CVEs published in January 2025
4,247 vulnerabilities, 364 critical, 17 exploited.
- wavlink ac3000, wl-wn533a8 firmware +1 moreMultiple external config control vulnerabilities exist in the nas.cgi set_ftp_cfg() functionality...9.1 Critical
- wavlink ac3000, wl-wn533a8 firmware +1 moreMultiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of...9.1 Critical
- wavlink ac3000, wl-wn533a8 firmware +1 moreMultiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of...9.1 Critical
- wavlink ac3000, wl-wn533a8 firmware +1 moreMultiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of...9.1 Critical
- wavlink ac3000, wl-wn533a8 firmware +1 moreMultiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of...9.1 Critical
- fortinet fortimanagerA relative path traversal vulnerability [CWE-23] in Fortinet FortiManager version 7.4.0 through...5.2 Medium
- fortinet fortimanagerAn operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7...7.9 High
- fortinet forticlientemsAn improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version...7.7 High
- fortinet fortivoiceAn improper neutralization of special elements used in an sql command ('sql injection')...8.6 High
- fortinet fortisoarAn improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7.2.1 through...8.3 High
- fortinet fortisiemA allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5...6.9 Medium
- fortinet fortiosAn out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through...6.2 Medium
- fortinet fortiosAn allocation of resources without limits or throttling [CWE-770] vulnerability in FortiOS...4.8 Medium
- fortinet fortiwebA stack-based buffer overflow in Fortinet FortiWeb versions 7.2.0 through 7.2.7, and 7.4.0...6.1 Medium
- fortinet fortideceptorAn Improper Access Control vulnerability [CWE-284] in FortiDeceptor version 6.0.0, version 5.3.3...3.9 Low
- fortinet fortimanager, fortimanager cloud +1 moreA missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0...8.4 High
- fortinet fortiap, fortiap-s, fortiap-w2 +2 moreA improper neutralization of special elements used in an os command ('os command injection') in...6.3 Medium
- fortinet forticlientems, forticlientems cloud +1 moreAn improper verification of source of a communication channel vulnerability [CWE-940] in...3.5 Low
- fortinet fortisoar, fortisoar imap connector +1 moreAn improper neutralization of special elements used in an OS command ('OS Command Injection')...6.3 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...6.4 Medium
- fortinet forticlient, forticlientwindows +1 moreA use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all...3.2 Low
- fortinet forticlientems, fortisoar +1 moreAn observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through...4.9 Medium
- fortinet fortios, fortiproxy +1 moreAn improper neutralization of crlf sequences in http headers ('http response splitting') in...6.4 Medium
- fortinet fortiportalA improper neutralization of special elements used in an sql command ('sql injection') in...4.1 Medium
- fortinet fortiportalAn improper neutralization of script-related html tags in a web page (basic xss) in Fortinet...3.3 Low
- fortinet fortirecorderA relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and...5.2 Medium
- fortinet fortivoiceAn improper neutralization of special elements used in an OS command ('OS Command Injection')...6.3 Medium
- fortinet fortirecorderA improper limitation of a pathname to a restricted directory ('path traversal') [CWE-23] in...4.8 Medium
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +3 more +5 moreA weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0...8.0 High
- fortinet fortisandboxAn improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in...8.3 High
- fortinet fortimanager, fortimanager cloud, fortianalyzer +1 more +3 moreA improper privilege management in Fortinet FortiManager version 7.4.0 through 7.4.3, 7.2.0...6.7 Medium
- fortinet fortiswitchAn improper neutralization of special elements used in an os command ('os command injection') in...7.6 High
- fortinet fortiswitchA use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2...9.6 Critical
- fortinet fortimail, fortirecorder +1 moreAn improper neutralization of special elements used in an os command ('os command injection') in...6.5 Medium
- fortinet fortimanager, fortimanager cloud, fortios +4 more +6 moreA improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...6.7 Medium
- fortinet fortisiemAn Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...3.7 Low
- fortinet fortiosAn allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS...7.1 High
- fortinet fortianalyzer, fortimanager, fortianalyzer cloud +1 more +3 moreA out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version...7.0 High
- fortinet fortios, fortiproxy +1 moreAn origin validation error [CWE-346] vulnerability in Fortinet FortiOS IPSec VPN version 7.4.0...4.7 Medium
- fortinet fortiosA null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all...6.4 Medium
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 moreA stack-based buffer overflow in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.0...5.0 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer cloud +1 more +3 moreA improper neutralization of special elements used in an sql command ('sql injection') in...6.5 Medium
- fortinet fortiosA null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all...6.4 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...7.0 High
- fortinet fortios, fortipam, fortiproxy +2 moreAn Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below,...7.5 High
- fortinet fortiosAn Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2...3.2 Low
- fortinet fortiwebA improper neutralization of special elements used in an sql command ('sql injection') in...2.6 Low
- fortinet fortimanager, fortimanager cloud +1 moreA improper neutralization of special elements used in an os command ('os command injection') in...7.2 High
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 moreAn Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting...9.6 Critical
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2...3.5 Low
- Show moreLoading…