Retour à la veille
CVE-2025-7958
Description détaillée
A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details.
Références et Patchs
Dernières Vulnérabilités
CVE-2026-9699
Mattermost Plugins versions <=11.6 10.18.11 11.3.6 11.6.5.0 fail to sanitize error responses from the OpenAI API before logging, which allows a user with access to server logs or support packets to obtain a valid or partially reconstructable OpenAI API key via inspection of mattermost.log entries generated during authentication failures. Mattermost Advisory ID: MMSA-2026-00609
VOIR DÉTAILS
CVE-2026-57667
Sales Representative SQL Injection in Groundhogg <= 4.5 versions.
VOIR DÉTAILS
CVE-2026-57665
Unauthenticated Insecure Direct Object References (IDOR) in GravityView <= 3.0.0 versions.
VOIR DÉTAILS