CVE & CWE, restez informé

CVE-2025-31484 - CRITICAL
02/04/2025

conda-forge infrastructure holds common configurations and settings for key pieces of the conda-forge infrastructure. Between 2025-02-10 and 2025-04-01, conda-forge infrastructure used the wrong token for Azure's cf-staging access. This bug meant that any feedstock maintainer could upload a package to the conda-forge channel, bypassing our feedstock-token + upload process. The security logs on ana...

OWSAP: A01

>> Plus d'informations avec CVE Find

CVE-2025-31477 - CRITICAL
02/04/2025

The Tauri shell plugin allows access to the system shell. Prior to 2.2.1, the Tauri shell plugin exposes functionality to execute code and open programs on the system. The open endpoint of this plugin is designed to allow open functionality with the system opener (e.g. xdg-open on Linux). This was meant to be restricted to a reasonable number of protocols like https or mailto by default. This defa...

OWSAP: A03

>> Plus d'informations avec CVE Find

CVE-2025-31479 - HIGH
02/04/2025

canonical/get-workflow-version-action is a GitHub composite action to get commit SHA that GitHub Actions reusable workflow was called with. Prior to 1.0.1, if the get-workflow-version-action step fails, the exception output may include the GITHUB_TOKEN. If the full token is included in the exception output, GitHub will automatically redact the secret from the GitHub Actions logs. However, the toke...

OWSAP: A09

>> Plus d'informations avec CVE Find

CVE-2025-31722 - HIGH
02/04/2025

In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox protection, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.

codeinjectionOWSAP: A03

>> Plus d'informations avec CVE Find

CVE-2024-45064 - HIGH
02/04/2025

A buffer overflow vulnerability exists in the FileX Internal RAM interface functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted set of network packets can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability.

overflow

>> Plus d'informations avec CVE Find

CVE-2025-2005 - CRITICAL
02/04/2025

The Front End Users plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the file uploads field of the registration form in all versions up to, and including, 3.2.32. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

fileinclusionOWSAP: A04

>> Plus d'informations avec CVE Find

CVE-2025-3063 - HIGH
02/04/2025

The Shopper Approved Reviews plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ajax_callback_update_sa_option() function in versions 2.0 to 2.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be...

authorisationproblemOWSAP: A01

>> Plus d'informations avec CVE Find

CVE-2023-40714 - CRITICAL
02/04/2025

A relative path traversal in Fortinet FortiSIEM versions 7.0.0, 6.7.0 through 6.7.2, 6.6.0 through 6.6.3, 6.5.1, 6.5.0 allows attacker to escalate privilege via uploading certain GUI elements

OWSAP: A01

>> Plus d'informations avec CVE Find

CVE-2024-39780 - HIGH
02/04/2025

A YAML deserialization vulnerability was found in the Robot Operating System (ROS) 'dynparam', a command-line tool for getting, setting, and deleting parameters of a dynamically configurable node, affecting ROS distributions Noetic and earlier. The issue is caused by the use of the yaml.load() function in the 'set' and 'get' verbs, and allows for the creation of arbitrary Python objects. Through t...

OWSAP: A08OWSAP: A03

>> Plus d'informations avec CVE Find

CVE-2025-0676 - HIGH
02/04/2025

This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit improper input validation to inject and execute systems commands. Successful exploitation could result in privilege escalation, allowing the attacker to gain root shell access and maintain persistent control over the device, potentially disrupting network...

oscommandinjectionOWSAP: A03

>> Plus d'informations avec CVE Find

CVE-2024-36465 - HIGH
02/04/2025

A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter.

sqlinjectionOWSAP: A03

>> Plus d'informations avec CVE Find

CVE-2025-0415 - CRITICAL
02/04/2025

A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for downstream systems that rely on its network services.

oscommandinjectionOWSAP: A03

>> Plus d'informations avec CVE Find

CVE-2025-25060 - HIGH
02/04/2025

Missing authentication for critical function vulnerability exists in AssetView and AssetView CLOUD. If exploited, the files on the server where the product is running may be obtained and/or deleted by a remote unauthenticated attacker.

authorisationproblemOWSAP: A07

>> Plus d'informations avec CVE Find

CVE-2025-3066 - HIGH
02/04/2025

Use after free in Navigations in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

memorycorruption

>> Plus d'informations avec CVE Find

CVE-2025-3067 - HIGH
02/04/2025

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted app. (Chromium security severity: Medium)

CVE-2025-30356 - CRITICAL
01/04/2025

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. In 1.3.3 and earlier, a heap buffer overflow vulnerability persists in the Crypto_TC_ApplySecurity function due to an incomplete validation check on the fl (frame length...

overflow

>> Plus d'informations avec CVE Find

CVE-2025-30580 - CRITICAL
01/04/2025

Improper Control of Generation of Code ('Code Injection') vulnerability in NotFound DigiWidgets Image Editor allows Remote Code Inclusion. This issue affects DigiWidgets Image Editor: from n/a through 1.10.

codeinjectionOWSAP: A03

>> Plus d'informations avec CVE Find

CVE-2025-30807 - CRITICAL
01/04/2025

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Martin Nguyen Next-Cart Store to WooCommerce Migration allows SQL Injection. This issue affects Next-Cart Store to WooCommerce Migration: from n/a through 3.9.4.

sqlinjectionOWSAP: A03

>> Plus d'informations avec CVE Find

CVE-2025-30825 - HIGH
01/04/2025

Missing Authorization vulnerability in WPClever WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce allows Privilege Escalation. This issue affects WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce: from n/a through 1.3.5.

authorisationproblemOWSAP: A01

>> Plus d'informations avec CVE Find

CVE-2025-30841 - CRITICAL
01/04/2025

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in adamskaat Countdown & Clock allows Remote Code Inclusion. This issue affects Countdown & Clock: from n/a through 2.8.8.

directorytraversalOWSAP: A01

>> Plus d'informations avec CVE Find