Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:52:32 +0000 bdu:2025-08439 https://cve.radiocsirt.org/vuln/bdu:2025-08439 bdu:2025-08439 https://cve.radiocsirt.org/vuln/bdu:2025-08439 certfr-2025-avi-0575 — De multiples vulnérabilités ont été découvertes dans les produits Fortinet. Certaines d'entre elles permettent à un att… https://cve.radiocsirt.org/vuln/certfr-2025-avi-0575 certfr-2025-avi-0575 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0575 EUVD-2026-272636 https://cve.radiocsirt.org/vuln/euvd-2026-272636 EUVD-2026-272636 https://cve.radiocsirt.org/vuln/euvd-2026-272636 fkie_cve-2025-25257 https://cve.radiocsirt.org/vuln/fkie_cve-2025-25257 <p>An improper neutralization of special elements used in an SQL command (&#39;SQL Injection&#39;) vulnerability [CWE-89] vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.7, FortiWeb 7.2.0 through 7.2.10, FortiWeb 7.0.0 through 7.0.10 allows an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.</p> <p>An improper neutralization of special elements used in an SQL command (&#39;SQL Injection&#39;) vulnerability [CWE-89] vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.7, FortiWeb 7.2.0 through 7.2.10, FortiWeb 7.0.0 through 7.0.10 allows an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-25257 GHSA-mj4r-rpwm-gg33 https://cve.radiocsirt.org/vuln/ghsa-mj4r-rpwm-gg33 <p>An improper neutralization of special elements used in an SQL command (&#39;SQL Injection&#39;) vulnerability [CWE-89] in Fortinet FortiWeb version 7.6.0 through 7.6.3, 7.4.0 through 7.4.7, 7.2.0 through 7.2.10 and below 7.0.10 allows an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.</p> <p>An improper neutralization of special elements used in an SQL command (&#39;SQL Injection&#39;) vulnerability [CWE-89] in Fortinet FortiWeb version 7.6.0 through 7.6.3, 7.4.0 through 7.4.7, 7.2.0 through 7.2.10 and below 7.0.10 allows an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.</p> https://cve.radiocsirt.org/vuln/ghsa-mj4r-rpwm-gg33 WID-SEC-W-2025-1489 — Fortinet FortiWeb: Schwachstelle ermöglicht SQL Injection https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1489 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Fortinet FortiWeb ausnutzen, um eine SQL Injection durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Fortinet FortiWeb ausnutzen, um eine SQL Injection durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1489