Veille CVE

Semaine du 25 août au 31 août 2025

5 CVE

Critique 1 Élevée 3 Moyenne 0 Faible 0 Non évaluée 1 Tri : plus récentes
  1. CVE-2025-57819 9.8 Critique Exploitée

    FreePBX endpoint · Sangoma freepbx

    FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.

  2. CVE-2025-7775 – Non évaluée Exploitée

    Citrix NetScaler

    Citrix NetScaler Memory Overflow Vulnerability — Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial of service.

  3. CVE-2025-48384 8.0 Élevée Exploitée

    git · Git-scm git · Debian debian linux · Apple xcode

    Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.

  4. CVE-2024-8069 8.0 Élevée Exploitée

    Citrix Session Recording

    Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server

  5. CVE-2024-8068 8.0 Élevée Exploitée

    Citrix Session Recording

    Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain