CVE Vulnerability Catalog

A prompt injection vulnerability exists in Windsurf version 1.10.7 in Write mode using the SWE-1 model. It is possible to create a file name that will be appended to the user prompt, causing Windsurf to follow its instructions.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (ACL Action access configuration modules) allows Stored XSS by users with elevated privileges. This issue affects Infra Monitoring: from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, from 23.10.0 before 23.10.28.

Fortinet FortiADC versions 7.4.0, 7.2.3 and below, 7.1.4 and below, 7.0 all versions, and 6.2 all versions have an exposure of sensitive information to an unauthorized actor vulnerability. An authenticated attacker can obtain sensitive data via crafted HTTP or HTTPS requests.

FortiSIEM versions 7.2.0 through 7.2.2, 7.1, 7.0, 6.7, 6.6, 6.5, 6.4, 6.3, and 6.2 (all versions) contain a stored Cross-Site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation. An authenticated attacker can perform a stored XSS attack via crafted HTTP requests.

An Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local low privileged user to perform a DLL hijacking attack via placing a malicious DLL to the FortiClient Online Installer installation folder.

A race condition vulnerability in Fortinet FortiAnalyzer allows an attacker to bypass FortiCloud SSO authorization via crafted requests. Affects versions 7.0.0-7.0.13, 7.2.0-7.2.10, 7.4.0-7.4.6, 7.6.0-7.6.2.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Hosts templates configuration modules) allows Stored XSS by users with elevated privileges. This issue affects Infra Monitoring: from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, from 23.10.0 before 23.10.28.

An improper authorization vulnerability (CWE-285) in Fortinet FortiOS and FortiProxy allows an authenticated attacker to access static files of other VDOMs via crafted HTTP or HTTPS requests. Affects multiple versions of FortiOS (7.4.0-7.4.1, 7.2.0-7.2.8, 7.0.0-7.0.11) and FortiProxy (7.4.0-7.4.8, 7.2, 7.0, 2.0).

An improper authentication vulnerability (CWE-287) in Fortinet FortiAnalyzer versions 7.6.0 through 7.6.3 and before 7.4.6 allows an unauthenticated attacker to obtain device health and status information or cause a denial of service via crafted OFTP requests.

A potential out-of-bound reads vulnerability in HPE ProLiant RL300 Gen11 Server's UEFI firmware.

A reflected XSS vulnerability in FortiOS, FortiProxy, and FortiSASE allows an unauthenticated attacker to execute scripts in a victim's browser via crafted HTTP requests. The issue stems from improper input neutralization during web page generation.

A Code Injection vulnerability (CWE-94) in FortiClientMac 7.4.0 through 7.4.3 and 7.2.1 through 7.2.8 may allow an unauthenticated attacker to execute arbitrary code on the victim's host by tricking the user into visiting a malicious website.

An improperly implemented security check (CWE-358) in Fortinet FortiOS and FortiProxy may allow an unauthenticated proxy user to bypass the domain fronting protection feature via crafted HTTP requests.

An Insufficient Session Expiration vulnerability (CWE-613) in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, and 6.4 all versions may allow a remote attacker (e.g., a former admin whose account was removed and session terminated) in possession of the SAML record of a user session to access or re-open that session via re-use of the SAML record.

Fortinet FortiSRA, FortiPAM, FortiProxy, FortiOS, and FortiSwitchManager contain a heap-based buffer overflow vulnerability. An attacker could escalate privileges via specially crafted HTTP requests.

An insertion of sensitive information into sent data vulnerability in multiple Fortinet products (including FortiMail, FortiManager, FortiNDR, FortiOS, FortiProxy, FortiWeb) allows an attacker to disclose sensitive information via specially crafted packets. The issue affects a wide range of versions of the listed products.

A stack-based buffer overflow in Fortinet FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.7, 7.0.0 through 7.0.12, 6.4.6 through 6.4.15, 6.2.9 through 6.2.16, and 6.0.13 through 6.0.18 allows an attacker to execute unauthorized code or commands via specially crafted CLI commands.

Stored XSS vulnerability in Centreon Infra Monitoring (HTTP Loader widget modules) due to improper input neutralization during web page generation. Affects versions from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, from 23.10.0 before 23.10.28.

Argo Workflows versions prior to 3.6.12 and 3.7.0 through 3.7.2 expose artifact repository credentials in plaintext in workflow-controller pod logs. An attacker with permissions to read pod logs in a namespace can read the logs and obtain credentials.

EspoCRM before version 9.1.9 allows arbitrary user creation, including administrative accounts, through stored SVG injection combined with lack of CSRF protection. An attacker with Knowledge Base edit permissions can embed a malicious link that, when clicked by an authenticated user, executes a CSRF request to the api/v1/User endpoint.