rainbutterfly/cve_corpus huggingface dataset:
CVE-2024-45310 runc can be confused to create empty files/directories on the host
runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by sharing a volume between two containers and exploiting a race with `os.MkdirAll`. While this could be used to create empty files, existing files would not be truncated. An attacker must have the ability to start containers using some kind of custom volume configuration. Containers using user namespaces are still affected, but the scope of places an attacker can create inodes can be significantly reduced. Sufficiently strict LSM policies (SELinux/Apparmor) can also in principle block this attack -- we suspect the industry standard SELinux policy may restrict this attack's scope but the exact scope of protection hasn't been analysed. This is exploitable using runc directly as well as through Docker and Kubernetes. The issue is fixed in runc v1.1.14 and v1.2.0-rc3.

Some workarounds are available. Using user namespaces restricts this attack fairly significantly such that the attacker can only create inodes in directories that the remapped root user/group has write access to. Unless the root user is remapped to an actual
user on the host (such as with rootless containers that don't use `/etc/sub[ug]id`), this in practice means that an attacker would only be able to create inodes in world-writable directories. A strict enough SELinux or AppArmor policy could in principle also restrict the scope if a specific label is applied to the runc runtime, though neither the extent to which the standard existing policies block this attack nor what exact policies are needed to sufficiently restrict this attack have been thoroughly tested.
Problem types: cwe_id: CWE-363
description: CWE-363: Race Condition Enabling Link Following
cwe_id: CWE-61
description: CWE-61: UNIX Symbolic Link (Symlink) Following
Affected products: vendor: opencontainers
product: runc
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 3.6
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
version: 3.1
Published: 2024-09-03T19:07:34.060Z
CVE-2024-45311 Denial of service in quinn-proto when using `Endpoint::retry()`
Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. As of quinn-proto 0.11, it is possible for a server to `accept()`, `retry()`, `refuse()`, or `ignore()` an `Incoming` connection. However, calling `retry()` on an unvalidated connection exposes the server to a likely panic in the following situations:  1. Calling `refuse` or `ignore` on the resulting validated connection, if a duplicate initial packet is received. This issue can go undetected until a server's `refuse()`/`ignore()` code path is exercised, such as to stop a denial of service attack. 2. Accepting when the initial packet for the resulting validated connection fails to decrypt or exhausts connection IDs, if a similar initial packet that successfully decrypts and doesn't exhaust connection IDs is received. This issue can go undetected if clients are well-behaved. The former situation was observed in a real application, while the latter is only theoretical.
Problem types: cwe_id: CWE-670
description: CWE-670: Always-Incorrect Control Flow Implementation
Affected products: vendor: quinn-rs
product: quinn
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2024-09-02T16:45:39.465Z
CVE-2024-45312 Arbitrary language parameter can passed to `aspell` executable via spelling requests in overleaf
Overleaf is a web-based collaborative LaTeX editor. Overleaf Community Edition and Server Pro prior to version 5.0.7 (or 4.2.7 for the 4.x series) contain a vulnerability that allows an arbitrary language parameter in client spelling requests to be passed to the `aspell` executable running on the server.  This causes `aspell` to attempt to load  a dictionary file with an arbitrary filename. File access is limited to the scope of the overleaf server. The problem is patched in versions 5.0.7 and 4.2.7.  Previous versions can be upgraded using the Overleaf toolkit `bin/upgrade` command. Users unable to upgrade may block POST requests to `/spelling/check` via a Web Application Firewall will prevent access to the vulnerable spell check feature.  However, upgrading is advised.
