EUVD-2025-10301

Malicious code in bioql PyPI...

EUVD-2022-48709

Malicious code in bioql PyPI...

EUVD-2021-30019

Malicious code in bioql PyPI...

EUVD-2022-36916

Malicious code in bioql PyPI...

EUVD-2021-31017

Malicious code in bioql PyPI...

EUVD-2021-30149

Malicious code in bioql PyPI...

EUVD-2021-31019

Malicious code in bioql PyPI...

EUVD-2022-43953

Malicious code in bioql PyPI...

The vulnerability of the Fortinet FortiClient Enterprise Management Server (EMS) and the FortiClient EMS Cloud cloud storage service lies in the relative path traversal during the download message processing, which allows unauthorized access to protected information.

The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS and its cloud storage service, FortiClient EMS Cloud, exists due to a relative path traversal vulnerability in the download message. Exploiting this vulnerability allows an attacker to compromise the integrity of the...

The vulnerability of the FortiClient for MAC protection mechanism and the FortiVoiceUCDesktop software used for audio and video conferencing lies in insufficient spatial separation, allowing attackers to execute arbitrary code.

The vulnerability of the FortiClient for MAC protection tool and the FortiVoiceUCDesktop software used for audio and video conferencing involves insufficient spatial separation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the FortiClient for MAC protection mechanism lies in its authentication procedures’ flaws, which allow attackers to escalate their privileges.

The vulnerability of the FortiClient for MAC protection tool is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Fortinet FortiClient Windows security devices, which stems from the use of a strictly encrypted cryptographic key, allows attackers to gain unauthorized access to protected information.

The vulnerability of Fortinet FortiClient Windows protection lies in the use of a strictly encrypted cryptographic key. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Exploit for Improper Access Control in Fortinet Forticlient

CVE-2024-40586 Windows Coerced Authentication in FortiClient...

CVE-2024-54019

A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 all versions allow an unauthorized attacker to redirect VPN connections via DNS spoofing or another form of redirection...

CVE-2025-24471

An Improper Certificate Validation vulnerability CWE-295 in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP verified remote user to connect from FortiClient via revoked certificate...

CVE-2024-54019

A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 all versions allow an unauthorized attacker to redirect VPN connections via DNS spoofing or another form of redirection...

CVE-2023-48786

A server-side request forgery vulnerability CWE-918 in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before 7.2.6 may allow an authenticated attacker to perform internal requests via crafted HTTP or HTTPS requests...

CVE-2024-54019

A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 all versions allow an unauthorized attacker to redirect VPN connections via DNS spoofing or another form of redirection...

CVE-2024-54019

CVE-2024-54019 concerns Fortinet FortiClientWindows. The issue is an improper validation of certificates with host mismatch across FortiClientWindows versions 7.0, and 7.2.0–7.2.6, plus 7.4.0. This flaw allows an unauthenticated attacker to redirect VPN connections (e.g., via DNS spoofing or othe...

CVE-2024-54019

A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 all versions allow an unauthorized attacker to redirect VPN connections via DNS spoofing or another form of redirection...