NVIDIA Triton Inference Server, part of the NVIDIA AI platform and available with NVIDIA AI Enterprise, is open-source software that standardizes AI model deployment and execution across every workload.

Triton Inference Server

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds read by sending a request. A successful exploit of this vulnerability might lead to information disclosure.

CVE-2025-23334

Linux

Linux Kernel

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause the shared memory limit to be exceeded by sending a very large request. A successful exploit of this vulnerability might lead to information disclosure.

CVE-2025-23320

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds write by sending a request. A successful exploit of this vulnerability might lead to remote code execution, denial of service, data tampering, or information disclosure.

CVE-2025-23319

Trend Micro Apex One is an automated threat detection and response solution for endpoint protection. Apex One offers a single agent for physical, virtual, and cloud deployments.

Trend Micro Apex One Agent

Trend Micro Apex One is an automated threat detection and response solution that provides endpoint protection. Apex One offers a single agent for physical, virtual, and cloud deployments.

Trend Micro Apex One Server

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture.

CVE-2025-54987

Windows

Windows Cumulative Update

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

CVE-2025-54948

WordPress is a content management system paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system, referred to within WordPress as Themes.

WordPress

The LatePoint  WordPress plugin before 5.1.94 is vulnerable to Local File Inclusion via the layout parameter. This makes it possible for attackers to include and execute PHP files on the server, allowing the execution of any PHP code in those files.

CVE-2025-6715

The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.3 via deserialization of untrusted input in the get_lead_detail function. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain in the Contact Form 7 plugin, which is likely to be used alongside, allows attackers to delete arbitrary files, leading to a denial of service or remote code execution when the wp-config.php file is deleted.

CVE-2025-7384

The OceanWP theme for WordPress is vulnerable to Cross-Site Request Forgery in versions 4.0.9 to 4.1.1. This is due to missing or incorrect nonce validation on the oceanwp_notice_button_click() function. This makes it possible for unauthenticated attackers to install the Ocean Extra plugin via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

CVE-2025-8891

The Easy restaurant menu manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.2. This is due to missing or incorrect nonce validation on the nsc_eprm_save_menu() function. This makes it possible for unauthenticated attackers to upload a menu file via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

CVE-2025-8491

Several WordPress plugins using elFinder versions 2.1.64 and prior are vulnerable to Directory Traversal in various versions. This makes it possible for unauthenticated attackers to delete arbitrary files. Successful exploitation of this vulnerability requires a site owner to explicitly make an instance of the file manager available to users.

CVE ID	Severidad	Puntuación	Tecnologías	Nombre del componente	Exploit de CISA KEV	Tiene arreglo	Fecha de publicación
CVE-2025-23334	HIGH	7.5	Triton Inference Server	cpe:2.3:a:nvidia:triton_inference_server	No	Sí	Aug 06, 2025
CVE-2025-23320	HIGH	7.5	Triton Inference Server	cpe:2.3:a:nvidia:triton_inference_server	No	Sí	Aug 06, 2025
CVE-2025-23319	CRITICAL	9.8	Triton Inference Server	cpe:2.3:a:nvidia:triton_inference_server	No	Sí	Aug 06, 2025
CVE-2025-54987	CRITICAL	9.8	Trend Micro Apex One Agent	cpe:2.3:a:trendmicro:apex_one	No	Sí	Aug 05, 2025
CVE-2025-54948	CRITICAL	9.8	Trend Micro Apex One Agent	cpe:2.3:a:trendmicro:apex_one	No	Sí	Aug 05, 2025

CVE ID	Severidad	Puntuación	Tecnologías	Nombre del componente	Exploit de CISA KEV	Tiene arreglo	Fecha de publicación
CVE-2025-6715	N/A	N/A	WordPress	latepoint	No	Sí	Aug 13, 2025
CVE-2025-7384	CRITICAL	9.8	WordPress	contact-form-entries	No	Sí	Aug 13, 2025
CVE-2025-8891	MEDIUM	4.3	WordPress	oceanwp	No	Sí	Aug 13, 2025
CVE-2025-8491	MEDIUM	4.3	WordPress	easy-pdf-restaurant-menu-upload	No	Sí	Aug 13, 2025
CVE-2025-0818	MEDIUM	6.5	WordPress	file-manager-advanced	No	Sí	Aug 13, 2025

Base de datos de vulnerabilidades de Wiz

Explorar por tecnología

Filtros populares

Alto perfil

Último

Vulnerabilidades en cifras

Lo bueno, lo malo y lo vulnerable

Recursos adicionales de Wiz

¿Listo para ver a Wiz en acción?