Veille CVE

Lundi 29 septembre 2025

5 CVE

Critique 1 Élevée 1 Moyenne 0 Faible 0 Non évaluée 3 Tri : plus récentes
  1. CVE-2025-10035 9.8 Critique Exploitée Rançongiciel

    Fortra GoAnywhere MFT · Fortra goanywhere managed file transfer

    A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.

  2. CVE-2021-21311 7.2 Élevée Exploitée

    vrana adminer · Adminer adminer · Debian debian linux

    Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is fixed in version 4.7.9.

  3. CVE-2025-59689 – Non évaluée Exploitée

    Libraesva Email Security Gateway

    Libraesva Email Security Gateway Command Injection Vulnerability — Libraesva Email Security Gateway (ESG) contains a command injection vulnerability which allows command injection via a compressed e-mail attachment.

  4. CVE-2025-32463 – Non évaluée Exploitée

    Sudo Sudo

    Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability — Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.

  5. CVE-2025-20352 – Non évaluée Exploitée

    Cisco IOS and IOS XE

    Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability — Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remote code execution. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system.