deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-30805
Published: 2023-10-10
Description: The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary commands by sending a crafted HTTP POST request to the /LogInOut.php endpoint. This is due to mishandling of shell meta-characters in the "un" parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://aws.amazon.com/marketplace/pp/prodview-uujwjffddxzp4; https://labs.watchtowr.com/yet-more-unauth-remote-command-execution-vulns-in-firewalls-sangfor-edition/; https://vulncheck.com/advisories/sangfor-ngaf-username-rce
CVE: CVE-2023-30806
Published: 2023-10-10
Description: The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary commands by sending a crafted HTTP POST request to the /cgi-bin/login.cgi endpoint. This is due to mishandling of shell meta-characters in the PHPSESSID cookie.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://aws.amazon.com/marketplace/pp/prodview-uujwjffddxzp4; https://labs.watchtowr.com/yet-more-unauth-remote-command-execution-vulns-in-firewalls-sangfor-edition/; https://vulncheck.com/advisories/sangfor-ngaf-sessid-rce
CVE: CVE-2023-44471
Published: 2023-10-10
Description: Cross-Site Request Forgery (CSRF) vulnerability in Bernhard Kau Backend Localization plugin <= 2.1.10 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/kau-boys-backend-localization/wordpress-backend-localization-plugin-2-1-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/kau-boys-backend-localization/wordpress-backend-localization-plugin-2-1-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-44475
Published: 2023-10-10
Description: Cross-Site Request Forgery (CSRF) vulnerability in Michael Simpson Add Shortcodes Actions And Filters plugin <= 2.0.9 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/add-actions-and-filters/wordpress-add-shortcodes-actions-and-filters-plugin-2-0-9-multiple-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/add-actions-and-filters/wordpress-add-shortcodes-actions-and-filters-plugin-2-0-9-multiple-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-44476
Published: 2023-10-10
Description: Cross-Site Request Forgery (CSRF) vulnerability in Andres Felipe Perea V. CopyRightPro plugin <= 2.1 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/copyrightpro/wordpress-copyrightpro-plugin-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/copyrightpro/wordpress-copyrightpro-plugin-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-44994
Published: 2023-10-10
Description: Cross-Site Request Forgery (CSRF) vulnerability in Bainternet ShortCodes UI plugin <= 1.9.8 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/shortcodes-ui/wordpress-shortcodes-ui-plugin-1-9-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/shortcodes-ui/wordpress-shortcodes-ui-plugin-1-9-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-5489
Published: 2023-10-10
Description: A vulnerability classified as critical has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. This affects an unknown part of the file /Tool/uploadfile.php. The manipulation of the argument file_upload leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-241641 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/llixixi/cve/blob/main/s45_upload_%20uploadfile.md; https://vuldb.com/?ctiid.241641; https://vuldb.com/?id.241641
CVE: CVE-2023-5490
Published: 2023-10-10
Description: A vulnerability classified as critical was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. This vulnerability affects unknown code of the file /useratte/userattestation.php. The manipulation of the argument web_img leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-241642 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/llixixi/cve/blob/main/s45_upload_%20userattestation.md; https://vuldb.com/?ctiid.241642; https://vuldb.com/?id.241642
CVE: CVE-2023-5491
Published: 2023-10-10
Description: A vulnerability, which was classified as critical, has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. This issue affects some unknown processing of the file /sysmanage/updatelib.php. The manipulation of the argument file_upload leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-241643. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/llixixi/cve/blob/main/s45_upload_changelogo.md; https://vuldb.com/?ctiid.241643; https://vuldb.com/?id.241643
CVE: CVE-2023-43896
Published: 2023-10-10
