Base de données CVE
Archive des vulnérabilités connues (CVE) avec score CVSS, gravité, produits et éditeurs concernés. Filtrez par année et par sévérité.
- CVE-2025-2749Élevée7.2
An authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload arbitrary data to path relative locations. This results in path traversal and arbitrary file upload, including content that can be executed server side leading to remote code execution.This issue affects Kentico Xperience through 13.0.178.
- CVE-2025-2747Critique9.8
An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through 13.0.178.
- CVE-2025-2746Critique9.8
An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server password handling of empty SHA1 usernames in digest authentication. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through 13.0.172.
- CVE-2025-30208Moyenne5.3
Vite, fournisseur d’outils de développement frontend, présente une vulnérabilité dans les versions antérieures à 6.2.3, 6.1.2, 6.0.12, 5.4.15 et 4.5.10. `@fs` refuse l’accès aux fichiers situés en dehors de la liste d’autorisation de diffusion de Vite. L’ajout de `?raw??` ou de `?import&raw??` à l’URL contourne cette limitation et renvoie le contenu du fichier s’il existe. Ce contournement est possible parce que les séparateurs finaux tels que `?` sont supprimés à plusieurs endroits, mais ne sont pas pris en compte dans les expressions régulières des chaînes de requête. Le contenu de fichiers arbitraires peut être renvoyé au navigateur. Seules les applications exposant explicitement le serveur de développement Vite au réseau (à l’aide de `--host` ou de l’option de configuration `server.host`) sont concernées. Les versions 6.2.3, 6.1.2, 6.0.12, 5.4.15 et 4.5.10 corrigent le problème.
- CVE-2025-30154Élevée8.6
reviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was compromised March 11, 2025, between 18:42 and 20:31 UTC, with malicious code added that dumps exposed secrets to Github Actions Workflow Logs. Other reviewdog actions that use `reviewdog/action-setup@v1` that would also be compromised, regardless of version or pinning method, are reviewdog/action-shellcheck, reviewdog/action-composite-template, reviewdog/action-staticcheck, reviewdog/action-ast-grep, and reviewdog/action-typos.
- CVE-2025-30066Élevée8.6
tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were affected on 2025-03-14 and 2025-03-15 because they were modified by a threat actor to point at commit 0e58ed8, which contained malicious updateFeatures code.)
- CVE-2025-27915Moyenne5.4
Un problème a été découvert dans Zimbra Collaboration (ZCS) 9.0 et 10.0 et 10.1. Une vulnérabilité de type stored cross-site scripting (XSS) existe dans le Classic Web Client en raison d'un assainissement insuffisant du contenu HTML dans les fichiers ICS. Lorsqu'un utilisateur consulte un message e-mail contenant une entrée ICS malveillante, son JavaScript intégré s'exécute via un événement ontoggle à l'intérieur d'une balise <details>. Cela permet à un attaquant d'exécuter du JavaScript arbitraire dans la session de la victime, pouvant conduire à des actions non autorisées telles que la configuration de filtres e-mail pour rediriger les messages vers une adresse contrôlée par l'attaquant. En conséquence, un attaquant peut effectuer des actions non autorisées sur le compte de la victime, y compris la redirection des e-mails et l'exfiltration de données.
- CVE-2025-21590Moyenne4.4
An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity of the device. A local attacker with access to the shell is able to inject arbitrary code which can compromise an affected device. This issue is not exploitable from the Junos CLI. This issue affects Junos OS: * All versions before 21.2R3-S9, * 21.4 versions before 21.4R3-S10, * 22.2 versions before 22.2R3-S6, * 22.4 versions before 22.4R3-S6, * 23.2 versions before 23.2R2-S3, * 23.4 versions before 23.4R2-S4, * 24.2 versions before 24.2R1-S2, 24.2R2.
- CVE-2025-24201Critique10.0
Une vulnérabilité d'écriture hors limites a été corrigée grâce à des vérifications renforcées afin d'empêcher des actions non autorisées. Ce problème est corrigé dans Safari 18.3.1, iOS 15.8.4 et iPadOS 15.8.4, iOS 16.7.11 et iPadOS 16.7.11, iOS 18.3.2 et iPadOS 18.3.2, iPadOS 17.7.6, macOS Sequoia 15.3.2, visionOS 2.3.2, watchOS 11.4. Du contenu web conçu de manière malveillante peut être capable de sortir du bac à sable de Web Content. Il s'agit d'un correctif complémentaire pour une attaque bloquée dans iOS 17.2. (Apple a connaissance d'un signalement indiquant que ce problème pourrait avoir été exploité lors d'une attaque extrêmement sophistiquée visant des personnes spécifiques sur des versions d'iOS antérieures à iOS 17.2.)
- CVE-2025-26633Élevée7.0
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
- CVE-2025-24993Élevée7.8
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
- CVE-2025-24991Moyenne5.5
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
- CVE-2025-24985Élevée7.8
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
- CVE-2025-24984Moyenne4.6
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
- CVE-2025-24983Élevée7.0
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2025-24054Moyenne6.5
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
- CVE-2025-27363Élevée8.1
An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild.
- CVE-2024-54085Critique9.8
AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.
- CVE-2025-24813Critique9.8
Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through 10.1.34, from 9.0.0.M1 through 9.0.98. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. If all of the following were true, a malicious user was able to view security sensitive files and/or inject content into those files: - writes enabled for the default servlet (disabled by default) - support for partial PUT (enabled by default) - a target URL for security sensitive uploads that was a sub-directory of a target URL for public uploads - attacker knowledge of the names of security sensitive files being uploaded - the security sensitive files also being uploaded via partial PUT If all of the following were true, a malicious user was able to perform remote code execution: - writes enabled for the default servlet (disabled by default) - support for partial PUT (enabled by default) - application was using Tomcat's file based session persistence with the default storage location - application included a library that may be leveraged in a deserialization attack Users are recommended to upgrade to version 11.0.3, 10.1.35 or 9.0.99, which fixes the issue.
- CVE-2025-1316Critique9.8
Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device
This product uses the NVD API but is not endorsed or certified by the NVD.