Ivanti Endpoint Manager Mobile (EPMM), formerly MobileIron Core, through 11.10 allows remote attackers to access API without authentication.

An improper access control vulnerability been reported in Adobe ColdFusion. The vulnerability is due to improper validation of the URL path by the IPFilterUtils class.

An insecure deserialization vulnerability exists in Adobe ColdFusion. The vulnerability is due to deserialization of untrusted data when processing HTTP parameters sent to ColdFusion Component (CFC) endpoints. A remote, unauthenticated, attacker could exploit this vulnerability by sending crafted requests to the target server. Successful exploitation could result in arbitrary code execution in the security context of SYSTEM.

Citrix NetScaler ADC and NetScaler Gateway buffer overflow vulnerability, attacker can send crafted HTTP request to specific endpoint and trigger unauthenticated remote code execution.

Threat Encyclopedia

1233346

WEB Ivanti Endpoint Manager Mobile Unauthenticated API Access (CVE-2023-35078)

Critical

2023/08/31

1233505

WEB Adobe ColdFusion IPFilterUtils CVE-2023-38205 Improper Access Control

High

2023/08/31

1233358

WEB Adobe ColdFusion CVE-2023-38204 Insecure Deserialization

High

2023/08/31

1233308

WEB Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow (CVE-2023-3519)

Critical

2023/08/31