Description: A buffer overflow in Macrium Reflect 8.1.7544 and below allows attackers to escalate privileges or execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: http://macrium.com; https://knowledgebase.macrium.com/display/KNOW80/CVE-2023-43896+Advisory; https://northwave-cybersecurity.com/vulnerability-notice/macrium-reflect-driver-out-of-bounds-write
CVE: CVE-2023-44995
Published: 2023-10-10
Description: Cross-Site Request Forgery (CSRF) vulnerability in WP Doctor WooCommerce Login Redirect plugin <= 2.2.4 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/woo-login-redirect/wordpress-woocommerce-login-redirect-plugin-2-2-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/woo-login-redirect/wordpress-woocommerce-login-redirect-plugin-2-2-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-44996
Published: 2023-10-10
Description: Cross-Site Request Forgery (CSRF) vulnerability in Naresh Parmar Post View Count plugin <= 1.8.2 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/wp-simple-post-view/wordpress-post-view-count-plugin-1-8-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-simple-post-view/wordpress-post-view-count-plugin-1-8-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-5492
Published: 2023-10-10
Description: A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. Affected is an unknown function of the file /sysmanage/licence.php. The manipulation of the argument file_upload leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-241644. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/llixixi/cve/blob/main/s45_upload_licence.md; https://vuldb.com/?ctiid.241644; https://vuldb.com/?id.241644
CVE: CVE-2023-5493
Published: 2023-10-10
Description: A vulnerability has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /useratte/web.php. The manipulation of the argument file_upload leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-241645 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/llixixi/cve/blob/main/s45_upload_web.md; https://vuldb.com/?ctiid.241645; https://vuldb.com/?id.241645
CVE: CVE-2023-5494
Published: 2023-10-10
Description: A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928 and classified as critical. Affected by this issue is some unknown functionality of the file /log/download.php. The manipulation of the argument file leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-241646 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-78
References: https://github.com/7332all/cve/blob/main/rce_1.md; https://vuldb.com/?ctiid.241646; https://vuldb.com/?id.241646
CVE: CVE-2020-27213
Published: 2023-10-10
Description: An issue was discovered in Ethernut Nut/OS 5.1. The code that generates Initial Sequence Numbers (ISNs) for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of current and future TCP connections and either hijack existing ones or spoof future ones. While the ISN generator seems to adhere to RFC 793 (where a global 32-bit counter is incremented roughly every 4 microseconds), proper ISN generation should aim to follow at least the specifications outlined in RFC 6528.
CVSS Score: 7.5 (HIGH)
CWE: CWE-330
References: http://lists.egnite.de/mailman/listinfo/en-nut-announce; http://www.ethernut.de/en/download/index.html; https://www.cisa.gov/news-events/ics-advisories/icsa-21-042-01
CVE: CVE-2020-27630
Published: 2023-10-10
Description: In Silicon Labs uC/TCP-IP 3.6.0, TCP ISNs are improperly random.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-330
References: https://www.cisa.gov/news-events/ics-advisories/icsa-21-042-01; https://www.forescout.com; https://www.forescout.com/resources/numberjack-weak-isn-generation-in-embedded-tcpip-stacks/
CVE: CVE-2020-27631
Published: 2023-10-10
Description: In Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-330
References: https://www.cisa.gov/news-events/ics-advisories/icsa-21-042-01; https://www.forescout.com; https://www.forescout.com/resources/numberjack-weak-isn-generation-in-embedded-tcpip-stacks/
CVE: CVE-2020-27633
Published: 2023-10-10
Description: In FNET 4.6.3, TCP ISNs are improperly random.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-330
References: https://www.cisa.gov/news-events/ics-advisories/icsa-21-042-01; https://www.forescout.com; https://www.forescout.com/resources/numberjack-weak-isn-generation-in-embedded-tcpip-stacks/
CVE: CVE-2020-27634
Published: 2023-10-10
