Veille CVE

Vendredi 2 mai 2025

2 CVE

Critique 2 Élevée 0 Moyenne 0 Faible 0 Non évaluée 0 Tri : plus récentes
  1. CVE-2025-34028 10.0 Critique Exploitée

    Commvault Command Center Innovation Release · Commvault commvault

    The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when expanded by the target server, are vulnerable to path traversal vulnerability that can result in Remote Code Execution via malicious JSP. This issue affects Command Center Innovation Release: 11.38.0 to 11.38.20. The vulnerability is fixed in 11.38.20 with SP38-CU20-433 and SP38-CU20-436 and also fixed in 11.38.25 with SP38-CU25-434 and SP38-CU25-438.

  2. CVE-2024-58136 9.8 Critique Exploitée

    yiiframework Yii

    Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regression, as exploited in the wild in February through April 2025.