Veille CVE

Mai 2025

2 CVE sur 10

Critique 2 Élevée 4 Moyenne 4 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2025-4632 9.8 Critique Exploitée

    Samsung Electronics MagicINFO 9 Server · Samsung magicinfo 9 server

    Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority.

  2. CVE-2025-2776 9.8 Critique Exploitée

    SysAid On-Prem · Sysaid sysaid

    SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.