Description: In Contiki 4.5, TCP ISNs are improperly random.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-330
References: https://www.cisa.gov/news-events/ics-advisories/icsa-21-042-01; https://www.forescout.com; https://www.forescout.com/resources/numberjack-weak-isn-generation-in-embedded-tcpip-stacks/
CVE: CVE-2020-27635
Published: 2023-10-10
Description: In PicoTCP 1.7.0, TCP ISNs are improperly random.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-330
References: https://www.cisa.gov/news-events/ics-advisories/icsa-21-042-01; https://www.forescout.com; https://www.forescout.com/resources/numberjack-weak-isn-generation-in-embedded-tcpip-stacks/
CVE: CVE-2020-27636
Published: 2023-10-10
Description: In Microchip MPLAB Net 3.6.1, TCP ISNs are improperly random.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-330
References: https://www.cisa.gov/news-events/ics-advisories/icsa-21-042-01; https://www.forescout.com; https://www.forescout.com/resources/numberjack-weak-isn-generation-in-embedded-tcpip-stacks/
CVE: CVE-2022-22298
Published: 2023-10-10
Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator version 1.0.0, FortiIsolator version 1.1.0, FortiIsolator version 1.2.0 through 1.2.2, FortiIsolator version 2.0.0 through 2.0.1, FortiIsolator version 2.1.0 through 2.1.2, FortiIsolator version 2.2.0, FortiIsolator version 2.3.0 through 2.3.4 allows attacker to execute arbitrary OS commands in the underlying shell via specially crafted input parameters.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://fortiguard.com/psirt/FG-IR-21-233; https://fortiguard.com/psirt/FG-IR-21-233
CVE: CVE-2023-25604
Published: 2023-10-10
Description: An insertion of sensitive information into log file vulnerability in Fortinet FortiGuest 1.0.0 allows a local attacker to access plaintext passwords in the RADIUS logs.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://fortiguard.com/psirt/FG-IR-23-052; https://fortiguard.com/psirt/FG-IR-23-052
CVE: CVE-2023-25607
Published: 2023-10-10
Description: An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78 ] in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions, FortiAnalyzer 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions and FortiADC  7.1.0, 7.0.0 through 7.0.3, 6.2 all versions, 6.1 all versions,  6.0 all versions management interface may allow an authenticated attacker with at least READ permissions on system settings to execute arbitrary commands on the underlying shell due to an unsafe usage of the wordexp function.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://fortiguard.com/psirt/FG-IR-22-352; https://fortiguard.com/psirt/FG-IR-22-352
CVE: CVE-2023-33301
Published: 2023-10-10
Description: An improper access control vulnerability in Fortinet FortiOS 7.2.0 - 7.2.4 and 7.4.0 allows an attacker to access a restricted resource from a non trusted host.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://fortiguard.com/psirt/FG-IR-23-139; https://fortiguard.com/psirt/FG-IR-23-139
CVE: CVE-2023-34985
Published: 2023-10-10
Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://fortiguard.com/psirt/FG-IR-23-141; https://fortiguard.com/psirt/FG-IR-23-141
CVE: CVE-2023-34986
Published: 2023-10-10
Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://fortiguard.com/psirt/FG-IR-23-141; https://fortiguard.com/psirt/FG-IR-23-141
CVE: CVE-2023-34987
Published: 2023-10-10
Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://fortiguard.com/psirt/FG-IR-23-141; https://fortiguard.com/psirt/FG-IR-23-141
CVE: CVE-2023-34988
Published: 2023-10-10
Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://fortiguard.com/psirt/FG-IR-23-141; https://fortiguard.com/psirt/FG-IR-23-141
CVE: CVE-2023-34989
Published: 2023-10-10
Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://fortiguard.com/psirt/FG-IR-23-141; https://fortiguard.com/psirt/FG-IR-23-141
CVE: CVE-2023-34992
Published: 2023-10-10
Description: A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet  allows attacker to execute unauthorized code or commands via crafted API requests.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://fortiguard.com/psirt/FG-IR-23-130; https://fortiguard.com/psirt/FG-IR-23-130
CVE: CVE-2023-34993
Published: 2023-10-10
Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://fortiguard.com/psirt/FG-IR-23-140; https://fortiguard.com/psirt/FG-IR-23-140
CVE: CVE-2023-36478
Published: 2023-10-10
