Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ogramming if the parent device does not have a driver. To address this problem, add a module owner pointer to the fpga_region struct and use it to take the module's refcount. Modify the functions for registering a region to take an additional owner module parameter and rename them to avoid conflicts. Use the old function names for helper macros that automatically set the module that registers the region as the owner. This ensures compatibility with existing low-level control modules and reduces the chances of registering a region without setting the owner. Also, update the documentation to keep it consistent with the new interface for registering an fpga region. Additional Analyst Notes: - C
documentation to keep it consistent with the new interface for registering an fpga region. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/26e6e25d742e29885cf44274fcf6b744366c4702 - https://git.kernel.org/stable/c/9b4eee8572dcf82b2ed17d9a328c7fb87df2f0e8 - https://git.kernel.org/stable/c/75a001914a8d2ccdcbe4b8cc7e94ac71d0e66093 - https://git.kernel.org/stable/c/4d7d12b643c00e7eea51b49a60a2ead182633ec8 - https://git.kernel.org/stable/c/2279c09c36165ccded4d506d11a7714e13b56019 - https://git.kernel.org/stable/c/b7c0e1ecee403a43abc89eb3e75672b01ff2ece9
CVE ID: CVE-2024-35248 State: PUBLISHED Published: 2024-06-11T17:00:05.663Z Last Updated: 2025-07-16T00:42:30.397Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics 365 Business Central 2023 Release Wave 1, Microsoft Dynamics 365 Business Central 2023 Release Wave 2, Microsoft Dynamics 365 Business Central 2024 Release Wave 1 Problem Types: CWE-1390 Description: Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35248
CVE ID: CVE-2024-35249 State: PUBLISHED Published: 2024-06-11T17:00:06.410Z Last Updated: 2025-07-16T00:42:30.968Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics 365 Business Central 2024 Release Wave 1, Microsoft Dynamics 365 Business Central 2023 Release Wave 1, Microsoft Dynamics 365 Business Central 2023 Release Wave 2 Problem Types: CWE-502 Description: Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35249
CVE ID: CVE-2024-35250 State: PUBLISHED Published: 2024-06-11T16:59:47.128Z Last Updated: 2025-10-21T22:56:22.583Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Servi
Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-822 Description: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/updat
ditional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35250
CVE ID: CVE-2024-35252 State: PUBLISHED Published: 2024-06-11T17:00:07.095Z Last Updated: 2025-07-16T00:42:31.532Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure Storage Problem Types: CWE-1104 Description: Azure Storage Movement Client Library Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35252
CVE ID: CVE-2024-35253 State: PUBLISHED Published: 2024-06-11T17:00:07.712Z Last Updated: 2025-07-16T00:42:32.085Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N/E:H/RL:O/RC:C) Vendors: Microsoft Products: Azure File Sync Problem Types: CWE-59 Description: Microsoft Azure File Sync Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35253
CVE ID: CVE-2024-35254 State: PUBLISHED Published: 2024-06-11T17:00:08.273Z Last Updated: 2025-07-16T00:42:32.664Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure Monitor Problem Types: CWE-59 Description: Azure Monitor Agent Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35254
CVE ID: CVE-2024-35255 State: PUBLISHED Published: 2024-06-11T16:59:47.754Z Last Updated: 2025-07-16T00:42:09.925Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure Identity Library for .NET, Microsoft Authentication Library, Azure Identity Library, Azure Identity Library for Java, Azure Identity Library for JavaScript, Azure Identity Library for C++, Azure Identity Library for Python Problem Types: CWE-362 Description: Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.mi
Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35255
CVE ID: CVE-2024-35256 State: PUBLISHED Published: 2024-07-09T17:02:57.698Z Last Updated: 2025-10-14T22:13:40.366Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2022 for (CU 13), Microsoft SQL Server 2019 for x64-based Systems (CU 27) Problem Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional A
em Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35256
CVE ID: CVE-2024-35260 State: PUBLISHED Published: 2024-06-27T17:32:27.606Z Last Updated: 2025-07-16T00:42:11.867Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Power Platform Problem Types: CWE-426 Description: An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35260
CVE ID: CVE-2024-35261 State: PUBLISHED Published: 2024-07-09T17:02:42.338Z Last Updated: 2025-10-14T22:13:25.054Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Network Watcher VM Extension Problem Types: CWE-59 Description: Azure Network Watcher VM Extension Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35261
CVE ID: CVE-2024-35263 State: PUBLISHED Published: 2024-06-11T17:00:08.880Z Last Updated: 2025-07-16T00:42:33.242Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics 365 (on-premises) version 9.1 Problem Types: CWE-200 Description: Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35263
CVE ID: CVE-2024-35264 State: PUBLISHED Published: 2024-07-09T17:02:10.148Z Last Updated: 2025-10-14T22:12:50.086Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: .NET 6.0, .NET 8.0, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.8, Microsoft Visual Studio 2022 version 17.10, Microsoft Visual Studio 2022 version 17.6 Problem Types: CWE-416 Description: .NET and Visual Studio Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35264
CVE ID: CVE-2024-35265 State: PUBLISHED Published: 2024-06-11T17:00:09.469Z Last Updated: 2025-07-16T00:42:33.727Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2 Problem Types: CWE-367 Description: Windows Perception Service Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35265
CVE ID: CVE-2024-35266 State: PUBLISHED Published: 2024-07-09T17:02:42.873Z Last Updated: 2025-10-14T22:13:25.553Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure DevOps Server 2022 Problem Types: CWE-79 Description: Azure DevOps Server Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35266
CVE ID: CVE-2024-35267 State: PUBLISHED Published: 2024-07-09T17:02:43.425Z Last Updated: 2025-10-14T22:13:26.126Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure DevOps Server 2022 Problem Types: CWE-79 Description: Azure DevOps Server Spoofing Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35267
CVE ID: CVE-2024-35270 State: PUBLISHED Published: 2024-07-09T17:02:10.777Z Last Updated: 2025-10-14T22:12:50.783Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 11 version 22H3, Windows 11 Version 23H2, Windows Server 2022, 23H2 Edition (Server Core installation), Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Ser
7, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-400 Description: Windows iSCSI Service Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35270
CVE ID: CVE-2024-35271 State: PUBLISHED Published: 2024-07-09T17:02:44.013Z Last Updated: 2025-10-14T22:13:26.765Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SQL Server 2017 (GDR), Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 27), Microsoft SQL Server 2022 for (CU 13) Problem Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional A
em Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35271
CVE ID: CVE-2024-35272 State: PUBLISHED Published: 2024-07-09T17:02:44.609Z Last Updated: 2025-10-14T22:13:27.399Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8), Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10), Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8, Microsoft Visual Studio 2022 version 17.10, Microsoft Visual Studio 2022 version 17.11, Microsoft SQL Server 2019 (GDR), Microsoft SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL
SQL Server 2016 Service Pack 3 (GDR), Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack, Microsoft SQL Server 2017 (CU 31), Microsoft SQL Server 2022 (GDR), Microsoft SQL Server 2019 for x64-based Systems (CU 27), Microsoft SQL Server 2022 for (CU 13) Problem Types: CWE-122 Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35272
CVE ID: CVE-2024-35273 State: PUBLISHED Published: 2025-01-14T14:08:54.379Z Last Updated: 2025-01-14T20:55:51.137Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C) Vendors: Fortinet Products: FortiAnalyzer, FortiManager Problem Types: CWE-787 Description: A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially crafted http requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-106
CVE ID: CVE-2024-35274 State: PUBLISHED Published: 2024-11-12T18:53:56.277Z Last Updated: 2024-11-12T19:59:39.467Z Severity: LOW (CVSS 2.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C) Vendors: Fortinet Products: FortiAnalyzer, FortiManager Problem Types: CWE-23 Description: An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiAnalyzer versions below 7.4.2, Fortinet FortiManager versions below 7.4.2 and Fortinet FortiAnalyzer-BigData version 7.4.0 and below 7.2.7 allows a privileged attacker with read write administrative privileges to create non-arbitrary files on a chosen directory via crafted CLI requests.