Problem types: cwe_id: CWE-641
description: CWE-641: Improper Restriction of Names for Files and Other Resources
cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: overleaf
product: overleaf
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2024-09-02T16:50:08.305Z
CVE-2024-45313 Insecure default setting for Server Pro installed via Overleaf toolkit
Overleaf is a web-based collaborative LaTeX editor. When installing Server Pro using the Overleaf Toolkit from before 2024-07-17 or legacy docker-compose.yml from before 2024-08-28, the configuration for LaTeX compiles was insecure by default, requiring the administrator to enable the security features via a configuration setting (`SIBLING_CONTAINERS_ENABLED` in Toolkit, `SANDBOXED_COMPILES` in legacy docker-compose/custom deployments). If these security features are not enabled then users have access to the `sharelatex` container resources (filesystem, network, environment variables) when running compiles, leading to multiple file access vulnerabilities, either directly or via symlinks created during compiles. The setting has now been changed to be secure by default for new installs in the Toolkit and legacy docker-compose deployment. The Overleaf Toolkit has been updated to set `SIBLING_CONTAINERS_ENABLED=true` by default for new installs. It is recommended that any existing installations using the previous default setting migrate to using sibling containers. Existing installations can set `SIBLING_CONTAINERS_ENABLED=true` in `config/overleaf.rc` as a mitigation. In legacy docker-compose/custom deployments `SANDBOXED_COMPILES=true` should be used.
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
cwe_id: CWE-1188
description: CWE-1188: Insecure Default Initialization of Resource
Affected products: vendor: overleaf
product: overleaf
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
version: 3.1
Published: 2024-09-02T16:54:19.915Z
CVE-2024-45314 Flask-AppBuilder login form allows browser to cache sensitive fields
Flask-AppBuilder is an application development framework. Prior to version 4.5.1, the auth DB login form default cache directives allows browser to locally store sensitive data. This can be an issue on environments using shared computer resources. Version 4.5.1 contains a patch for this issue. If upgrading is not possible, configure one's web server to send the specific HTTP headers for `/login` per the directions provided in the GitHub Security Advisory.
Problem types: cwe_id: CWE-525
description: CWE-525: Use of Web Browser Cache Containing Sensitive Information
Affected products: vendor: dpgaspar
product: Flask-AppBuilder
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 3.6
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
version: 3.1
Published: 2024-09-04T16:08:41.004Z
CVE-2024-45315 
The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlier of Windows client) allows users with standard privileges to create arbitrary folders and files, potentially leading to local Denial of Service (DoS) attack.
Problem types: cwe_id: CWE-59
description: CWE-59 Improper Link Resolution Before File Access ('Link Following')
Affected products: vendor: SonicWall
product: Connect Tunnel
default_status: unknown
Credits: lang: en
value: Hashim Jawad (@ihack4falafel) through Trend Micro (Zero Day Initiative)
Published: 2024-10-11T08:17:13.448Z
CVE-2024-45316 
The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlier of Windows client) allows users with standard privileges to delete arbitrary folders and files, potentially leading to local privilege escalation attack.
Problem types: cwe_id: CWE-59
description: CWE-59 Improper Link Resolution Before File Access ('Link Following')
Affected products: vendor: SonicWall
product: Connect Tunnel
default_status: unknown
Credits: lang: en
value: Hashim Jawad (@ihack4falafel) through Trend Micro (Zero Day Initiative)
Published: 2024-10-11T08:20:57.727Z
CVE-2024-45317 
A Server-Side Request Forgery (SSRF) vulnerability in SMA1000 appliance firmware versions 12.4.3-02676 and earlier allows a remote, unauthenticated attacker to cause the SMA1000 server-side application to make requests to an unintended IP address.
Problem types: cwe_id: CWE-918
description: CWE-918 Server-Side Request Forgery (SSRF)
Affected products: vendor: SonicWall
product: SMA1000
default_status: unknown
Credits: lang: en
value: Wenjie Zhong (H4lo) of Webin DBappSecurity Co., Ltd.
Published: 2024-10-11T08:30:23.707Z
CVE-2024-45318 
A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution.
