Veille CVE

Lundi 2 juin 2025

5 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 5 Tri : plus récentes
  1. CVE-2025-3935 – Non évaluée Exploitée

    ConnectWise ScreenConnect

    ConnectWise ScreenConnect Improper Authentication Vulnerability — ConnectWise ScreenConnect contains an improper authentication vulnerability. This vulnerability could allow a ViewState code injection attack, which could allow remote code execution if machine keys are compromised.

  2. CVE-2025-35939 – Non évaluée Exploitée

    Craft CMS Craft CMS

    Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability — Craft CMS contains an external control of assumed-immutable web parameter vulnerability. This vulnerability could allow an unauthenticated client to introduce arbitrary values, such as PHP code, to a known local file location on the server. This vulnerability could be chained with CVE-2024-58136 as represented by CVE-2025-32432.

  3. CVE-2024-56145 – Non évaluée Exploitée

    Craft CMS Craft CMS

    Craft CMS Code Injection Vulnerability — Craft CMS contains a code injection vulnerability. Users with affected versions are vulnerable to remote code execution if their php.ini configuration has `register_argc_argv` enabled.

  4. CVE-2023-39780 – Non évaluée Exploitée

    ASUS RT-AX55 Routers

    ASUS RT-AX55 Routers OS Command Injection Vulnerability — ASUS RT-AX55 devices contain an OS command injection vulnerability that could allow a remote, authenticated attacker to execute arbitrary commands. As represented by CVE-2023-41346.

  5. CVE-2021-32030 – Non évaluée Exploitée

    ASUS Routers

    ASUS Routers Improper Authentication Vulnerability — ASUS Lyra Mini and ASUS GT-AC2900 devices contain an improper authentication vulnerability that allows an attacker to gain unauthorized access to the administrative interface. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.