Veille CVE

Jeudi 30 octobre 2025

2 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 2 Tri : plus récentes
  1. CVE-2025-41244 – Non évaluée Exploitée

    Broadcom VMware Aria Operations and VMware Tools

    Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability — Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.

  2. CVE-2025-24893 – Non évaluée Exploitée

    XWiki Platform

    XWiki Platform Eval Injection Vulnerability — XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch.