FortiSIEM is a comprehensive, multi-vendor security information and event management (SIEM) solution designed to provide visibility, correlation, automated response, and remediation in a single, scalable solution.

FortiSIEM

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiSIEM version 7.3.0 through 7.3.1, 7.2.0 through 7.2.5, 7.1.0 through 7.1.7, 7.0.0 through 7.0.3 and before 6.7.9 allows an unauthenticated attacker to execute unauthorized code or commands via crafted CLI requests.

CVE-2025-25256

Linux

Linux Kernel

VulnCheck NVD++

NVIDIA Triton Inference Server, part of the NVIDIA AI platform and available with NVIDIA AI Enterprise, is open-source software that standardizes AI model deployment and execution across every workload.

Triton Inference Server

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds read by sending a request. A successful exploit of this vulnerability might lead to information disclosure.

CVE-2025-23334

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause the shared memory limit to be exceeded by sending a very large request. A successful exploit of this vulnerability might lead to information disclosure.

CVE-2025-23320

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds write by sending a request. A successful exploit of this vulnerability might lead to remote code execution, denial of service, data tampering, or information disclosure.

CVE-2025-23319

Trend Micro Apex One is an automated threat detection and response solution for endpoint protection. Apex One offers a single agent for physical, virtual, and cloud deployments.

Trend Micro Apex One Agent

Trend Micro Apex One is an automated threat detection and response solution that provides endpoint protection. Apex One offers a single agent for physical, virtual, and cloud deployments.

Trend Micro Apex One Server

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture.

CVE-2025-54987

Windows

Windows Cumulative Update

WordPress is a content management system paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system, referred to within WordPress as Themes.

WordPress

The Ebook Store WordPress plugin before 5.8015 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers.

CVE-2025-8113

Debian GNU/Linux is a Linux distribution composed of free and open-source software.

Linux Debian

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: limit repeated connections from clients with the same IP

Repeated connections from clients with the same IP address may exhaust
the max connections and prevent other normal client connections.
This patch limit repeated connections from clients with the same IP.

CVE-2025-38501

Debian

Debian Security Tracker

The Intl DateTime Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

CVE-2025-8293

The weichuncai(WP伪春菜) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to missing or incorrect nonce validation on the sm-options.php page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

CVE-2025-7686

The Last.fm Recent Album Artwork plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing or incorrect nonce validation on the 'lastfm_albums_artwork.php' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Identifiant CVE	Sévérité	Score	Technologies	Nom du composant	Exploit CISA KEV	A corrigé	Date de publication
CVE-2025-25256	CRITICAL	9.8	FortiSIEM	cpe:2.3:a:fortinet:fortisiem	Non	Oui	Aug 12, 2025
CVE-2025-23334	HIGH	7.5	Triton Inference Server	cpe:2.3:a:nvidia:triton_inference_server	Non	Oui	Aug 06, 2025
CVE-2025-23320	HIGH	7.5	Triton Inference Server	cpe:2.3:a:nvidia:triton_inference_server	Non	Oui	Aug 06, 2025
CVE-2025-23319	CRITICAL	9.8	Triton Inference Server	cpe:2.3:a:nvidia:triton_inference_server	Non	Oui	Aug 06, 2025
CVE-2025-54987	CRITICAL	9.8	Trend Micro Apex One Agent	cpe:2.3:a:trendmicro:apex_one	Non	Oui	Aug 05, 2025

Identifiant CVE	Sévérité	Score	Technologies	Nom du composant	Exploit CISA KEV	A corrigé	Date de publication
CVE-2025-8113	N/A	N/A	WordPress	ebook-store	Non	Oui	Aug 16, 2025
CVE-2025-38501	N/A	N/A	Linux Debian	linux	Non	Non	Aug 16, 2025
CVE-2025-8293	MEDIUM	6.4	WordPress	intl-datetime-calendar	Non	Non	Aug 16, 2025
CVE-2025-7686	MEDIUM	6.1	WordPress	weichuncai	Non	Non	Aug 16, 2025
CVE-2025-7684	MEDIUM	6.1	WordPress	lastfm-recent-album-artwork	Non	Non	Aug 16, 2025

Base de données de vulnérabilités Wiz

Explorer par technologie

Filtres populaires

Profil élevé

Dernier

Les vulnérabilités en chiffres

Le bon, le mauvais et le vulnérable

Ressources Wiz supplémentaires

PEACH

Prêt(e) à voir Wiz en action ?