deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-0489
Published: 2025-01-15
Description: A vulnerability classified as critical was found in Fanli2012 native-php-cms 1.0. This vulnerability affects unknown code of the file /fladmin/friendlink_dodel.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/Fanli2012/native-php-cms/issues/11; https://github.com/Fanli2012/native-php-cms/issues/11#issue[PII_REDACTED]; https://vuldb.com/?ctiid.291934
CVE: CVE-2025-0490
Published: 2025-01-15
Description: A vulnerability, which was classified as critical, has been found in Fanli2012 native-php-cms 1.0. This issue affects some unknown processing of the file /fladmin/article_dodel.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/Fanli2012/native-php-cms/issues/12; https://github.com/Fanli2012/native-php-cms/issues/12#issue[PII_REDACTED]; https://vuldb.com/?ctiid.291935
CVE: CVE-2025-0491
Published: 2025-01-15
Description: A vulnerability, which was classified as critical, was found in Fanli2012 native-php-cms 1.0. Affected is an unknown function of the file /fladmin/cat_dodel.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/Fanli2012/native-php-cms/issues/13; https://github.com/Fanli2012/native-php-cms/issues/13#issue[PII_REDACTED]; https://vuldb.com/?ctiid.291936
CVE: CVE-2025-0492
Published: 2025-01-15
Description: A vulnerability has been found in D-Link DIR-823X 240126/240802 and classified as critical. Affected by this vulnerability is the function FUN_00412244. The manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.5 (HIGH)
CWE: CWE-404, CWE-476
References: https://tasty-foxtrot-3a8.notion.site/D-link-DIR-823X-FUN_00412244-NULL-Pointer-Dereference-1730448e619580fcb7f9d871c6e7190a; https://vuldb.com/?ctiid.291937; https://vuldb.com/?id.291937
CVE: CVE-2024-39967
Published: 2025-01-15
Description: Insecure permissions in Aginode GigaSwitch v5 allows attackers to access sensitive information via using the SCP command.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732
References: https://blog.hackvens.fr/advisories/CVE-2024-39967-CVE-2024-39219-GigaSwitch.html
CVE: CVE-2024-41453
Published: 2025-01-15
Description: A cross-site scripting (XSS) vulnerability in Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/php-lover-boy/processmaker; https://github.com/php-lover-boy/CVE-2024-41453_CVE-2024-41454
CVE: CVE-2024-41454
Published: 2025-01-15
Description: An arbitrary file upload vulnerability in the UI login page logo upload function of Process Maker pm4core-docker 4.1.21-RC7 allows attackers to execute arbitrary code via uploading a crafted PHP or HTML file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-434
References: https://github.com/php-lover-boy/processmaker
CVE: CVE-2024-53407
Published: 2025-01-15
Description: In Phiewer 4.1.0, a dylib injection leads to Command Execution which allow attackers to inject dylib file potentially leading to remote control and unauthorized access to sensitive user data.
CVSS Score: 3.3 (LOW)
CWE: CWE-426, CWE-426
References: https://github.com/SyFi/CVE-2024-53407
CVE: CVE-2024-55503
Published: 2025-01-15
Description: An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLD_INSERT_LIBRARIES component.
CVSS Score: 3.3 (LOW)
CWE: CWE-426, CWE-426
References: https://github.com/SyFi/CVE-2024-55503
CVE: CVE-2024-57726
Published: 2025-01-15
Description: SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-862
References: https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier; https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-57726
CVE: CVE-2024-57727
Published: 2025-01-15
Description: SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier; https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-57727
CVE: CVE-2024-57728
Published: 2025-01-15
Description: SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-59, CWE-22
References: https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier; https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-57728
CVE: CVE-2025-0215
Published: 2025-01-15
Description: The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the showdata and initiate_restore parameters in all versions up to, and including, 1.24.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick an admin user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/updraftplus/tags/1.24.12/includes/updraft-admin-common.js#L4404; https://plugins.trac.wordpress.org/browser/updraftplus/tags/1.24.12/includes/updraft-admin-common.js#L4439; https://www.wordfence.com/threat-intel/vulnerabilities/id/af568eea-59ce-467e-ba03-625d04d3db6e?source=cve
CVE: CVE-2025-22964
Published: 2025-01-15
Description: DDSN Interactive cm3 Acora CMS version 10.1.1 has an unauthenticated time-based blind SQL Injection vulnerability caused by insufficient input sanitization and validation in the "table" parameter. This flaw allows attackers to inject malicious SQL queries by directly incorporating user-supplied input into database queries without proper escaping or validation. Exploiting this issue enables unauthorized access, manipulation of data, or exposure of sensitive information, posing significant risks to the integrity and confidentiality of the application.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://github.com/padayali-JD/CVE-2025-22964
CVE: CVE-2025-22976
Published: 2025-01-15
Description: SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a local attacker to execute arbitrary code via not filtering the content correctly at the "checkOrder.php" shopId module.
CVSS Score: 7.1 (HIGH)
CWE: CWE-89
References: https://github.com/xiaosguang/cve/blob/main/dingfanzu/dingfanzu-CMS%20checkOrder.php%20shopId%20SQL-inject.md
CVE: CVE-2021-35684
Published: 2025-01-16
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is a duplicate of CVE-2022-21306.
