CVE Vulnerability Catalog

CVE-2025-25253 describes an improper validation of certificate with host mismatch vulnerability in FortiProxy and FortiOS, which may allow an unauthenticated attacker in a man-in-the-middle position to intercept and tamper with connections to the ZTNA proxy.

An Insufficient Session Expiration vulnerability (CWE-613) in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, and 6.4 all versions may allow a remote attacker (e.g., a former admin whose account was removed and session terminated) in possession of the SAML record of a user session to access or re-open that session via re-use of the SAML record.

Pakiety aktualizacji firmware UEFI firmy Clevo, w tym B10717.exe, przypadkowo zawierały prywatne klucze podpisowe używane do weryfikacji Boot Guard i Boot Policy Manifest. Ujawnienie tych kluczy może umożliwić atakującym podpisywanie złośliwego firmware'u, który wydaje się zaufany przez dotknięte systemy.

Stored XSS vulnerability in Centreon Infra Monitoring (HTTP Loader widget modules) due to improper input neutralization during web page generation. Affects versions from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, from 23.10.0 before 23.10.28.

Argo Workflows versions prior to 3.6.12 and 3.7.0 through 3.7.2 expose artifact repository credentials in plaintext in workflow-controller pod logs. An attacker with permissions to read pod logs in a namespace can read the logs and obtain credentials.

Argo Workflows versions prior to 3.6.12 and versions 3.7.0 through 3.7.2 contain a Zip Slip path traversal vulnerability in artifact extraction. During artifact extraction the unpack/untar logic uses filepath.Join(dest, filepath.Clean(header.Name)) without validating that header.Name stays within the intended extraction directory. A malicious archive entry can supply a traversal or absolute path that, after cleaning, overrides the destination directory and causes files to be written outside the /work/tmp extraction path and into system directories such as /etc inside the container. The vulnerability enables arbitrary file creation or overwrite in system configuration locations (for example /etc/passwd, /etc/hosts, /etc/crontab), which can lead to privilege escalation or persistence within the affected container. Update to 3.6.12 or 3.7.3 to remediate the issue.

OS Command Injection vulnerability in Centreon Infra Monitoring (Poller reload setup in the configuration modules). On the poller parameters page, a user with high privilege can concatenate custom instructions into the poller reload command.

A Stored XSS vulnerability in Centreon Infra Monitoring (SNMP traps group configuration modules) allows users with elevated privileges to inject malicious scripts. Affects versions from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, and from 23.10.0 before 23.10.28.

A Stored Cross-site Scripting (XSS) vulnerability in Centreon Infra Monitoring arises from improper neutralization of input during web page generation. Users with elevated privileges can inject malicious scripts in the ACL Resource access configuration modules. This affects versions from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, and from 23.10.0 before 23.10.28.

A Stored Cross-site Scripting (XSS) vulnerability in Centreon Infra Monitoring is caused by improper neutralization of input during web page generation. Users with elevated privileges can inject malicious scripts in the SNMP traps manufacturer configuration modules. This affects versions from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, and from 23.10.0 before 23.10.28.

IBM Content Navigator versions 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the application when using an application URL. Application files and folders become visible in the browser to a user; however, the contents of the files cannot be read or modified.

A path traversal vulnerability exists in the admin panel of Ivanti EPMM before versions 12.6.0.2, 12.5.0.4, and 12.4.0.4. A remote authenticated attacker with admin privileges can write data to unintended locations on disk.

OS command injection in the admin panel of Ivanti EPMM before versions 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

OS command injection in the admin panel of Ivanti EPMM before versions 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

OS command injection in the Ivanti EPMM admin panel before versions 12.6.0.2, 12.5.0.4, and 12.4.0.4. A remote authenticated attacker with admin privileges can achieve remote code execution.

Fortinet FortiVoice versions 7.2.0, 7.0.0 through 7.0.6, and before 6.4.10 contain two OS command injection vulnerabilities (CWE-78). A privileged attacker can execute arbitrary code or commands via crafted HTTP/HTTPS or CLI requests.

CVE-2025-33044 dotyczy podatności w BIOS-ie APTIOV, która pozwala atakującemu na niewłaściwe ograniczenie operacji w obrębie bufora pamięci. Skuteczne wykorzystanie tej podatności może prowadzić do uszkodzenia pamięci oraz wpływać na integralność i dostępność systemu.

APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local access. Successful exploitation of this vulnerability may lead to arbitrary code execution.

APTIOV zawiera podatność w BIOS, która pozwala atakującemu na wykonanie zapisu poza dozwolonym zakresem. Udane wykorzystanie tej podatności może prowadzić do uszkodzenia danych oraz utraty dostępności systemu.

APTIOV zawiera podatność w BIOS, która pozwala atakującemu na spowodowanie zapisu poza dozwolonym zakresem. Udana eksploitacja tej podatności może prowadzić do uszkodzenia danych oraz utraty dostępności.