PULSE
FEED
ransomqilin reclama a Insurance Audit Services · US · Financial Servicesransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomqilin reclama a Insurance Audit Services · US · Financial Servicesransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Education
← Todos os CVEs
CVE Watch—

CVE-2023-29492

Novi Survey Insecure Deserialization Vulnerability

CVSS

—

Sem CVSS

EPSS

2.7%

p86

KEV

SIM

13 de abr. de 2023

Exploit Today

76

0-100

Publicado: — · Última mod.: —

EPSS · 30d
2.7%EPSS · 30 dias2.7%
2026-10-082026-11-05
Ficha do catálogo KEV

Produto

Novi Survey / Novi Survey

Vulnerabilidade

Novi Survey Insecure Deserialization Vulnerability

Adicionado ao KEV

13 de abr. de 2023

Corrigir até

4 de mai. de 2023

Uso conhecido em ransomware

Não

Descrição resumida

Novi Survey contains an insecure deserialization vulnerability that allows remote attackers to execute code on the server in the context of the service account.

Ação necessária

Apply updates per vendor instructions.

Notas

https://novisurvey.net/blog/novi-survey-security-advisory-apr-2023.aspx; https://nvd.nist.gov/vuln/detail/CVE-2023-29492

CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.