Public catalog

Vulnerabilities

Explore the vulnerabilities Patcharo tracks and find the ones that concern your technologies.

Intelligence updated 1 Oct 2026 at 13:38 UTC

Identifiers, titles, summaries, vendors and products of the whole published catalog; the results follow as you type.

Vendor

Product

Severity

Known exploitation

Published

Fix stated by the vendor (234)

Sort by

260 vulnerabilities · sorted by Publication date — newest first

91–120 of 260

CVE-2024-46662
A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManage…
FortinetFortinet FortiManager
Severity · CVSSHigh8.8
Known exploitationNone known
EPSS2%
Published14 Mar 2025Fix stated
CVE-2025-0114
PAN-OS: Denial of Service (DoS) in GlobalProtect
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSHigh7.5
Known exploitationNone known
EPSS0.41%
Published12 Mar 2025Fix stated
CVE-2024-45324
A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, …
FortinetFortinet FortiWeb, Fortinet FortiProxy, Fortinet FortiOS
Severity · CVSSHigh7.2
Known exploitationNone known
EPSS0.72%
Published11 Mar 2025Fix stated
CVE-2025-0111
PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSMedium6.5
Known exploitationKEVDue 13 Mar 2025
EPSS2%
Published12 Feb 2025Fix stated
CVE-2025-0108
PAN-OS: Authentication Bypass in the Management Web Interface
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSCritical9.1
Known exploitationKEVDue 11 Mar 2025
EPSS98%
Published12 Feb 2025Fix stated
CVE-2025-24472
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
FortinetFortinet FortiOS, Fortinet FortiProxy
Severity · CVSSHigh8.1
Known exploitationKEVRansomwareDue 8 Apr 2025
EPSS7%
Published11 Feb 2025Fix stated
CVE-2024-40584
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability […
FortinetFortinet FortiAnalyzer, Fortinet FortiManager
Severity · CVSSHigh7.2
Known exploitationNone known
EPSS2%
Published11 Feb 2025Fix stated
CVE-2024-33504
A use of hard-coded cryptographic key to encrypt sensitive data vulnerability [CWE-321] in FortiManager 7.6.0…
FortinetFortinet FortiManager
Severity · CVSSHigh7.7
Known exploitationNone known
EPSS0.30%
Published11 Feb 2025Fix stated
CVE-2024-35279
A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.4 through 7.2.8 and ver…
FortinetFortinet FortiOS
Severity · CVSSHigh8.1
Known exploitationNone known
EPSS1%
Published11 Feb 2025Fix stated
CVE-2024-40591
An incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4.0 through 7.…
FortinetFortinet FortiOS
Severity · CVSSHigh7.2
Known exploitationNone known
EPSS0.62%
Published11 Feb 2025Fix stated
CVE-2024-50563
A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 throu…
FortinetFortinet FortiAnalyzer, Fortinet FortiManager
Severity · CVSSCritical9.8
Known exploitationNone known
EPSS0.58%
Published16 Jan 2025Fix stated
CVE-2024-45331
A incorrect privilege assignment vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7…
FortinetFortinet FortiManager, Fortinet FortiAnalyzer, Fortinet FortiAnalyzer Cloud
Severity · CVSSHigh7.8
Known exploitationNone known
EPSS0.21%
Published16 Jan 2025Fix stated
CVE-2024-47571
An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows a…
FortinetFortinet FortiManager
Severity · CVSSCritical9.8
Known exploitationNone known
EPSS0.91%
Published14 Jan 2025Fix stated
CVE-2024-35277
A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0.15, FortiMan…
FortinetFortinet FortiManager
Severity · CVSSHigh7.5
Known exploitationNone known
EPSS0.71%
Published14 Jan 2025Fix stated
CVE-2024-33502
An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, F…
FortinetFortinet FortiManager, Fortinet FortiAnalyzer
Severity · CVSSHigh7.2
Known exploitationNone known
EPSS1%
Published14 Jan 2025Fix stated
CVE-2024-48886
A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.…
FortinetFortinet FortiOS, Fortinet FortiProxy
Severity · CVSSCritical9.8
Known exploitationNone known
EPSS0.48%
Published14 Jan 2025Fix stated
CVE-2024-33503
A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManage…
FortinetFortinet FortiManager, Fortinet FortiManager Cloud
Severity · CVSSHigh7.8
Known exploitationNone known
EPSS0.22%
Published14 Jan 2025Fix stated
CVE-2024-48884
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet Fo…
FortinetFortinet FortiManager, Fortinet FortiProxy, Fortinet FortiOS
Severity · CVSSCritical9.1
Known exploitationNone known
EPSS15%
Published14 Jan 2025Fix stated
CVE-2024-46668
An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 thr…
FortinetFortinet FortiOS
Severity · CVSSHigh7.5
Known exploitationNone known
EPSS1.00%
Published14 Jan 2025Fix stated
CVE-2024-35273
A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 throu…
FortinetFortinet FortiAnalyzer, Fortinet FortiManager
Severity · CVSSHigh8.8
Known exploitationNone known
EPSS0.66%
Published14 Jan 2025Fix stated
CVE-2024-35276
A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.…
FortinetFortinet FortiAnalyzer, Fortinet FortiManager, Fortinet FortiManager Cloud
Severity · CVSSCritical9.8
Known exploitationNone known
EPSS0.42%
Published14 Jan 2025Fix stated
CVE-2024-35275
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnaly…
FortinetFortinet FortiManager, Fortinet FortiAnalyzer
Severity · CVSSHigh8.8
Known exploitationNone known
EPSS0.82%
Published14 Jan 2025Fix stated
CVE-2024-36512
An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, F…
FortinetFortinet FortiManager, Fortinet FortiAnalyzer
Severity · CVSSHigh7.2
Known exploitationNone known
EPSS1%
Published14 Jan 2025Fix stated
CVE-2024-46670
An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.…
FortinetFortinet FortiOS, Fortinet FortiProxy, Fortinet FortiPAM
Severity · CVSSHigh7.5
Known exploitationNone known
EPSS0.63%
Published14 Jan 2025Fix stated
CVE-2024-50566
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in…
FortinetFortinet FortiManager, Fortinet FortiManager Cloud
Severity · CVSSHigh8.8
Known exploitationNone known
EPSS1%
Published14 Jan 2025Fix stated
CVE-2024-55591
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
FortinetFortinet FortiOS, Fortinet FortiProxy
Severity · CVSSCritical9.8
Known exploitationKEVRansomwareDue 21 Jan 2025
EPSS94%
Published14 Jan 2025Fix stated
CVE-2024-3393
PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet
Palo Alto NetworksPalo Alto Networks PAN-OS
Severity · CVSSHigh7.5
Known exploitationKEVDue 20 Jan 2025
EPSS28%
Published27 Dec 2024Fix stated
CVE-2021-32589
A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.…
FortinetFortinet FortiManager, Fortinet FortiAnalyzer
Severity · CVSSCritical9.8
Known exploitationNone known
EPSS9%
Published19 Dec 2024Fix stated
CVE-2020-12820
Under non-default configuration, a stack-based buffer overflow in FortiOS version 6.0.10 and below, version 5…
FortinetFortinet FortiOS
Severity · CVSSHigh8.8
Known exploitationNone known
EPSS0.89%
Published19 Dec 2024Fix stated
CVE-2020-12819
A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate v…
FortinetFortinet FortiOS
Severity · CVSSHigh7.5
Known exploitationNone known
EPSS0.79%
Published19 Dec 2024Fix stated