CVEs published December 13, 2023
154 CVEs were published on December 13, 2023: 5 critical, 46 high.
- Published
- 154
- Critical
- 5
- High
- 46
- Medium
- 60
- Low
- 6
- Unrated
- 37
- Now in CISA KEV
- 0
- Fix available
- 41
Most affected products
- Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- 7
- Thecosy IceCMS
- 7
- Adobe Substance3D - Sampler
- 6
- Repox
- 6
- Adobe After Effects
- 4
- Adobe Dimension
- 4
- Adobe Substance3D - Designer
- 4
- Jenkins Project Jenkins Nexus Platform Plugin · org.sonatyp…
- 4
- Jenkins Project Jenkins PaaSLane Estimate Plugin · com.clou…
- 4
- org.silverpeas.core:silverpeas-core-web
- 4
Critical 5
- CVE-2023-42495Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command…Dasan Networks
- CVE-2023-6723Unrestricted Upload of File with Dangerous Type in RepoxRepox
- CVE-2023-6718Authentication Bypass Using an Alternate Path or Channel in RepoxRepox
- CVE-2023-6753Path Traversal in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2023-40921SQL Injection vulnerability in functions/point_list.php in Common Services soliberte before v4.3.03 allows attackers to obtain sensitive inf
High 46
- CVE-2023-45170IBM AIX privilege escalationIBM AIX
- CVE-2023-45174IBM AIX privilege escalationIBM AIX
- CVE-2023-45166IBM AIX privilege escalationIBM AIX
- CVE-2023-43586Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user toZoom Video Communications Zoom Desktop Client for Windows,…
- CVE-2023-43585Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a Zoom Video Communications Zoom Mobile App for iOS and SDKs…
- CVE-2023-47624Audiobookshelf Arbitrary File Read Vulnerabilityadvplyr audiobookshelf
- CVE-2023-47619Audiobookshelf Server-Side Request Forgery and Arbitrary File Read Vulnerabilityadvplyr audiobookshelf
- CVE-2023-48702Jellyfin Possible Remote Code Execution via custom FFmpeg binaryjellyfin
- CVE-2023-46247Vyper has incorrect storage layout for contracts containing large arraysvyperlang vyper · vyper
- CVE-2023-46727GLPI SQL injection through inventory agent requestglpi-project glpi
- CVE-2023-46726GLPI Remote code execution from LDAP server configuration form on PHP 7.4glpi-project glpi
- CVE-2023-6790PAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web InterfacePalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2023-50768A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows attackers to connect to an aJenkins Project Jenkins Nexus Platform Plugin · org.sonatyp…
- CVE-2023-50766A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows attackers to send an HTTP reJenkins Project Jenkins Nexus Platform Plugin · org.sonatyp…
- CVE-2023-48639Adobe Substance 3D Designer 13.0.2 build 6942 Vulnerability IAdobe Substance3D - Designer
- CVE-2023-48633ZDI-CAN-22173: Adobe After Effects AEP File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe After Effects
- CVE-2023-48634ZDI-CAN-22175: Adobe After Effects AEP File Parsing Memory Corruption Remote Code Execution VulnerabilityAdobe After Effects
- CVE-2023-48632ZDI-CAN-22172: Adobe After Effects AEP File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe After Effects
- CVE-2023-48625Adobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability VIAdobe Substance3D - Sampler
- CVE-2023-48627Adobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability IVAdobe Substance3D - Sampler
- CVE-2023-48628Adobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability IIIAdobe Substance3D - Sampler
- CVE-2023-48630Adobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability IAdobe Substance3D - Sampler
- CVE-2023-48629Adobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability IIAdobe Substance3D - Sampler
- CVE-2023-48626Adobe Substance 3D Sampler v4.2.1Build3527 OOBW Vulnerability VAdobe Substance3D - Sampler
- CVE-2023-6722Relative Path Traversal in RepoxRepox
- CVE-2023-6721Improper Restriction of XML External Entity Reference in RepoxRepox
- CVE-2023-47063Adobe Illustrator 2023 CC 27.7 Memory Corruption Out-Of-Bounds-Write Vulnerability IV.Adobe Illustrator
- CVE-2023-47074ZDI-CAN-21812: Adobe Illustrator JP2 File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Illustrator
- CVE-2023-47075ZDI-CAN-22006: Adobe Illustrator JP2 File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Illustrator
- CVE-2023-44251** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in FoFortinet FortiWAN
- CVE-2023-44252** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and versiFortinet FortiWAN
- CVE-2023-31210Privilege escalation in agent via LD_LIBRARY_PATHCheckmk
- CVE-2022-22942The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by otherPhoton OS
- CVE-2023-46675Kibana Insertion of Sensitive Information into Log FileElastic Kibana
- CVE-2023-46671Kibana Insertion of Sensitive Information into Log FileElastic Kibana