CVE: CVE-2021-35685
Published: 2025-01-16
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is a duplicate of CVE-2022-21371
CVE: CVE-2022-21384
Published: 2025-01-16
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is a duplicate of CVE-2021-39275.
CVE: CVE-2025-0476
Published: 2025-01-16
Description: Mattermost Mobile Apps versions <=2.22.0 fail to properly handle specially crafted attachment names, which allows an attacker to crash the mobile app for any user who opened a channel containing the specially crafted attachment
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1287
References: https://mattermost.com/security-updates
CVE: CVE-2024-10401
Published: 2025-01-16
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-10970
Published: 2025-01-16
Description: The The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.4.43. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-94
References: https://plugins.trac.wordpress.org/browser/motors-car-dealership-classified-listings/tags/1.4.42/includes/functions.php#L939; https://www.wordfence.com/threat-intel/vulnerabilities/id/fc58c679-3e87-4bcc-b1bc-718ae52c291a?source=cve
CVE: CVE-2025-0170
Published: 2025-01-16
Description: The DWT - Directory & Listing WordPress Theme is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping on the 'sort_by' and 'token' parameters. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://scriptsbundle.gitbook.io/dwt-directory-and-listing-wordpress-theme; https://www.wordfence.com/threat-intel/vulnerabilities/id/d607e7c0-7812-4c77-a[PII_REDACTED]b3525?source=cve
CVE: CVE-2025-0455
Published: 2025-01-16
Description: The airPASS from NetVision Information has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.twcert.org.tw/en/cp-139-8358-143bc-2.html; https://www.twcert.org.tw/tw/cp-132-8357-28308-1.html
CVE: CVE-2025-0456
Published: 2025-01-16
Description: The airPASS from NetVision Information has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access the specific administrative functionality to retrieve * all accounts and passwords.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.twcert.org.tw/en/cp-139-8360-e97b8-2.html; https://www.twcert.org.tw/tw/cp-132-8359-53aa7-1.html
CVE: CVE-2025-0457
Published: 2025-01-16
Description: The airPASS from NetVision Information has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.twcert.org.tw/en/cp-139-8362-efb33-2.html; https://www.twcert.org.tw/tw/cp-132-8361-ff3fb-1.html
CVE: CVE-2025-22904
Published: 2025-01-16
Description: RE11S v1.11 was discovered to contain a stack overflow via the pptpUserName parameter in the setWAN function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: http://re11s.com; https://github.com/xyqer1/RE11S_1.11-setWAN-3-StackOverflow; https://www.edimax.com/edimax/global/
CVE: CVE-2025-22905
Published: 2025-01-16
Description: RE11S v1.11 was discovered to contain a command injection vulnerability via the command parameter at /goform/mp.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://re11s.com; https://github.com/xyqer1/RE11S_1.11-mp-CommandInjection; https://www.edimax.com/edimax/global/
CVE: CVE-2025-22906
Published: 2025-01-16
Description: RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /goform/setWAN.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://re11s.com; https://github.com/xyqer1/RE11S_1.11-setWAN-CommandInjection; https://www.edimax.com/edimax/global/
CVE: CVE-2025-22907
Published: 2025-01-16
Description: RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: http://re11s.com; https://github.com/xyqer1/RE11S_1.11-formWlSiteSurvey-StackOverflow; https://www.edimax.com/edimax/global/
CVE: CVE-2025-22912
Published: 2025-01-16
Description: RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://re11s.com; https://github.com/xyqer1/RE11S_1.11-formAccept-CommandInjection; https://www.edimax.com/edimax/global/
CVE: CVE-2025-22913
Published: 2025-01-16
Description: RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formStaDrvSetup function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/xyqer1/RE11S_1.11-formStaDrvSetup-StackOverflow; https://www.edimax.com/edimax/global/
CVE: CVE-2025-22916
Published: 2025-01-16
Description: RE11S v1.11 was discovered to contain a stack overflow via the pppUserName parameter in the formPPPoESetup function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: http://re11s.com; https://github.com/xyqer1/RE11S_1.11-formPPPoESetup-StackOverflow; https://www.edimax.com/edimax/global/
CVE: CVE-2024-10789
Published: 2025-01-16
Description: The WP User Profile Avatar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.5. This is due to missing or incorrect nonce validation on the wpupa_user_admin() function. This makes it possible for unauthenticated attackers to update the plugins setting which controls access to the functionality via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/changeset/3222923/; https://www.wordfence.com/threat-intel/vulnerabilities/id/b056cc98-3bd8-493a-bbf4-9bcee2e52d24?source=cve
CVE: CVE-2024-11452
Published: 2025-01-16
Description: The Chamber Dashboard Business Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'business_categories' shortcode in all versions up to, and including, 3.3.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/chamber-dashboard-business-directory/trunk/shortcodes/bus_cat_shortcode.php#L52; https://plugins.trac.wordpress.org/changeset/3222548/; https://www.wordfence.com/threat-intel/vulnerabilities/id/54e5989f-3d2c-4ed3-b4c4-f2589b885637?source=cve
CVE: CVE-2024-12226
Published: 2025-01-16
Description: In affected versions of the Octopus Kubernetes worker or agent, sensitive variables could be written to the Kubernetes script pod log in clear-text. This was identified in Version 2 however it was determined that this could also be achieved in Version 1 and the fix was applied to both versions accordingly.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532
