CVE-2024-46670

CVE-2024-46670 describes an Out-of-bounds Read (CWE-125) in FortiOS: affected are FortiOS 7.6.0, 7.4.4 and below, 7.2.9 and below, and FortiSASE FortiOS tenant 24.3.b. An unauthenticated remote attacker could trigger memory consumption that leads to Denial of Service via crafted requests. The con...

CVE-2024-56841

A vulnerability has been identified in Mendix LDAP All versions V1.1.2. Affected versions of the module are vulnerable to LDAP injection. This could allow an unauthenticated remote attacker to bypass username verification...

CVE-2024-56841

CVE-2024-56841 affects Mendix LDAP module (all versions

CVE-2025-23082

Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2025-23082

Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2025-23082

CVE-2025-23082 affects Veeam Backup for Microsoft Azure. The flaw is an SSRF vulnerability that could allow an unauthenticated attacker to send unauthorized requests from the system, potentially enabling network enumeration. Public details in the Veeam KB indicate the issue impacts Veeam Backup f...

PT-2025-3014 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS versions 7.2.0 through 7.6.0 FortiProxy versions 7.2.0 through 7.4.5 Description: The issue is related to an improper neutralization of crlf sequences in http headers, also known as 'http response splitting'. This allows an...

Fortinet FortiOS 缓冲区错误漏洞

Fortinet FortiOS is a set of security operating system dedicated to the FortiGate network security platform from the U.S. company Fiat Fortinet. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam. A buffer...

Ivanti EPM 代码问题漏洞

Ivanti EPM is a comprehensive endpoint management solution developed by Ivanti. Ivanti EPM suffers from a code issue vulnerability that stems from the inclusion of an insufficient file name validation issue. An attacker could exploit this vulnerability to achieve remote code execution...

Fortinet FortiOS 安全漏洞

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. Fortinet FortiOS has a security...

Fortinet Fortigate Unchecked boundary length causing multiple logic flaws (FG-IR-24-250)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-250 advisory. - An allocation of resources without limits or throttling CWE-770 vulnerability in FortiOS versions 7.6.0, versions 7.4.4...

Ivanti EPM 缓冲区错误漏洞

Ivanti EPM is a comprehensive endpoint management solution developed by Ivanti. Ivanti EPM suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to cause a denial of service...

Ivanti EPM 代码问题漏洞

Ivanti EPM is a one-stop shop for managing user profiles and all client devices from Ivanti, USA. Ivanti EPM suffers from a code issue vulnerability that stems from the inclusion of an untrusted data deserialization issue. Allowing a remote unauthenticated attacker to exploit the vulnerability...

PT-2025-2746 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: FortiOS versions 6.4 through 7.6.0 Description: An allocation of resources without limits or throttling vulnerability may allow a remote unauthenticated attacker to prevent access to the GUI via specially crafted requests directed at specific...

Ivanti EPM 数据伪造问题漏洞

Ivanti EPM is a one-stop-shop for managing user profiles and all client devices from Ivanti, USA. Ivanti EPM is vulnerable to a data forgery issue vulnerability that stems from the inclusion of an improper signature verification issue. Allowing a remote unauthenticated attacker to exploit the...

Fortinet FortiClientEMS 安全漏洞

Fortinet FortiClientEMS is part of Fortinet's Endpoint Management solution from Fortinet, Inc. and is designed to help organizations efficiently manage endpoint devices in their networks and provide monitoring and control of endpoint security. A security vulnerability exists in Fortinet...

CVE-2025-0105

An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to delete arbitrary files accessible to the www-data user on the host filesystem...

CVE-2025-0106

A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to enumerate files on the host filesystem...

CVE-2025-0106

CVE-2025-0106 is a wildcard expansion vulnerability in Palo Alto Networks Expedition. An unauthenticated attacker can enumerate files on the host filesystem via the Expedition tool’s wildcard expansion handling. Affected product: Palo Alto Networks Expedition. Root cause: wildcard expansion issue...

CVE-2025-0106 Expedition: Wildcard Expansion Vulnerability

A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to enumerate files on the host filesystem...