Description: Eclipse Jetty provides a web server and servlet container. In versions 11.0.0 through 11.0.15, 10.0.0 through 10.0.15, and 9.0.0 through 9.4.52, an integer overflow in `MetaDataBuilder.checkSize` allows for HTTP/2 HPACK header values to
exceed their size limit. `MetaDataBuilder.java` determines if a header name or value exceeds the size limit, and throws an exception if the limit is exceeded. However, when length is very large and huffman is true, the multiplication by 4 in line 295
will overflow, and length will become negative. `(_size+length)` will now be negative, and the check on line 296 will not be triggered. Furthermore, `MetaDataBuilder.checkSize` allows for user-entered HPACK header value sizes to be negative, potentially leading to a very large buffer allocation later on when the user-entered size is multiplied by 2. This means that if a user provides a negative length value (or, more precisely, a length value which, when multiplied by the 4/3 fudge factor, is negative), and this length value is a very large positive number when multiplied by 2, then the user can cause a very large buffer to be allocated on the server. Users of HTTP/2 can be impacted by a remote denial of service attack. The issue has been fixed in versions 11.0.16, 10.0.16, and 9.4.53. There are no known workarounds.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-400, CWE-190
References: http://www.openwall.com/lists/oss-security/2023/10/18/4; https://github.com/eclipse/jetty.project/pull/9634; https://github.com/eclipse/jetty.project/releases/tag/jetty-10.0.16
CVE: CVE-2023-36547
Published: 2023-10-10
Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://fortiguard.com/psirt/FG-IR-23-140; https://fortiguard.com/psirt/FG-IR-23-140
CVE: CVE-2023-36548
Published: 2023-10-10
Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://fortiguard.com/psirt/FG-IR-23-140; https://fortiguard.com/psirt/FG-IR-23-140
CVE: CVE-2023-36549
Published: 2023-10-10
Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://fortiguard.com/psirt/FG-IR-23-140; https://fortiguard.com/psirt/FG-IR-23-140
CVE: CVE-2023-36550
Published: 2023-10-10
Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://fortiguard.com/psirt/FG-IR-23-140; https://fortiguard.com/psirt/FG-IR-23-140
CVE: CVE-2023-36555
Published: 2023-10-10
Description: An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiOS 7.2.0 - 7.2.4 allows an attacker to execute unauthorized code or commands via the SAML and Security Fabric components.
CVSS Score: 3.9 (LOW)
CWE: CWE-80, CWE-79
References: https://fortiguard.com/psirt/FG-IR-23-104; https://fortiguard.com/psirt/FG-IR-23-104
CVE: CVE-2023-36556
Published: 2023-10-10
Description: An incorrect authorization vulnerability [CWE-863] in FortiMail webmail version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.5 and below 6.4.7 allows an authenticated attacker to login on other users accounts from the same web domain via crafted HTTP or HTTPs requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863, CWE-863
References: https://fortiguard.com/psirt/FG-IR-23-202; https://fortiguard.com/psirt/FG-IR-23-202
CVE: CVE-2023-36637
Published: 2023-10-10
Description: An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiMail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to inject HTML tags in FortiMail's calendar via input fields.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://fortiguard.com/psirt/FG-IR-23-194; https://fortiguard.com/psirt/FG-IR-23-194
CVE: CVE-2023-37935
Published: 2023-10-10
Description: A use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.5 and 7.4.0 allows an attacker to view plaintext passwords of remote services such as RDP or VNC, if the attacker is able to read the GET requests to those services.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-598
References: https://fortiguard.com/psirt/FG-IR-23-120; https://fortiguard.com/psirt/FG-IR-23-120
CVE: CVE-2023-37939
Published: 2023-10-10
Description: An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions, Linux 7.2.0, 7.0 all versions, 6.4 all versions, 6.2 all versions and Mac 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions, 6.2 all versions, may allow a local authenticated attacker with no Administrative privileges to retrieve the list of files or folders excluded from malware scanning.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: https://fortiguard.com/psirt/FG-IR-22-235; https://fortiguard.com/psirt/FG-IR-22-235