CVE-2024-43077

In DevmemValidateFlags of devicememserver.c , there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-43077

creationtimestamp| type| source ---|---|--- 2024-12-04 06:05:42+00:00| seen| https://t.me/itsecnews/4888 2025-01-03 00:19:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113761554223801442 2025-01-03 01:15:32+00:00| seen|...

CVE-2021-43077

creationtimestamp| type| source ---|---|--- 2022-03-01 22:23:41+00:00| seen| https://t.me/cibsecurity/38281...

CVE-2021-43077

A improper neutralization of special elements used in an sql command 'sql injection' in Fortinet FortiWLM version 8.6.2 and below, version 8.5.2 and below, version 8.4.2 and below, version 8.3.2 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to the AP...

CVE-2021-43077

FortiWLM SQL Injection (CVE-2021-43077) arises from improper neutralization of SQL in the AP monitor handlers. Affects Fortinet FortiWLM versions 8.6.2 and earlier, 8.5.2 and earlier, 8.4.2 and earlier, and 8.3.2 and earlier. An attacker can exploit this via crafted HTTP requests to AP monitor ha...

CVE-2021-43077

A improper neutralization of special elements used in an sql command 'sql injection' in Fortinet FortiWLM version 8.6.2 and below, version 8.5.2 and below, version 8.4.2 and below, version 8.3.2 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to the AP...