A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17. An app may be able to execute arbitrary code with kernel privileges.
CVE-2023-46805 is an authentication bypass vulnerability affecting Ivanti Connect Secure and Policy Secure gateways. It allows attackers to bypass authentication controls in the web component, granting unauthorized access to restricted resources. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. It can also be combined with CVE-2024-21887, a command injection vulnerability, to increase impact. The vulnerability has a high severity rating with a CVSS score of 8.2.
D-Link DSL-2750B devices have a command injection vulnerability that permits remote, unauthenticated attackers to execute arbitrary commands via the login.cgi cli parameter. This vulnerability is known to be exploited in the wild, posing a significant risk to affected devices.
Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings (not to be confused with printf-style format strings) within the Excel parsing logic.
Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QVR Firmware 5.0.0 and later
An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.
CVE-2023-33107 is a high-severity integer overflow vulnerability in Qualcomm Snapdragon platforms affecting a wide range of mobile, IoT, automotive, and wearable devices. The flaw occurs in the Graphics Linux driver during IOCTL calls when assigning shared virtual memory regions, leading to memory corruption. Exploitation requires local access and no user interaction or privileges, potentially allowing attackers to execute arbitrary code or cause denial of service. Although no known exploits are reported, the broad product impact and high CVSS score indicate significant risk. European organizations using devices with affected Snapdragon chipsets, especially in telecommunications, automotive, and IoT sectors, face confidentiality, integrity, and availability threats. Mitigation involves applying vendor patches once available, restricting local access, and monitoring for anomalous behavior. Countries with high smartphone penetration and automotive industries, such as Germany, France, and the UK, are most likely impacted. The vulnerability's ease of exploitation without privileges and its broad scope warrant a high severity rating. Defenders should prioritize patch management and device security controls to mitigate potential exploitation.
CVE-2023-33106 is a high-severity memory corruption vulnerability in Qualcomm Snapdragon platforms caused by an out-of-range pointer offset when submitting a large list of sync points via the IOCTL_KGSL_GPU_AUX_COMMAND interface. This flaw affects a wide range of Snapdragon chipsets used in mobile, wearable, automotive, and IoT devices. Exploitation could lead to full compromise of confidentiality, integrity, and availability without requiring user interaction or privileges. Although no known exploits are currently reported in the wild, the vulnerability's nature and broad impact make it a significant risk. European organizations relying on devices with affected Snapdragon chipsets, especially in critical infrastructure, automotive, and mobile sectors, could face severe operational and data security impacts. Mitigation requires prompt firmware and driver updates from device manufacturers and careful validation of GPU command inputs. Countries with high adoption of Snapdragon-based devices and strong automotive and mobile technology sectors, such as Germany, France, and the UK, are most likely to be impacted.
CVE-2023-33063 is a high-severity use-after-free vulnerability (CWE-416) affecting numerous Qualcomm Snapdragon platforms and related products. It involves memory corruption in DSP Services triggered during remote calls from the High-Level Operating System (HLOS) to the Digital Signal Processor (DSP). The vulnerability requires low privileges and no user interaction but local access, enabling potential attackers to execute arbitrary code or cause denial of service. This flaw impacts confidentiality, integrity, and availability of affected devices. While no known exploits are currently reported in the wild, the broad range of affected Snapdragon platforms, including mobile, IoT, automotive, and wearable devices, poses a significant risk. European organizations relying on Qualcomm Snapdragon-based infrastructure or devices should prioritize patching once updates are available. Mitigation involves applying vendor patches, restricting local access, and monitoring for anomalous DSP service behavior. Countries with high mobile and IoT adoption, such as Germany, France, UK, and the Nordics, are most likely to be affected due to market penetration and strategic technology use. The vulnerability’s CVSS score is 7.8, reflecting its high severity given the potential for remote code execution and system compromise without user interaction.
Multiple Qualcomm chipsets have a use-after-free vulnerability triggered during process initialization when shell memory is freed via an IOCTL munmap call. This vulnerability has been exploited in the wild and is rated as high severity.
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment (phpinfo). This information includes all the environment variables of the webserver. In containerized deployments, these environment variables may include sensitive data such as the ownCloud admin password, mail server credentials, and license key. Simply disabling the graphapi app does not eliminate the vulnerability. Additionally, phpinfo exposes various other potentially sensitive configuration details that could be exploited by an attacker to gather information about the system. Therefore, even if ownCloud is not running in a containerized environment, this vulnerability should still be a cause for concern. Note that Docker containers from before February 2023 are not vulnerable to the credential disclosure.
CVE-2023-4911 is a buffer overflow vulnerability in the GNU C Library's dynamic loader ld.so, triggered by processing the GLIBC_TUNABLES environment variable. This flaw allows a local attacker to execute code with elevated privileges. The vulnerability has a high severity with a CVSS score of 7.8 and is known to be exploited in the wild. No explicit affected versions or patch information are provided in the input data.
CVE-2020-2551 is an unspecified vulnerability in Oracle Fusion Middleware's WebLogic Server core components. It allows an unauthenticated attacker with network access via the IIOP protocol to compromise the WebLogic Server. The vulnerability has been exploited in the wild. Oracle released patches for this and other vulnerabilities in their January 2020 Critical Patch Update and strongly recommends applying these patches promptly.
Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attacker is able to elevate their privilege by tunneling HTTP requests, allowing them to execute HTTP requests on the backend server that hosts the repository application. The fixed versions are August 2023 Patch 2, May 2023 Patch 6, February 2023 Patch 10, November 2022 Patch 12, August 2022 Patch 14, May 2022 Patch 16, February 2022 Patch 15, and November 2021 Patch 17. NOTE: this issue exists because of an incomplete fix for CVE-2023-41265.
