CVE Intelligence
Início / CVEs

Vulnerabilidades exploradas (CISA KEV)

CVEs com exploração confirmada pela CISA (Known Exploited Vulnerabilities), com ação exigida e prazos.

Severidade
Limpar

10 resultado(s)

Exportar esta busca: RSS · CSV · STIX
CVE-2023-23529 Alta · 8.8 KEV Alta · 55 CWE-843 27/02/2023
Apple Multiple Products WebKit Type Confusion Vulnerability
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
CVE-2022-47986 Crítica · 9.8 KEV Urgente · 91 Exploit público Ransomware CWE-502 17/02/2023
IBM Aspera Faspex Code Execution Vulnerability
IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw. By sending a specially crafted obsolete API call, an attacker could exploit this vulnerability to execute arbitrary code on the system. The obsolete API call was removed in Faspex 4.4.2 PL2. IBM X-Force ID: 243512.
CVE-2023-23752 Média · 5.3 KEV Urgente · 76 Exploit público CWE-284 16/02/2023
Joomla! Improper Access Control Vulnerability
An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.
CVE-2023-21823 Alta · 7.8 KEV Alta · 61 Exploit público CWE-190 14/02/2023
Microsoft Windows Graphic Component Privilege Escalation Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2023-23376 Alta · 7.8 KEV Alta · 65 Ransomware CWE-787 14/02/2023
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-21715 Alta · 7.3 KEV Alta · 55 CWE-863 14/02/2023
Microsoft Office Publisher Security Feature Bypass Vulnerability
Microsoft Publisher Security Feature Bypass Vulnerability
CVE-2023-21529 Alta · 8.8 KEV Alta · 66 Ransomware CWE-502 14/02/2023
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-25717 Crítica · 9.8 KEV Alta · 67 Exploit público CWE-94 13/02/2023
Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.
CVE-2022-24990 Alta · 7.5 KEV Urgente · 89 Exploit público Ransomware CWE-306 07/02/2023
TerraMaster OS Remote Command Execution Vulnerability
TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agent: TNAS" to module/api.php?mobile/webNasIPS and then reading the PWD field in the response.
CVE-2023-0669 Alta · 7.2 KEV Urgente · 86 Exploit público Ransomware CWE-502 06/02/2023
Fortra GoAnywhere MFT: injeção de comando por desserialização
A Fortra (anteriormente, HelpSystems) GoAnywhere MFT sofre de uma vulnerabilidade de injeção de comando pré-autenticação no License Response Servlet, devido à desserialização de um objeto arbitrário controlado pelo atacante. Este problema foi corrigido na versão 7.1.2.