Problem types: cwe_id: CWE-121
description: CWE-121 Stack-based Buffer Overflow
Affected products: vendor: SonicWall
product: SMA100
default_status: unknown
Credits: lang: en
value: Alain Mowat of Orange Cyberdefense, Switzerland.
Published: 2024-12-05T13:43:31.716Z
CVE-2024-45319 
A vulnerability in the SonicWall SMA100 SSLVPN 

firmware 10.2.1.13-72sv and earlier versions allows a remote authenticated attacker can circumvent the certificate requirement during authentication.
Problem types: cwe_id: CWE-798
description: CWE-798 Use of Hard-coded Credentials
Affected products: vendor: SonicWall
product: SMA100
default_status: unknown
Credits: lang: en
value: Alain Mowat of Orange Cyberdefense, Switzerland.
Published: 2024-12-05T13:50:28.768Z
CVE-2024-45320 
Out-of-bounds write vulnerability exists in DocuPrint CP225w 01.22.01 and earlier, DocuPrint CP228w 01.22.01 and earlier, DocuPrint CM225fw 01.10.01 and earlier, and DocuPrint CM228fw 01.10.01 and earlier. If an affected MFP processes a specially crafted printer job file, a denial-of-service (DoS) condition may occur.
Problem types: cwe_id: CWE-787
description: Out-of-bounds write
Affected products: vendor: FUJIFILM Business Innovation Corp.
product: DocuPrint CP225w
vendor: FUJIFILM Business Innovation Corp.
product: DocuPrint CP228w
vendor: FUJIFILM Business Innovation Corp.
product: DocuPrint CM225fw
vendor: FUJIFILM Business Innovation Corp.
product: DocuPrint CM228fw
Published: 2025-02-18T05:20:23.570Z
CVE-2024-45321 
The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-08-27T00:00:00.000Z
CVE-2024-45323 
An improper access control vulnerability [CWE-284] in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may allow in a shared environment context an authenticated admin with REST API permissions in his profile and restricted to a specific organization to access backend logs that include information related to other organizations.
Problem types: cwe_id: CWE-284
description: Information disclosure
Affected products: vendor: Fortinet
product: FortiEDR Manager
cpes: cpe:2.3:a:fortinet:fortiedrmanager:6.2.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiedrmanager:6.2.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiedrmanager:6.0.1:*:*:*:*:*:*:*
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.6
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R
Published: 2024-09-10T14:37:42.131Z
CVE-2024-45325 
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiDDoS-F version 7.0.0 through 7.02 and before 6.6.3 may allow a privileged attacker to execute unauthorized code or commands via crafted CLI requests.
Problem types: cwe_id: CWE-78
description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: FortiDDoS-F
cpes: cpe:2.3:o:fortinet:fortiddos-f:7.0.2:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:7.0.1:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:7.0.0:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.6.3:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.6.2:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.6.1:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.6.0:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.5.1:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.5.0:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.4.2:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.4.1:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.4.0:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.3.5:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.3.4:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.3.3:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.3.2:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.3.1:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.3.0:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.2.3:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.2.2:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.2.1:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.2.0:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.1.5:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.1.4:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.1.3:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.1.2:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.1.1:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortiddos-f:6.1.0:*:*:*:*:*:*:*
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C
Published: 2025-09-09T13:50:41.345Z
CVE-2024-45326 
An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6.0.0, FortiDeceptor 5.3 all versions, FortiDeceptor 5.2 all versions, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions may allow an authenticated attacker with none privileges to perform operations on the central management appliance via crafted requests.
Problem types: cwe_id: CWE-284
description: Improper access control
Affected products: vendor: Fortinet
product: FortiDeceptor
cpes: cpe:2.3:a:fortinet:fortideceptor:6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.3.4:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.3.3:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.3.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.3.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.3.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.2.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.2.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.2.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.1.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortideceptor:5.0.0:*:*:*:*:*:*:*
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.9
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R
Published: 2025-01-14T14:09:55.772Z
CVE-2024-45327 
An improper authorization vulnerability [CWE-285] in FortiSOAR version 7.4.0 through 7.4.3, 7.3.0 through 7.3.2, 7.2.0 through 7.2.2, 7.0.0 through 7.0.3 change password endpoint may allow an authenticated attacker to perform a brute force attack on users and administrators password via crafted HTTP requests.
