Vulnerabilidades exploradas (CISA KEV)

CVE-2023-42916 Média · 6.5 KEV Alta · 53 CWE-125 30/11/2023

Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

CVE-2023-42917 Alta · 8.8 KEV Alta · 55 CWE-787 30/11/2023

Apple Multiple Products WebKit Memory Corruption Vulnerability

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

CVE-2023-6345 Crítica · 9.6 KEV Alta · 63 CWE-190 29/11/2023

Google Skia Integer Overflow Vulnerability

Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

CVE-2023-49103 Alta · 7.5 KEV Urgente · 79 Exploit público CWE-200 21/11/2023

ownCloud graphapi Information Disclosure Vulnerability

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment (phpinfo). This information includes all the environment variables of the webserver. In containerized deployments, these environment variables may include sensitive data such as the ownCloud admin password, mail server credentials, and license key. Simply disabling the graphapi app does not eliminate the vulnerability. Additionally, phpinfo exposes various other potentially sensitive configuration details that could be exploited by an attacker to gather information about the system. Therefore, even if ownCloud is not running in a containerized environment, this vulnerability should still be a cause for concern. Note that Docker containers from before February 2023 are not vulnerable to the credential disclosure.

CVE-2023-49105 Crítica · 9.8 KEV Alta · 69 Exploit público CWE-287 21/11/2023

ownCloud Improper Authentication Vulnerability

An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured. This occurs because pre-signed URLs can be accepted even when no signing-key is configured for the owner of the files. The earliest affected version is 10.6.0.

CVE-2023-48365 Crítica · 9.9 KEV Urgente · 70 Ransomware CWE-444 15/11/2023

Qlik Sense HTTP Tunneling Vulnerability

Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attacker is able to elevate their privilege by tunneling HTTP requests, allowing them to execute HTTP requests on the backend server that hosts the repository application. The fixed versions are August 2023 Patch 2, May 2023 Patch 6, February 2023 Patch 10, November 2022 Patch 12, August 2022 Patch 14, May 2022 Patch 16, February 2022 Patch 15, and November 2021 Patch 17. NOTE: this issue exists because of an incomplete fix for CVE-2023-41265.

CVE-2023-36424 Alta · 7.8 KEV Alta · 61 Exploit público CWE-125 14/11/2023

Microsoft Windows Out-of-Bounds Read Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2023-36036 Alta · 7.8 KEV Alta · 56 CWE-787 14/11/2023

Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2023-36033 Alta · 7.8 KEV Alta · 55 CWE-119 14/11/2023

Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2023-36025 Alta · 8.8 KEV Alta · 62 Exploit público 14/11/2023

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2023-47246 Crítica · 9.8 KEV Urgente · 83 Exploit público Ransomware CWE-22 10/11/2023

SysAid Server Path Traversal Vulnerability

In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.