by Kastro CVE-2024-55591 · Fortinet FortiOS
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,101 matching vulnerabilities · Page 376 of 783
Fortinet
CVE-2024-48884 · Fortinet FortiOS
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6…
CVE-2023-37936 · Fortinet FortiSwitch
A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 thr…
CVE-2024-23106 · Fortinet FortiClientEMS
An improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version 7.2.0 through 7.2.4 and before 7.0.10 al…
CVE-2024-47571 · Fortinet FortiManager
An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper…
CVE-2024-48886 · Fortinet FortiOS
A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15,…
CVE-2024-35276 · Fortinet FortiAnalyzer
A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyz…
mitre
CVE-2024-48760 · mitre
An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function.
CVE-2024-57763 · mitre
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField.
CVE-2024-57764 · mitre
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add.
CVE-2024-57811 · mitre
In Eaton X303 3.5.16 - X303 3.5.17 Build 712, an attacker with network access to a XC-303 PLC can login as root over SSH.
CVE-2024-46310 · mitre
Incorrect Access Control in Cfx.re FXServer v9601 and earlier allows unauthenticated users to modify and read arbitrary user data via exp…
CVE-2024-57471 · mitre
H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 2.4G wireless network processing…
CVE-2024-57473 · mitre
H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address editing function.
CVE-2024-57482 · mitre
H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 5G wireless network processing fu…
CVE-2024-57479 · mitre
H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address update function.
CVE-2024-57480 · mitre
H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the AP configuration function.
CVE-2024-57483 · mitre
Tenda i24 V2.0.0.5 is vulnerable to Buffer Overflow in the addWifiMacFilter function.
CVE-2024-57766 · mitre
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField.
Wavlink
CVE-2024-38666 · Wavlink Wavlink AC3000
An external config control vulnerability exists in the openvpn.cgi openvpn_client_setup() functionality of Wavlink AC3000 M33A8.V5030.210…
CVE-2024-39280 · Wavlink Wavlink AC3000
An external config control vulnerability exists in the nas.cgi set_smb_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505.
CVE-2024-39360 · Wavlink Wavlink AC3000
An os command injection vulnerability exists in the nas.cgi remove_dir() functionality of Wavlink AC3000 M33A8.V5030.210505.
CVE-2024-39784 · Wavlink Wavlink AC3000
Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505.
CVE-2024-39785 · Wavlink Wavlink AC3000
Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505.
CVE-2024-39602 · Wavlink Wavlink AC3000
An external config control vulnerability exists in the nas.cgi set_nas() functionality of Wavlink AC3000 M33A8.V5030.210505.
CVE-2024-39786 · Wavlink Wavlink AC3000
Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505.
CVE-2024-39787 · Wavlink Wavlink AC3000
Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505.
CVE-2024-39798 · Wavlink Wavlink AC3000
Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V…
CVE-2024-39800 · Wavlink Wavlink AC3000
Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V…
CVE-2024-39788 · Wavlink Wavlink AC3000
Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505.
CVE-2024-39790 · Wavlink Wavlink AC3000
Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505.
CVE-2024-39793 · Wavlink Wavlink AC3000
Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505.
CVE-2024-39795 · Wavlink Wavlink AC3000
Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505.
CVE-2024-39799 · Wavlink Wavlink AC3000
Multiple external config control vulnerabilities exists in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V…
CVE-2024-39801 · Wavlink Wavlink AC3000
Multiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505.
CVE-2024-39789 · Wavlink Wavlink AC3000
Multiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505.
CVE-2024-39794 · Wavlink Wavlink AC3000
Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505.
Y'S corporation
StellarWP
Venki
SAP_SE
CVE-2025-0070 · SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform
Improper Authentication in SAP NetWeaver ABAP Server and ABAP Platform
CVE-2025-0066 · SAP_SE SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)
Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework)
CVE-2025-0061 · SAP_SE SAP BusinessObjects Business Intelligence Platform
Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform
cozmoslabs
CVE-2024-12919 · cozmoslabs Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_id
Siemens
HCL Software
CVE-2024-42180 · HCL Software DRYiCE MyXalytics