Veille CVE

Semaine du 7 juillet au 13 juillet 2025

5 CVE

Critique 0 Élevée 2 Moyenne 0 Faible 0 Non évaluée 3 Tri : plus récentes
  1. CVE-2025-5777 7.5 Élevée Exploitée Rançongiciel

    NetScaler ADC · NetScaler Gateway · Citrix netscaler application delivery controller · Citrix netscaler gateway

    Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

  2. CVE-2019-9621 7.5 Élevée Exploitée

    Synacor zimbra collaboration suite

    Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component.

  3. CVE-2019-5418 – Non évaluée Exploitée

    Rails Ruby on Rails

    Rails Ruby on Rails Path Traversal Vulnerability — Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file contents.

  4. CVE-2016-10033 – Non évaluée Exploitée

    PHP PHPMailer

    PHPMailer Command Injection Vulnerability — PHPMailer contains a command injection vulnerability because it fails to sanitize user-supplied input. Specifically, this issue affects the 'mail()' function of 'class.phpmailer.php' script. An attacker can exploit this issue to execute arbitrary code within the context of the application. Failed exploit attempts will result in a denial-of-service condition.

  5. CVE-2014-3931 – Non évaluée Exploitée

    Looking Glass Multi-Router Looking Glass (MRLG)

    Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability — Multi-Router Looking Glass (MRLG) contains a buffer overflow vulnerability that could allow remote attackers to cause an arbitrary memory write and memory corruption.