Jun 23, 2023
3 new incidents, 0 with updates.
Started
- ClosedPatched
Zyxel Multiple Network-Attached Storage (NAS) Devices: Command Injection (CVE-2023-27992)
Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability that could allow an unauthenticated attacker to execute commands remotely via a crafted HTTP request. Added to CISA KEV on 2023-06-23.
Zyxel Multiple Network-Attached Storage (NAS) DevicesClosed Jun 23, 2023
- ClosedPatched
Apple Multiple Products: WebKit Type Confusion (CVE-2023-32439)
Apple iOS, iPadOS, macOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. Added to CISA KEV on 2023-06-23.
Apple Multiple ProductsClosed Jun 23, 2023
- ClosedPatched
VMware Tools: Authentication Bypass (CVE-2023-20867)
VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability. Added to CISA KEV on 2023-06-23.
VMware ToolsClosed Jun 23, 2023
