Veille CVE

Novembre 2025

46 CVE

Critique 5 Élevée 30 Moyenne 10 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2025-62593 8.8 Élevée Exploitée

    ray-project ray · Anyscale ray

    Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-based attacks, as the current defense uses the User-Agent header starting with the string "Mozilla" as a defense mechanism. This defense is insufficient as the fetch specification allows the User-Agent header to be modified. Combined with a DNS rebinding attack against the browser, and this vulnerability is exploitable against a developer running Ray who inadvertently visits a malicious website, or is served a malicious advertisement (malvertising). This issue has been patched in version 2.52.0.

  2. CVE-2025-66020 7.5 Élevée

    open-circle valibot

    Valibot helps validate data using a schema. In versions from 0.31.0 to 1.1.0, the EMOJI_REGEX used in the emoji action is vulnerable to a Regular Expression Denial of Service (ReDoS) attack. A short, maliciously crafted string (e.g., <100 characters) can cause the regex engine to consume excessive CPU time (minutes), leading to a Denial of Service (DoS) for the application. This issue has been patched in version 1.2.0.

  3. CVE-2025-66056 4.3 Moyenne

    Uncanny Owl Uncanny Automator

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Retrieve Embedded Sensitive Data.This issue affects Uncanny Automator: from n/a through < 6.10.0.

  4. CVE-2025-34336 6.9 Moyenne

    eGovFramework/egovframe-common-components

    eGovFramework/egovframe-common-components versions up to and including 4.3.1 contain an unauthenticated file upload vulnerability via the /utl/wed/insertImage.do and /utl/wed/insertImageCk.do image upload endpoints. These controllers accept multipart requests without authentication, pass the uploaded content to a shared upload helper, and store the file on the server under a framework-controlled path. The framework then returns a download URL that can be used to retrieve the uploaded content, including an attacker-controlled Content-Type within the limits of the image upload functionality. While a filename extension whitelist is enforced, the attacker fully controls the file contents. The response MIME type used is also attacker-controlled when the file is served up to version < 4.1.2. Since version 4.1.2, it is possible to download any image uploaded with any whitelisted content type. But any file uploaded other than an image will be served with the `application/octet-stream` content type (the content type is no longer controlled by the attacker since version 4.1.2). This enables an unauthenticated attacker to use any affected application as a persistent file hosting service for arbitrary content under the application's origin. KISA/KrCERT has identified this unpatched vulnerability as "KVE-2023-5280."

  5. CVE-2025-40936 7.8 Élevée

    Siemens PS/IGES Parasolid Translator Component · Siemens Simcenter Femap · Siemens Solid Edge

    A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29.0.258), Simcenter Femap (All versions < V2512.0003), Solid Edge (All versions < V226.00 Update 03). The affected applications contains an out of bounds read vulnerability while parsing specially crafted IGS files. This could allow an attacker to crash the application or execute code in the context of the current process. (ZDI-CAN-26755)

  6. CVE-2025-40834 5.7 Moyenne

    Siemens Mendix RichText

    A vulnerability has been identified in Mendix RichText (All versions >= V4.0.0 < V4.6.1). Affected widget does not properly neutralize the input. This could allow an attacker to execute cross-site scripting attacks.

  7. CVE-2022-4984 8.7 Élevée

    Qingdao Esoft Tianchuang Network Technology Co., Ltd. ZenTao Biz · Qingdao Esoft Tianchuang Network Technology Co., Ltd. ZenTao Max · Qingdao Esoft Tianchuang Network Technology Co., Ltd. ZenTao Open Source Edition

    ZenTao Biz < 6.5, ZenTao Max < 3.0, ZenTao Open Source Edition < 16.5, and ZenTao Open Source Edition < 16.5.beta1 contain an SQL injection vulnerability in the login functionality. The application does not properly validate the account parameter on /zentao/user-login.html before using it in a database query. A remote unauthenticated attacker can exploit this issue to execute crafted SQL expressions and retrieve sensitive information from the backend database, including user and application data. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-07 UTC.

  8. CVE-2025-9316 6.9 Moyenne

    N-able N-central

    N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.

  9. CVE-2025-11700 7.5 Élevée

    N-able N-central

    N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure

  10. CVE-2025-11367 9.8 Critique

    N-able N-central

    The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deserialization

  11. CVE-2025-11366 9.8 Critique

    N-able N-central

    N-central < 2025.4 is vulnerable to authentication bypass via path traversal

  12. CVE-2025-40827 7.8 Élevée

    Siemens Software Center · Siemens Solid Edge SE2025

    A vulnerability has been identified in Siemens Software Center (All versions < V3.5), Solid Edge SE2025 (All versions < V225.0 Update 10). The affected application is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system.

  13. CVE-2025-40760 5.5 Moyenne

    Siemens Altair Grid Engine

    A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly handle error messages and discloses sensitive password hash information when processing user authentication requests. This could allow a local attacker to extract password hashes for privileged accounts, which can then be subjected to offline brute-force attacks.

  14. CVE-2024-32011 8.8 Élevée

    Siemens Spectrum Power 4

    A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to run arbitrary commands via the user interface. This user interface can be used via the network and allows the execution of commands as administrative application user.

