Veille CVE

Semaine du 23 juin au 29 juin 2025

3 CVE

Critique 2 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Tri : plus récentes
  1. CVE-2024-54085 9.8 Critique Exploitée

    AMI MegaRAC-SPx · Ami megarac sp-x · Netapp h300s firmware · Netapp h500s firmware

    AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability.

  2. CVE-2024-0769 9.8 Critique Exploitée

    D-Link DIR-859 · dlink dir-859_firmware · Dlink dir-859 firmware

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-251666 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.

  3. CVE-2019-6693 6.5 Moyenne Exploitée Rançongiciel

    Fortinet FortiGate · Fortinet fortios

    Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup file to decipher the sensitive data, via knowledge of the hard-coded key. The aforementioned sensitive data includes users' passwords (except the administrator's password), private keys' passphrases and High Availability password (when set).