The NVIDIA Container Toolkit is a set of libraries that provide capabilities for leveraging the full potentials of NVIDIA GPUs within containers. It allows GPU-accelerated applications to be defined as Docker containers, functioning as a lightweight, stand-alone, executable package.

NVIDIA Container Toolkit

NVIDIA GPU Operator is a Kubernetes operator that simplifies and automates the management of NVIDIA GPUs in containerized environments. It handles the deployment and configuration of GPU drivers, device plugins, and monitoring tools on Kubernetes clusters. The GPU Operator enables seamless integration of GPU-accelerated workloads in cloud-native applications, making it easier for developers and administrators to leverage NVIDIA GPUs for AI, machine learning, and high-performance computing tasks.

NVIDIA GPU Operator

NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of service.

CVE-2025-23267

Linux

Linux Kernel

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.

CVE-2025-23266

SugarCRM is a customer relationship management (CRM) system, providing sales force automation, marketing campaigns, customer support, collaboration, and other tools to manage customer data.

SugarCRM

A PHP object injection vulnerability exists in SugarCRM versions prior to 6.5.24, 6.7.13, 7.5.2.5, 7.6.2.2, and 7.7.1.0 due to improper validation of PHP serialized input in the SugarRestSerialize.php script. The vulnerable code fails to sanitize the rest_data parameter before passing it to the unserialize() function. This allows an unauthenticated attacker to submit crafted serialized data containing malicious object declarations, resulting in arbitrary code execution within the application context. Although SugarCRM released a prior fix in advisory sugarcrm-sa-2016-001, the patch was incomplete and failed to address some vectors.

CVE-2025-25034

Windows

Windows Cumulative Update

Teleport is an open-source security tool that provides developers and system administrators with secure access to infrastructure resources such as servers (SSH) and Kubernetes clusters (K8s). It enforces role-based access control, supports various authentication methods, and captures audit logs for user sessions and actions. Teleport's focus on secure access, access control, and auditing makes it an essential solution for managing and securing modern infrastructure.

Teleport

Teleport provides connectivity, authentication, access controls and audit for infrastructure. Community Edition versions before and including 17.5.1 are vulnerable to remote authentication bypass. At time of posting, there is no available open-source patch.

CVE-2025-49825

GoLang

GitHub Advisory Database

Sitecore Experience Platform (XP) is an enterprise content management system (CMS), providing tools for content management, digital marketing, and analytics and reporting.

Sitecore Experience Platform (XP)

Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) versions 9.0 through 9.3 and 10.0 through 10.4 are affected by a Zip Slip vulnerability. A remote, authenticated attacker can exploit this issue by sending a crafted HTTP request to upload a ZIP archive containing path traversal sequences, allowing arbitrary file writes and leading to code execution.

CVE-2025-34510

Debian GNU/Linux is a Linux distribution composed of free and open-source software.

Linux Debian

Ubuntu is a Linux distribution based on Debian, mostly composed of free and open-source software. Ubuntu is officially released in three editions: Desktop, Server, and Core for internet of things devices and robots. All the editions can run on the computer alone or in a virtual machine.

Linux Ubuntu

Alpine Linux is a Linux distribution based on musl and BusyBox, designed for security, simplicity, and resource efficiency.

Linux Alpine

If a `named` caching resolver is configured with `serve-stale-enable` `yes`, and with `stale-answer-client-timeout` set to `0` (the only allowable value other than `disabled`), and if the resolver, in the process of resolving a query, encounters a CNAME chain involving a specific combination of cached or authoritative records, the daemon will abort with an assertion failure.
This issue affects BIND 9 versions 9.20.0 through 9.20.10, 9.21.0 through 9.21.9, and 9.20.9-S1 through 9.20.10-S1.

CVE-2025-40777

Alpine

Alpine Security Tracker

Debian

Debian Security Tracker

Ubuntu

Ubuntu Security Tracker

IBM WebSphere Application Server is a flexible, secure Java server runtime environment suitable for enterprise applications, microservices, and web applications.

IBM WebSphere Application Server

IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 are vulnerable to a denial of service, caused by a stack-based overflow.  An attacker can send a specially crafted request that cause the server to consume excessive memory resources.

CVE-2025-36097

VulnCheck NVD++

Cisco Identity Services Engine (ISE) is a network administration and security platform that provides secure access control, device profiling, and policy enforcement. It enables organizations to manage network access across wired, wireless, and VPN connections while ensuring compliance with security policies.

Cisco ISE

A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerability.

This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to obtain root privileges on an affected device.

CVE-2025-20337

A vulnerability in the IP Access Restriction feature of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to bypass configured IP access restrictions and log in to the device from a disallowed IP address.

This vulnerability is due to improper enforcement of access controls that are configured using the IP Access Restriction feature. An attacker could exploit this vulnerability by logging in to the API from an unauthorized source IP address. A successful exploit could allow the attacker to gain access to the targeted device from an IP address that should have been restricted. To exploit this vulnerability, the attacker must have valid administrative credentials.

CVE-2025-20285

A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root.

This vulnerability is due to insufficient validation of user-supplied input. An attacker with valid credentials could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to execute commands as the root user. To exploit this vulnerability, the attacker must have valid high-privileged credentials.

Identifiant CVE	Sévérité	Score	Technologies	Nom du composant	Exploit CISA KEV	A corrigé	Date de publication
CVE-2025-23267	HIGH	8.5	NVIDIA Container Toolkit	cpe:2.3:a:nvidia:nvidia_container_toolkit	Non	Oui	Jul 15, 2025
CVE-2025-23266	CRITICAL	9	NVIDIA Container Toolkit	cpe:2.3:a:nvidia:nvidia_container_toolkit	Non	Oui	Jul 15, 2025
CVE-2025-25034	CRITICAL	9.3	SugarCRM	cpe:2.3:a:sugarcrm:sugarcrm	Non	Oui	Jun 20, 2025
CVE-2025-49825	CRITICAL	9.8	Teleport	github.com/gravitational/teleport	Non	Oui	Jun 17, 2025
CVE-2025-34510	HIGH	8.8	Sitecore Experience Platform (XP)	cpe:2.3:a:sitecore:experience_platform	Non	Non	Jun 17, 2025

Identifiant CVE	Sévérité	Score	Technologies	Nom du composant	Exploit CISA KEV	A corrigé	Date de publication
CVE-2025-40777	HIGH	7.5	Linux Debian	bind	Non	Oui	Jul 16, 2025
CVE-2025-36097	HIGH	7.5	IBM WebSphere Application Server	cpe:2.3:a:ibm:websphere_application_server	Non	Oui	Jul 16, 2025
CVE-2025-20337	CRITICAL	10	Cisco ISE	cpe:2.3:a:cisco:identity_services_engine	Non	Non	Jul 16, 2025
CVE-2025-20285	MEDIUM	4.1	Cisco ISE	cpe:2.3:a:cisco:identity_services_engine	Non	Oui	Jul 16, 2025
CVE-2025-20284	MEDIUM	6.5	Cisco ISE	cpe:2.3:a:cisco:identity_services_engine	Non	Non	Jul 16, 2025

Base de données de vulnérabilités Wiz

Explorer par technologie

Filtres populaires

Profil élevé

Dernier

Les vulnérabilités en chiffres

Le bon, le mauvais et le vulnérable

Ressources Wiz supplémentaires

PEACH

Prêt(e) à voir Wiz en action ?