- CVE-2023-48791An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in FortiPortal version 7.2.0, Fortinet FortiPortal
- CVE-2023-41678A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker toFortinet FortiOS · Fortinet FortiPAM
- CVE-2023-36639A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, FortiOS versions 7.4Fortinet FortiOS · Fortinet FortiPAM +1
- CVE-2022-27488A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 thFortinet FortiVoice · Fortinet FortiRecorder +3
- CVE-2023-48782A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.Fortinet FortiWLM
- CVE-2023-6478Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderpropertyRed Hat Enterprise Linux 6 Extended Lifecycle Support - EX…
- CVE-2023-6377Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actionsRed Hat Enterprise Linux 6 Extended Lifecycle Support - EX…
- CVE-2023-45801Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.This issue affects DVR: from 3.0.0 before 9.9.0.Nadatel DVR
- CVE-2023-45800Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hanbiro Hanbiro groupware allows InforHanbiro groupware
- CVE-2023-47320Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control.org.silverpeas.core:silverpeas-core-war · org.silverpeas.co…
- CVE-2023-47578Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices are susceptible to Cross Site Request Forgery (CSRF) attacks due to the absence of CSRF
Medium, low and unrated 103
- CVE-2023-21751Azure DevOps Server Spoofing VulnerabilityMicrosoft Azure DevOps Server
- CVE-2023-49646Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via networZoom Video Communications Zoom Clients
- CVE-2023-43583Cryptographic issues Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for Android and iOS before version 5.16.0 may allowZoom Video Communications Zoom Mobile App for Android, Zoom…
- CVE-2023-50709Denial of service attack on the cube-api endpointcube-js cube · @cubejs-backend/api-gateway
- CVE-2023-47620Scrypted reflected Cross-site Scripting vulnerabilitykoush scrypted · @scrypted/server
- CVE-2023-47623Scrypted reflected Cross-site Scripting vulnerabilitykoush scrypted · @scrypted/core
- CVE-2023-50262Dompdf possible DoS caused by infinite recursion when parsing SVG imagesdompdf · dompdf/dompdf
- CVE-2023-50268jq has stack-based buffer overflow in decNaNsjqlang jq
- CVE-2023-50248CKAN out of memory error when submitting the dataset form with a specially-crafted fieldckan
- CVE-2023-50246jq has heap-buffer-overflow vulnerability in the function decToString in decNumber.cjqlang jq
- CVE-2023-49878IBM System Storage Virtualization Engine information disclosureIBM System Storage Virtualization Engine
- CVE-2023-49877IBM System Storage Virtualization Engine information disclosureIBM System Storage Virtualization Engine
- CVE-2023-6775CodeAstro POS and Inventory Management System item_con cross site scriptingCodeAstro POS and Inventory Management System
- CVE-2023-6774CodeAstro POS and Inventory Management System register_account cross site scriptingCodeAstro POS and Inventory Management System
- CVE-2023-49296Arduino Create Agent vulnerable to Reflected Cross-Site Scriptingarduino-create-agent
- CVE-2023-6773CodeAstro POS and Inventory Management System User Creation register_account access controlCodeAstro POS and Inventory Management System
- CVE-2023-6772OTCMS ind_backstage.php sql injectionOTCMS
- CVE-2023-6793PAN-OS: XML API Keys Revoked by Read-Only PAN-OS AdministratorPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2023-6771SourceCodester Simple Student Attendance System actions.class.php save_attendance sql injectionSourceCodester Simple Student Attendance System
- CVE-2023-6791PAN-OS: Plaintext Disclosure of External System Integration CredentialsPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2023-6789PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web InterfacePalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2023-6795PAN-OS: OS Command Injection Vulnerability in the Web InterfacePalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2023-43813glpi Authenticated SQL Injectionglpi-project glpi
- CVE-2023-6794PAN-OS: File Upload Vulnerability in the Web InterfacePalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2023-6792PAN-OS: OS Command Injection Vulnerability in the XML APIPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2023-6767SourceCodester Wedding Guest e-Book add-guest.php cross site scriptingSourceCodester Wedding Guest e-Book
- CVE-2023-6766PHPGurukul Teacher Subject Allocation Management System Delete Course course.php cross-site request forgeryPHPGurukul Teacher Subject Allocation Management System
- CVE-2023-6765SourceCodester Online Tours & Travels Management System email_setup.php prepare sql injectionSourceCodester Online Tours & Travels Management System
