV |
|
[KEV] Vulnérabilité dans Microsoft net-core-and-visual-studio (CVE-2023-38180)
vulnérabilité dans Microsoft net-core-and-visual-studio (CVE-2023-38180). Risque d'opérations non autorisées ou de divulgation. Inscrit au CISA KEV — exploitation active confirmée.
|
| CVE-2023-39086 |
|
ASUS RT-AC66U B1 3.0.0.4.286_51665 was discovered to transmit sensitive information in cleartext.
ASUS RT-AC66U B1 3.0.0.4.286_51665 was discovered to transmit sensitive information in cleartext.
|
| CVE-2023-36873 |
|
.NET Framework Spoofing Vulnerability
.NET Framework Spoofing Vulnerability
|
| CVE-2023-36899 |
|
ASP.NET Elevation of Privilege Vulnerability
ASP.NET Elevation of Privilege Vulnerability
|
| CVE-2023-35391 |
|
ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
|
| CVE-2023-38185 |
|
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
|
| CVE-2023-38186 |
|
Windows Mobile Device Management Elevation of Privilege Vulnerability
Windows Mobile Device Management Elevation of Privilege Vulnerability
|
| CVE-2023-38188 |
|
Azure Apache Hadoop Spoofing Vulnerability
Azure Apache Hadoop Spoofing Vulnerability
|
| CVE-2023-38254 |
|
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
|
| CVE-2023-38167 |
|
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
|
| CVE-2023-38169 |
|
Microsoft SQL OLE DB Remote Code Execution Vulnerability
Microsoft SQL OLE DB Remote Code Execution Vulnerability
|
| CVE-2023-38170 |
|
HEVC Video Extensions Remote Code Execution Vulnerability
HEVC Video Extensions Remote Code Execution Vulnerability
|
| CVE-2023-38172 |
|
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
|
| CVE-2023-38175 |
|
Microsoft Windows Defender Elevation of Privilege Vulnerability
Microsoft Windows Defender Elevation of Privilege Vulnerability
|
| CVE-2023-38176 |
|
Azure Arc-Enabled Servers Elevation of Privilege Vulnerability
Azure Arc-Enabled Servers Elevation of Privilege Vulnerability
|
| CVE-2023-38178 |
|
.NET Core and Visual Studio Denial of Service Vulnerability
.NET Core and Visual Studio Denial of Service Vulnerability
|
| CVE-2023-38181 |
|
Microsoft Exchange Server Spoofing Vulnerability
Microsoft Exchange Server Spoofing Vulnerability
|
| CVE-2023-38182 |
|
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
|
| CVE-2023-38184 |
|
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
|
| CVE-2023-36914 |
|
Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability
Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability
|
| CVE-2023-36913 |
|
Microsoft Message Queuing Information Disclosure Vulnerability
Microsoft Message Queuing Information Disclosure Vulnerability
|
| CVE-2023-36912 |
|
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
|
| CVE-2023-36911 |
|
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
|
| CVE-2023-36898 |
|
Tablet Windows User Interface Application Core Remote Code Execution Vulnerability
Tablet Windows User Interface Application Core Remote Code Execution Vulnerability
|
| CVE-2023-36900 |
|
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
|
| CVE-2023-36903 |
|
Windows System Assessment Tool Elevation of Privilege Vulnerability
Windows System Assessment Tool Elevation of Privilege Vulnerability
|
| CVE-2023-36904 |
|
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
|
| CVE-2023-36905 |
|
Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
|
| CVE-2023-36906 |
|
Windows Cryptographic Services Information Disclosure Vulnerability
Windows Cryptographic Services Information Disclosure Vulnerability
|
| CVE-2023-36907 |
|
Windows Cryptographic Services Information Disclosure Vulnerability
Windows Cryptographic Services Information Disclosure Vulnerability
|
| CVE-2023-36908 |
|
Windows Hyper-V Information Disclosure Vulnerability
Windows Hyper-V Information Disclosure Vulnerability
|
| CVE-2023-36909 |
|
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
|