Veille CVE

Jeudi 1 mai 2025

2 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 2 Tri : plus récentes
  1. CVE-2024-38475 – Non évaluée Exploitée

    Apache HTTP Server

    Apache HTTP Server Improper Escaping of Output Vulnerability — Apache HTTP Server contains an improper escaping of output vulnerability in mod_rewrite that allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure.

  2. CVE-2023-44221 – Non évaluée Exploitée

    SonicWall SMA100 Appliances

    SonicWall SMA100 Appliances OS Command Injection Vulnerability — SonicWall SMA100 appliances contain an OS command injection vulnerability in the SSL-VPN management interface that allows a remote, authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user.