References: https://advisories.octopus.com/post/2024/sa2024-10/
CVE: CVE-2024-45331
Published: 2025-01-16
Description: A incorrect privilege assignment in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15, FortiManager versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15, FortiAnalyzer Cloud versions 7.4.1 through 7.4.2, 7.2.1 through 7.2.6, 7.0.1 through 7.0.13, 6.4.1 through 6.4.7 allows attacker to escalate privilege via specific shell commands
CVSS Score: 7.3 (HIGH)
CWE: CWE-266
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-127
CVE: CVE-2024-48885
Published: 2025-01-16
Description: A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0 all versions, FortiWeb 7.6.0, FortiWeb 7.4.0 through 7.4.4, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions, FortiWeb 6.4 all versions allows attacker to escalate privilege via specially crafted packets.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-259
CVE: CVE-2024-12427
Published: 2025-01-16
Description: The Multi Step Form plugin for WordPress is vulnerable to unauthorized limited file upload due to a missing capability check on the fw_upload_file AJAX action in all versions up to, and including, 1.7.23. This makes it possible for unauthenticated attackers to upload limited file types such as images.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/multi-step-form/tags/1.7.22/includes/lib/msf-shortcode.class.php#L100; https://plugins.trac.wordpress.org/browser/multi-step-form/tags/1.7.22/includes/lib/msf-shortcode.class.php#L30; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3219723%40multi-step-form&new=3219723%40multi-step-form&sfp_email=&sfph_mail=
CVE: CVE-2024-12613
Published: 2025-01-16
Description: The Passwords Manager plugin for WordPress is vulnerable to SQL Injection via the $wpdb->prefix value in several AJAX fuctions in all versions up to, and including, 1.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/3221505/passwords-manager/trunk/include/pms-passwords-ajax-action.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/dec38992-a69f-4ccd-a23b-4dd1639897c3?source=cve
CVE: CVE-2024-12614
Published: 2025-01-16
Description: The Passwords Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'pms_save_setting' and 'post_new_pass' AJAX actions in all versions up to, and including, 1.4.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugins settings and add passwords.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-862
References: https://plugins.trac.wordpress.org/changeset/3221505/passwords-manager/trunk/include/pms-passwords-ajax-action.php; https://plugins.trac.wordpress.org/changeset/3221505/passwords-manager/trunk/include/pms-settings-ajax-action.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/898c5554-fd02-47a2-a1f9-1c488cfab57e?source=cve
CVE: CVE-2024-12615
Published: 2025-01-16
Description: The Passwords Manager plugin for WordPress is vulnerable to SQL Injection via the $wpdb->prefix value in several AJAX actions in all versions up to, and including, 1.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/3221505/passwords-manager/trunk/include/admin-page/addon/csv-export/index.php; https://plugins.trac.wordpress.org/changeset/3221505/passwords-manager/trunk/include/pms-categories-ajax-action.php; https://plugins.trac.wordpress.org/changeset/3221505/passwords-manager/trunk/include/pms-passwords-ajax-action.php
CVE: CVE-2024-13355
Published: 2025-01-16
Description: The Admin and Customer Messages After Order for WooCommerce: OrderConvo plugin for WordPress is vulnerable to limited file uploads due to insufficient file type validation in the upload_file() function in all versions up to, and including, 13.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload files on the affected site's server which may make remote code execution possible and is confirmed to make Cross-Site Scripting possible.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-434
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3222601%40admin-and-client-message-after-order-for-woocommerce&new=3222601%40admin-and-client-message-after-order-for-woocommerce&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/82cee07d-871a-4579-aa53-ca0d14315458?source=cve
CVE: CVE-2024-13387
Published: 2025-01-16
Description: The WP Responsive Tabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wprtabs' shortcode in all versions up to, and including, 1.2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3222481%40wp-responsive-tabs&new=3222481%40wp-responsive-tabs&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/39e58875-2f6e-453e-b33f-3d7a2a62b7b6?source=cve
CVE: CVE-2024-50563
Published: 2025-01-16
Description: A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3, FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to execute unauthorized code or commands via a brute-force attack.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1390
References: https://fortiguard.fortinet.com/psirt/FG-IR-24-221
CVE: CVE-2018-25108
Published: 2025-01-16
Description: An unauthenticated remote attacker can cause a DoS in the controller due to uncontrolled resource consumption.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://cert.vde.com/en/advisories/VDE-2018-013
CVE: CVE-2025-0471
Published: 2025-01-16
Description: Unrestricted file upload vulnerability in the PMB platform, affecting versions 4.0.10 and above. This vulnerability could allow an attacker to upload a file to gain remote access to the machine, being able to access, modify and execute commands freely.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-434
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-pmb-platform