Jan 16, 2024
3 new incidents, 0 with updates.
Started
- ClosedPatched
Atlassian Confluence Data Center and Server Template Injection
Atlassian Confluence Data Center and Server contain an unauthenticated OGNL template injection vulnerability that can lead to remote code execution. Added to the CISA KEV catalog on 2024-01-24. CISA lists known use in ransomware campaigns. CVE-2023-22527 was assigned before 2024; the KEV listing came in 2024.
Atlassian Confluence Data Center and ServerClosed Jan 24, 2024
- ClosedPatched
Google Chromium V8 Out-of-Bounds Memory Access
Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to the CISA KEV catalog on 2024-01-17.
Google Chromium V8Closed Jan 17, 2024
- ClosedPatched
Laravel Deserialization of Untrusted Data
Laravel Framework contains a deserialization of untrusted data vulnerability, allowing for remote command execution. This vulnerability may only be exploited if a malicious user has accessed the application encryption key (APP_KEY environment variable). Added to the CISA KEV catalog on 2024-01-16. CVE-2018-15133 was assigned before 2024; the KEV listing came in 2024.
Laravel FrameworkClosed Jan 16, 2024
