CVE Vulnerability Catalog

Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.

Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by a Prototype Pollution vulnerability that could result in arbitrary file system read in the context of the current user. Exploitation requires user interaction – the victim must open a malicious file.

InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application or disrupt its functionality. Exploitation requires user interaction – the victim must open a malicious file.

October CMS versions prior to 3.7.13 and 4.0.0 through 4.1.4 contain a sandbox bypass vulnerability in the optional Twig safe mode feature (CMS_SAFE_MODE). Certain methods on the collect() helper were not properly restricted, allowing authenticated users with template editing permissions to bypass sandbox protections.

The 'profiling.sampling' module (Python 3.15+) and 'asyncio introspection capabilities' (3.14+) could be exploited to read and write addresses in a privileged process if that process connected to a malicious or 'infected' Python process via the remote debugging feature.

A CWE-798 Use of Hard-coded Credentials vulnerability exists that could allow an unauthenticated attacker to gain unauthorized access to sensitive device information by interrogating the SNMP port.

Multiple Relative Path Traversal vulnerabilities [CWE-23] in Fortinet FortiWeb may allow a local privileged attacker to execute unauthorized code on the underlying system via crafted CLI commands.

A cross-site scripting vulnerability in Fortinet FortiSandbox (versions 5.0.0-5.0.5, 4.4.0-4.4.8, 4.2 all) and FortiSandbox PaaS arises from improper neutralization of input during web page generation. This may allow an attacker to execute unauthorized code or commands.

An integer overflow or wraparound vulnerability in Fortinet FortiWeb versions 8.0.0 through 8.0.3, 7.6.0 through 7.6.6, 7.4, 7.2, and 7.0 may allow an attacker to cause a denial of service.

FortiClientEMS versions 7.4.3 through 7.4.5 and 7.4.0 through 7.4.1 use a hard-coded cryptographic key. An attacker could leverage this key to decrypt a database dump and disclose information.

Fortinet FortiClientEMS (versions 7.4.3–7.4.4, 7.4.0–7.4.1, 7.2.12, and 7.2.0–7.2.10) contains an SQL injection vulnerability due to improper neutralization of special elements in SQL commands. An attacker may execute unauthorized code or commands by sending crafted requests.

CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of service when a Web Admin user floods the system with POST /helpabout requests.

A CWE-116 Improper Encoding or Escaping of Output vulnerability could cause log injection and forged log entries when an attacker alters the POST /j_security check request payload.

A CWE-1284 (Improper Validation of Specified Quantity in Input) vulnerability allows a Web Admin user to alter the POST /logsettings request payload and cause Event and Data Log truncation, impacting log integrity.

A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker to gain access to a user account by performing an arbitrary number of authentication attempts with different credentials across a sequence of requests to multiple endpoints.

CWE-532 insertion of sensitive information into a log file can expose confidential data when a Web Admin user executes a malicious file provided by an attacker.

A CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability exists that could cause application user credentials to reset when a Web Admin user alters the POST /setPCBEDesc request payload.

A path traversal vulnerability exists that could cause critical files to be overwritten with text data when a Web Admin user alters the POST /REST/upssleep request payload.

Fortinet FortiSandbox (5.0.0–5.0.5, 4.4.0–4.4.8, all 4.2 versions, FortiSandbox Cloud 5.0.4, and PaaS 5.0.4) contains a path traversal vulnerability. A privileged attacker with super-admin profile and CLI access can delete an arbitrary directory via crafted HTTP requests.