Veille CVE

Mercredi 19 mars 2025

3 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 3 Tri : plus récentes
  1. CVE-2025-1316 – Non évaluée Exploitée

    Edimax IC-7100 IP Camera

    Edimax IC-7100 IP Camera OS Command Injection Vulnerability — Edimax IC-7100 IP camera contains an OS command injection vulnerability due to improper input sanitization that allows an attacker to achieve remote code execution via specially crafted requests. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

  2. CVE-2024-48248 – Non évaluée Exploitée

    NAKIVO Backup and Replication

    NAKIVO Backup and Replication Absolute Path Traversal Vulnerability — NAKIVO Backup and Replication contains an absolute path traversal vulnerability that enables an attacker to read arbitrary files.

  3. CVE-2017-12637 – Non évaluée Exploitée

    SAP NetWeaver

    SAP NetWeaver Directory Traversal Vulnerability — SAP NetWeaver Application Server (AS) Java contains a directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS that allows a remote attacker to read arbitrary files via a .. (dot dot) in the query string.