with read write administrative privileges to create non-arbitrary files on a chosen directory via crafted CLI requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-179
CVE ID: CVE-2024-35275 State: PUBLISHED Published: 2025-01-14T14:08:49.273Z Last Updated: 2025-01-14T20:56:22.260Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C) Vendors: Fortinet Products: FortiManager, FortiAnalyzer Problem Types: CWE-89 Description: A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, FortiManager version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially crafted http requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-091
CVE ID: CVE-2024-35276 State: PUBLISHED Published: 2025-01-14T14:08:50.740Z Last Updated: 2025-01-14T20:56:14.257Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:W/RC:R) Vendors: Fortinet Products: FortiAnalyzer, FortiManager Problem Types: CWE-121 Description: A stack-based buffer overflow in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiManager versions 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiManager Cloud versions 7.4.1 through 7.4.3, 7.2.1 through 7.2.5, 7.0.1 through 7.0.11, 6.4.1 through 6.4.7, FortiAnalyzer Cloud versions 7.4.1 t
.4.1 through 7.4.3, 7.2.1 through 7.2.5, 7.0.1 through 7.0.11, 6.4.1 through 6.4.7, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3, 7.2.1 through 7.2.5, 7.0.1 through 7.0.11, 6.4.1 through 6.4.7 allows attacker to execute unauthorized code or commands via specially crafted packets. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-165
CVE ID: CVE-2024-35277 State: PUBLISHED Published: 2025-01-14T14:09:54.348Z Last Updated: 2025-01-15T14:56:56.325Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:F/RL:U/RC:C) Vendors: Fortinet Products: FortiManager Problem Types: CWE-306 Description: A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0.15, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 allows attacker to access to the configuration of the managed devices by sending specifically crafted packets Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-
afted packets Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-135
CVE ID: CVE-2024-35278 State: PUBLISHED Published: 2025-01-14T14:09:45.115Z Last Updated: 2025-01-14T16:51:29.678Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiPortal Problem Types: CWE-89 Description: A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions 7.2.4 through 7.2.0 and 7.0.0 through 7.2.8 may allow an authenticated attacker to view the SQL query being run server-side when submitting an HTTP request, via including special elements in said request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/p
ents in said request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-086
CVE ID: CVE-2024-35279 State: PUBLISHED Published: 2025-02-11T16:09:02.911Z Last Updated: 2025-02-14T04:55:19.966Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C) Vendors: Fortinet Products: FortiOS Problem Types: CWE-121 Description: A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.4 through 7.2.8 and version 7.4.0 through 7.4.4 allows a remote unauthenticated attacker to execute arbitrary code or commands via crafted UDP packets through the CAPWAP control, provided the attacker were able to evade FortiOS stack protections and provided the fabric service is running on the exposed interface. Additional Analyst Notes: -
rtiOS stack protections and provided the fabric service is running on the exposed interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-160
CVE ID: CVE-2024-35280 State: PUBLISHED Published: 2025-01-15T10:07:14.953Z Last Updated: 2025-01-15T14:45:11.764Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiDeceptor Problem Types: CWE-79 Description: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiDeceptor 3.x all versions, 4.x all versions, 5.0 all versions, 5.1 all versions, version 5.2.0, and version 5.3.0 may allow an attacker to perform a reflected cross-site scripting attack in the recovery endpoints Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/F
overy endpoints Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-010
CVE ID: CVE-2024-35281 State: PUBLISHED Published: 2025-05-13T14:46:42.574Z Last Updated: 2025-05-13T15:17:58.536Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R) Vendors: Fortinet Products: FortiClientMac, FortiVoiceUCDesktop Problem Types: CWE-653 Description: An improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7.4.2 and below, version 7.2.8 and below, 7.0 all versions and FortiVoiceUCDesktop 3.0 all versions desktop application may allow an authenticated attacker to inject code via Electron environment variables. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/p
nvironment variables. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-025
CVE ID: CVE-2024-35282 State: PUBLISHED Published: 2024-09-10T14:37:46.189Z Last Updated: 2024-09-10T17:32:49.644Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:F/RL:X/RC:R) Vendors: Fortinet Products: FortiClientiOS Problem Types: CWE-316 Description: A cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting FortiClient VPN iOS 7.2 all versions, 7.0 all versions, 6.4 all versions, 6.2 all versions, 6.0 all versions may allow an unauthenticated attacker that has physical access to a jailbroken device to obtain cleartext passwords via keychain dump. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fort
xt passwords via keychain dump. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-139