Veille CVE

Mai 2025

3 CVE

Critique 0 Élevée 1 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2025-48928 4.0 Moyenne Exploitée

    TeleMessage service · Smarsh telemessage

    The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump, as exploited in the wild in May 2025.

  2. CVE-2025-4008 8.8 Élevée Exploitée

    Smartbedded MeteoBridge · Smartbedded meteobridge vm · Smartbedded meteobridge firmware

    The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C. This web interface exposes an endpoint that is vulnerable to command injection. Remote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.

  3. CVE-2025-47729 4.9 Moyenne Exploitée

    TeleMessage archiving backend · Telemessage text message archiver

    The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as exploited in the wild in May 2025.