CVE-2023-42793 is a critical authentication bypass vulnerability in JetBrains TeamCity that enables remote code execution on the TeamCity Server. It has a CVSS score of 9.8, indicating a high severity with network attack vector, no privileges or user interaction required, and full confidentiality, integrity, and availability impact. This vulnerability is known to be exploited in the wild and has been associated with ransomware campaigns. No specific affected versions or patch information is provided in the available data.
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-20198 is a critical privilege escalation vulnerability in the Cisco IOS XE Web UI. It allows a remote, unauthenticated attacker to create an account with the highest privilege level (15), enabling full control over the affected device. This vulnerability has a CVSS score of 10.0 and has been exploited in the wild.
CVE-2018-14667 is a high severity expression language injection vulnerability in the Red Hat JBoss RichFaces Framework. It affects the UserResource resource, allowing a remote, unauthenticated attacker to execute malicious code by exploiting a chain of Java serialized objects. This vulnerability has been observed in the wild.
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluence instances.
Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue.
A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation.
Note that an attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.
CVE-2023-28434 is a security feature bypass vulnerability in MinIO that allows attackers with specific permissions to bypass bucket name checks and place objects into arbitrary buckets, enabling privilege escalation. Exploitation requires credentials with arn:aws:s3:::* permission and enabled Console API access. This vulnerability has been exploited in the wild.
CVE-2021-3129 is a high-severity vulnerability in Laravel Ignition that allows unauthenticated remote attackers to execute arbitrary code by exploiting insecure file upload handling. The flaw arises from improper use of file_get_contents() and file_put_contents() functions, enabling malicious file uploads. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns.
A use-after-free vulnerability exists in Samsung mobile devices with selected Exynos chipsets. This flaw allows malicious actors to perform unauthorized memory writes and potentially execute arbitrary code on affected devices. The vulnerability has been exploited in the wild. No specific affected software versions or patches have been provided in the available data.
CVE-2014-8361 is a high-severity vulnerability in the Realtek SDK's miniigd SOAP service caused by improper input validation. This flaw allows remote attackers to execute arbitrary code by sending a specially crafted NewInternalClient request. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
Zyxel EMG2926 routers have a command injection vulnerability in the diagnostic nslookup function. This flaw allows attackers to execute arbitrary commands on the device by manipulating parameters such as ping_ip in the diagnostic URI. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
CVE-2023-35674 is a high-severity local privilege escalation vulnerability in Google Android versions 11 through 13, caused by a logic error in WindowState.java's onCreate method. This flaw allows an attacker with limited privileges to launch a background activity, escalating their privileges without requiring additional execution rights or user interaction. The vulnerability impacts confidentiality, integrity, and availability, enabling potential full system compromise. Exploitation does not require user interaction but does require local access with some privileges. No known exploits are currently in the wild, but the vulnerability's critical nature and broad Android version impact make it a significant risk. European organizations using affected Android devices, especially in sectors with sensitive data, face elevated risks. Mitigation involves applying official patches once available, restricting local access, and monitoring for suspicious activity related to background activity launches. Countries with high Android adoption and critical infrastructure reliance on mobile devices, such as Germany, France, and the UK, are most likely to be affected. Given the CVSS score of 8.
A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or an authenticated, remote attacker to establish a clientless SSL VPN session with an unauthorized user.
This vulnerability is due to improper separation of authentication, authorization, and accounting (AAA) between the remote access VPN feature and the HTTPS management and site-to-site VPN features. An attacker could exploit this vulnerability by specifying a default connection profile/tunnel group while conducting a brute force attack or while establishing a clientless SSL VPN session using valid credentials. A successful exploit could allow the attacker to achieve one or both of the following:
Identify valid credentials that could then be used to establish an unauthorized remote access VPN session.
Establish a clientless SSL VPN session (only when running Cisco ASA Software Release 9.16 or earlier).
Notes:
Establishing a client-based remote access VPN tunnel is not possible as these default connection profiles/tunnel groups do not and cannot have an IP address pool configured.
This vulnerability does not allow an attacker to bypass authentication. To successfully establish a remote access VPN session, valid credentials are required, including a valid second factor if multi-factor authentication (MFA) is configured.
Cisco will release software updates that address this vulnerability. There are workarounds that address this vulnerability.