- CVE-2023-50779Missing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with Overall/Read permission to connect to aJenkins Project Jenkins PaaSLane Estimate Plugin · com.clou…
- CVE-2023-50778A cross-site request forgery (CSRF) vulnerability in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allows attackers to connect to an atJenkins Project Jenkins PaaSLane Estimate Plugin · com.clou…
- CVE-2023-50777Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed on the job configuration form, incJenkins Project Jenkins PaaSLane Estimate Plugin · com.clou…
- CVE-2023-50776Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml files on the Jenkins Jenkins Project Jenkins PaaSLane Estimate Plugin · com.clou…
- CVE-2023-50775A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to copy jobs.Jenkins Project Jenkins Deployment Dashboard Plugin · org.j…
- CVE-2023-50774A cross-site request forgery (CSRF) vulnerability in Jenkins HTMLResource Plugin 1.02 and earlier allows attackers to delete arbitrary filesJenkins Project Jenkins HTMLResource Plugin · org.jenkins-c…
- CVE-2023-50773Jenkins Dingding JSON Pusher Plugin 2.0 and earlier does not mask access tokens displayed on the job configuration form, increasing the poteJenkins Project Jenkins Dingding JSON Pusher Plugin · com.z…
- CVE-2023-50772Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenkins controller whereJenkins Project Jenkins Dingding JSON Pusher Plugin · com.z…
- CVE-2023-50771Jenkins OpenId Connect Authentication Plugin 2.6 and earlier improperly determines that a redirect URL after login is legitimately pointing Jenkins Project Jenkins OpenId Connect Authentication Plugi…
- CVE-2023-50770Jenkins OpenId Connect Authentication Plugin 2.6 and earlier stores a password of a local user account used as an anti-lockout feature in a Jenkins Project Jenkins OpenId Connect Authentication Plugi…
- CVE-2023-50769Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permission to connect to Jenkins Project Jenkins Nexus Platform Plugin · org.sonatyp…
- CVE-2023-50767Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permission to send an HTTJenkins Project Jenkins Nexus Platform Plugin · org.sonatyp…
- CVE-2023-50765A missing permission check in Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier allows attackers with Overall/Read permission to read Jenkins Project Jenkins Scriptler Plugin · org.jenkins-ci.p…
- CVE-2023-50764Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier does not restrict a file name query parameter in an HTTP endpoint, allowing attackerJenkins Project Jenkins Scriptler Plugin · org.jenkins-ci.p…
- CVE-2023-6762Thecosy IceCMS Article permissionThecosy IceCMS
- CVE-2023-6761Thecosy IceCMS User Data access controlThecosy IceCMS
- CVE-2023-6760Thecosy IceCMS user sessionThecosy IceCMS
- CVE-2023-6759Thecosy IceCMS Love resource improper enforcement of a single, unique actionThecosy IceCMS
- CVE-2023-6758Thecosy IceCMS API PlanetCommentList access controlThecosy IceCMS
- CVE-2023-6757Thecosy IceCMS API PlanetUser information disclosureThecosy IceCMS
- CVE-2023-48638Adobe Substance 3D Designer 13.0.2 build 6942 Vulnerability IIIAdobe Substance3D - Designer
- CVE-2023-48637Adobe Substance 3D Designer 13.0.2 build 6942 Vulnerability IIAdobe Substance3D - Designer
- CVE-2023-48636Adobe Substance 3D Designer 13.0.2 build 6942 Vulnerability IVAdobe Substance3D - Designer
- CVE-2023-6756Thecosy IceCMS Captcha login excessive authenticationThecosy IceCMS
- CVE-2023-48635ZDI-CAN-22174: Adobe After Effects AEP File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe After Effects
- CVE-2023-47080Adobe Substance 3D Stager v2.1.1 Vulnerability VIAdobe Substance3D - Stager
- CVE-2023-47081Adobe Substance 3D Stager v2.1.1 Vulnerability IIAdobe Substance3D - Stager
- CVE-2023-47079ZDI-CAN-22279: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Dimension
- CVE-2023-47061ZDI-CAN-22278: Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Dimension
- CVE-2023-47062ZDI-CAN-22284: Adobe Dimension GLTF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Dimension
- CVE-2023-47078ZDI-CAN-22249: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Dimension
- CVE-2023-6755DedeBIZ content_batchup_action.php sql injectionDedeBIZ
- CVE-2023-44362ZDI-CAN-21791: Adobe Prelude MP4 File Uninitialized Variable Information Disclosure VulnerabilityAdobe Prelude
- CVE-2023-6380Open Redirect in Alkacon Software OpenCmsAlkacon Open CMS
- CVE-2023-6379Cross-site Scripting in Alkacon Software OpenCmsAlkacon Open CMS · org.opencms:opencms-core
- CVE-2023-6381Improper input validation in Newsletter Software SuperMailerSuperMailer Newsletter Software
- CVE-2023-6720Cross-site Scripting in RepoxRepox
