CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Fortinet FortiOS / FortiProxy / FortiPAM Format String Vulnerability (CVE-2024-23113) Remote Code Execution (RCE) Analysis and Mitigation Guide
[Affected Scope] FortiOS (7.0.0~7.0.13, 7.2.0~7.2.6, 7.4.0~7.4.2), FortiProxy (7.0.0~7.0.14, 7.2.0~7.2.8, 7.4.0~7.4.2), FortiPAM, and FortiSwitchManager specific versions
[Impact] Unauthenticated remote attackers can execute unauthorized code or commands with root privileges via specially crafted packets
[Mitigation] Upgrade to the official patched versions immediately, or disable the FGFM (FortiGate Federation Management) service on interfaces as a temporary workaround
Samsung Exynos Modem Interface Driver Format String Vulnerability (CVE-2021-25489) Technical Advisory
[Affected Scope] Samsung mobile devices and Exynos modem-powered hardware running firmware versions prior to SMR (Security Maintenance Release) Oct-2021 Release 1
[Impact] Local attackers with radio permissions can exploit missing input validation and a format string bug to trigger kernel panic and system-wide Denial of Service (DoS)
[Mitigation] Apply the Samsung SMR October 2021 Release 1 (or later) firmware update immediately and restrict unauthorized applications from acquiring radio permissions