Veille CVE

Novembre 2025

7 CVE sur 50

Critique 7 Élevée 32 Moyenne 10 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2025-64446 9.8 Critique Exploitée

    Fortinet FortiWeb

    A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.

  2. CVE-2025-11367 9.8 Critique

    N-able N-central

    The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization

  3. CVE-2025-11366 9.8 Critique

    N-able N-central

    N-central < 2025.4 is vulnerable to authentication bypass via path traversal

  4. CVE-2025-12480 9.1 Critique Exploitée

    TrioFox · Gladinet triofox

    Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete.

  5. CVE-2025-62047 9.9 Critique

    Case-Themes Case Addons

    Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons case-addons.This issue affects Case Addons: from n/a through < 1.3.0.

  6. CVE-2025-58627 9.8 Critique

    kamleshyadav Miraculous Core Plugin

    Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous Core Plugin: from n/a through < 2.0.9.

  7. CVE-2025-48089 9.3 Critique

    Rainbow-Themes Education WordPress Theme | HiStudy

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rainbow-Themes Education WordPress Theme | HiStudy histudy allows SQL Injection.This issue affects Education WordPress Theme | HiStudy: from n/a through < 3.1.0.