Veille CVE

Semaine du 20 janvier au 26 janvier 2025

2 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 1 Tri : plus récentes
  1. CVE-2025-23006 – Non évaluée Exploitée Rançongiciel

    SonicWall SMA1000 Appliances

    SonicWall SMA1000 Appliances Deserialization Vulnerability — SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization of untrusted data vulnerability, which can enable a remote, unauthenticated attacker to execute arbitrary OS commands.

  2. CVE-2020-11023 6.1 Moyenne Exploitée

    jQuery · Jquery jquery · Debian debian linux · Fedoraproject fedora

    In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.