  15. CVE-2024-32010 7.8 Élevée

    Siemens Spectrum Power 4

    A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to extraction of database credentials via a world-readable credential file. This allows an attacker to connect to the database as privileged application user and to run system commands via the database.

  16. CVE-2024-32009 7.8 Élevée

    Siemens Spectrum Power 4

    A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to wrongly set permissions to a binary which allows any local attacker to gain administrative privileges.

  17. CVE-2024-32008 7.8 Élevée

    Siemens Spectrum Power 4

    A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to an exposed debug interface on the localhost. This allows any local user to gain code execution as administrative application user.

  18. CVE-2025-13032 7.8 Élevée

    Avast (Free/Premiium/Ultimeat) Antivirus · Avsat One · AVG (Free/Inernet Security/Ultimate) Antivirus · Avast antivirus

    Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3  on windows allows local attacker to escalate privelages via pool overflow.

  19. CVE-2025-13020 8.8 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.

  20. CVE-2025-13019 8.1 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Same-origin policy bypass in the DOM: Workers component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.

  21. CVE-2025-13018 8.1 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.

  22. CVE-2025-13017 8.1 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Same-origin policy bypass in the DOM: Notifications component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.

  23. CVE-2025-13016 7.5 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.

  24. CVE-2025-13015 3.4 Faible

    Mozilla Firefox

    Spoofing issue in Firefox. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30.

  25. CVE-2025-13014 8.8 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5.

  26. CVE-2025-13013 6.1 Moyenne

    Mozilla Firefox · Mozilla Thunderbird

    Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5.

  27. CVE-2025-13012 7.5 Élevée

    Mozilla Firefox · Mozilla Thunderbird

    Race condition in the Graphics component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5.

  28. CVE-2025-62066 7.5 Élevée

    fuelthemes Revolution

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes Revolution revolution.This issue affects Revolution: from n/a through < 2.5.8.

  29. CVE-2025-62057 7.1 Élevée

    favethemes Houzez Theme - Functionality

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes Houzez Theme - Functionality houzez-theme-functionality.This issue affects Houzez Theme - Functionality: from n/a through < 4.2.0.

  30. CVE-2025-62055 8.1 Élevée

    Elated-Themes Academist

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Academist academist.This issue affects Academist: from n/a through < 1.3.

  31. CVE-2025-62053 8.1 Élevée

    favethemes Houzez

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in favethemes Houzez houzez.This issue affects Houzez: from n/a through < 4.2.0.

  32. CVE-2025-62047 9.9 Critique

    Case-Themes Case Addons

    Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons case-addons.This issue affects Case Addons: from n/a through < 1.3.0.

  33. CVE-2025-62037 6.5 Moyenne

    uxper Togo

    Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.

  34. CVE-2025-62036 7.1 Élevée

    uxper Togo

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.

  35. CVE-2025-62035 8.8 Élevée

    uxper Togo

    Deserialization of Untrusted Data vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.

  36. CVE-2025-62034 8.8 Élevée

    uxper Togo

    Incorrect Privilege Assignment vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.

  37. CVE-2025-62033 6.5 Moyenne

    uxper Togo

    Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.

  38. CVE-2025-62032 6.5 Moyenne

    tagDiv Cloud Library

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Cloud Library td-cloud-library allows DOM-Based XSS.This issue affects tagDiv Cloud Library: from n/a through < 3.9.2.

  39. CVE-2025-62028 4.3 Moyenne

    ThemeNectar Salient

    Missing Authorization vulnerability in ThemeNectar Salient salient.This issue affects Salient: from n/a through < 17.4.0.

  40. CVE-2025-59556 7.1 Élevée

    skygroup GoStore

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup GoStore gostore allows Reflected XSS.This issue affects GoStore: from n/a through < 1.6.4.

  41. CVE-2025-58964 7.1 Élevée

    skygroup Enzy

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Enzy enzy allows Reflected XSS.This issue affects Enzy: from n/a through < 1.6.4.

  42. CVE-2025-58629 7.5 Élevée

    kamleshyadav Miraculous

    Missing Authorization vulnerability in kamleshyadav Miraculous miraculous allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous: from n/a through < 2.0.9.

  43. CVE-2025-58627 9.8 Critique

    kamleshyadav Miraculous Core Plugin

    Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous Core Plugin: from n/a through < 2.0.9.

  44. CVE-2025-48090 8.1 Élevée

    CocoBasic Blanka - One Page WordPress Theme

    Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme blanka-wp allows PHP Local File Inclusion.This issue affects Blanka - One Page WordPress Theme: from n/a through < 1.5.

  45. CVE-2025-48089 9.3 Critique

    Rainbow-Themes Education WordPress Theme | HiStudy

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rainbow-Themes Education WordPress Theme | HiStudy histudy allows SQL Injection.This issue affects Education WordPress Theme | HiStudy: from n/a through < 3.1.0.

  46. CVE-2025-39463 7.5 Élevée

    Select-Themes Dessau

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Dessau dessau allows PHP Local File Inclusion.This issue affects Dessau: from n/a through < 1.9.