- CVE-2023-47076Adobe InDesign CC 2023 Memory Corruption Vulnerability IV.Adobe InDesign Desktop
- CVE-2023-47077Adobe InDesign CC 2023 Memory Corruption Vulnerability VI.Adobe InDesign Desktop
- CVE-2023-6719Cross-site Scripting in RepoxRepox
- CVE-2023-6660NFS client data corruption and kernel memory disclosureFreeBSD
- CVE-2023-6534TCP spoofing vulnerability in pf(4)FreeBSD
- CVE-2023-47536An improper access control vulnerability [CWE-284] in FortiOS version 7.2.0, version 7.0.13 and below, version 6.4.14 and below and FortiProFortinet FortiOS · Fortinet FortiProxy
- CVE-2023-45725Apache CouchDB, IBM Cloudant: Privilege Escalation Using _design DocumentsApache Software Foundation Apache CouchDB · Apache Software…
- CVE-2023-40716An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line interpreter of FortiTester Fortinet FortiTester
- CVE-2023-41673An improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to reaFortinet FortiADC
- CVE-2023-41844A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through Fortinet FortiSandbox
- CVE-2023-46713An improper output neutralization for logs in Fortinet FortiWeb 6.2.0 - 6.2.8, 6.3.0 - 6.3.23, 7.0.0 - 7.0.9, 7.2.0 - 7.2.5 and 7.4.0 may alFortinet FortiWeb
- CVE-2023-45587An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 throughFortinet FortiSandbox
- CVE-2023-34194StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a
- CVE-2023-41618Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /admin/article.php?activ
- CVE-2023-41621A Cross Site Scripting (XSS) vulnerability was discovered in Emlog Pro v2.1.14 via the component /admin/store.php.
- CVE-2023-42483A TOCTOU race condition in Samsung Mobile Processor Exynos 9820, Exynos 980, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, and Exynos
- CVE-2023-43122Samsung Mobile Processor and Wearable Processor (Exynos 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, and W920) allow Information Disclosure
- CVE-2023-45864A race condition issue discovered in Samsung Mobile Processor Exynos 9820, 980, 1080, 2100, 2200, 1280, and 1380 allows unintended modificat
- CVE-2023-47321Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control via the "Porlet Deployer" which allows administrators to deploy .WAR portletorg.silverpeas.core:silverpeas-core-web
- CVE-2023-47322The "userModify" feature of Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) leading to privilege escalation.org.silverpeas.core:silverpeas-core-web
- CVE-2023-47323The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID parameter.org.silverpeas.core:silverpeas-core-api · org.silverpeas.co…
- CVE-2023-47324Silverpeas Core 6.3.1 is vulnerable to Cross Site Scripting (XSS) via the message/notification feature.org.silverpeas.core:silverpeas-core-web · org.silverpeas… +2
- CVE-2023-47325Silverpeas Core 6.3.1 administrative "Bin" feature is affected by broken access control.org.silverpeas.core:silverpeas-core-web
- CVE-2023-47326Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) via the Domain SQL Create function.org.silverpeas.core:silverpeas-core
- CVE-2023-47327The "Create a Space" feature in Silverpeas Core 6.3.1 is reserved for use by administrators.org.silverpeas.core:silverpeas-core-web
- CVE-2023-47573An issue discovered in Relyum RELY-PCIe 22.2.1 devices.
- CVE-2023-47574An issue was discovered on Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices.
- CVE-2023-47575An issue was discovered on Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices.
- CVE-2023-47576An issue was discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices, allowing authenticated command injection through the web int
- CVE-2023-47577An issue discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 allows for unauthorized password changes due to no check for current pass
- CVE-2023-47579Relyum RELY-PCIe 22.2.1 devices suffer from a system group misconfiguration, allowing read access to the central password hash file of the o
- CVE-2023-49363Rockoa <2.3.3 is vulnerable to SQL Injection.
- CVE-2023-50439ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission), ZED! for Windows before Q.2021.2 (ANSSI
- CVE-2023-50440ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows before Q.2021.2 (ANSSI
- CVE-2023-50441Encrypted folders created by PRIMX ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission) or ZONECENTRAL for Windows befor
- CVE-2023-50442Encrypted folders created by PRIMX ZONECENTRAL through 2023.5 can be modified by a local attacker (with appropriate privileges) so that spec
- CVE-2023-50443Encrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 (ANSSI qualification submission) or CRYHOD for Windows before 2023.5 can
- CVE-2023-50444By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows before Q.2