Problem types: cwe_id: CWE-307
description: Improper access control
Affected products: vendor: Fortinet
product: FortiSOAR
cpes: cpe:2.3:a:fortinet:fortisoar:7.4.3:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisoar:7.4.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisoar:7.4.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisoar:7.4.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisoar:7.3.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisoar:7.3.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisoar:7.3.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisoar:7.2.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisoar:7.2.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisoar:7.2.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisoar:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisoar:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisoar:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisoar:7.0.0:*:*:*:*:*:*:*
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C
Published: 2024-09-11T09:53:46.087Z
CVE-2024-45328 
An incorrect authorization vulnerability [CWE-863] in FortiSandbox 4.4.0 through 4.4.6 may allow a low priviledged administrator to execute elevated CLI commands via the GUI console menu.
Problem types: cwe_id: CWE-863
description: Escalation of privilege
Affected products: vendor: Fortinet
product: FortiSandbox
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
Published: 2025-03-11T14:54:28.909Z
CVE-2024-45329 
A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.8 may allow an authenticated attacker to view unauthorized device information via key modification in API requests.
Problem types: cwe_id: CWE-639
description: Improper access control
Affected products: vendor: Fortinet
product: FortiPortal
cpes: cpe:2.3:a:fortinet:fortiportal:7.4.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiportal:7.2.5:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiportal:7.2.4:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiportal:7.2.3:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiportal:7.2.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiportal:7.2.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiportal:7.2.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiportal:7.0.8:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiportal:7.0.7:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiportal:7.0.6:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiportal:7.0.5:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiportal:7.0.4:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiportal:7.0.3:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiportal:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiportal:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiportal:7.0.0:*:*:*:*:*:*:*
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.9
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
Published: 2025-06-10T16:36:06.068Z
CVE-2024-45330 
A use of externally-controlled format string in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.2 through 7.2.5 allows attacker to escalate its privileges via specially crafted requests.
Problem types: cwe_id: CWE-134
description: Escalation of privilege
Affected products: vendor: Fortinet
product: FortiAnalyzer
cpes: cpe:2.3:o:fortinet:fortianalyzer:7.4.3:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortianalyzer:7.4.2:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortianalyzer:7.4.1:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortianalyzer:7.2.5:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortianalyzer:7.2.4:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortianalyzer:7.2.3:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortianalyzer:7.2.2:*:*:*:*:*:*:*
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
Published: 2024-10-08T14:19:03.894Z
CVE-2024-45332 
Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Problem types: description: Information Disclosure
cwe_id: CWE-1423
description: Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution
Affected products: vendor: n/a
product: Intel(R) Processors
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 5.6
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
Published: 2025-05-13T21:03:12.207Z
CVE-2024-45333 
Improper access control for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an authenticated user to potentially enable denial of service via local access.
Problem types: description: Denial of Service
cwe_id: CWE-284
description: Improper Access Control
Affected products: vendor: n/a
product: Intel(R) Data Center GPU Flex Series for Windows driver
default_status: unaffected
CVSS v3.1: version: 3.1
baseScore: 7.3
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: HIGH
Published: 2025-05-13T21:03:13.722Z
CVE-2024-45334 
Trend Micro Antivirus One versions 3.10.4 and below (Consumer) is vulnerable to an Arbitrary Configuration Update that could allow unauthorized access to product configurations and functions.
Affected products: vendor: Trend Micro, Inc.
product: Trend Micro Antivirus One
CVSS v3.1: version: 3.1
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Published: 2024-10-22T18:27:10.686Z