This vulnerability allows remote attackers to escalate privileges on affected installations of Progress Software WhatsUp Gold. Authentication is required to exploit this vulnerability.

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.

A memory corruption vulnerability exists in Microsoft Windows AVI File API. The vulnerability is due to a boundary error when parsing crafted AVI files containing a truncated AVIH chunk. An attacker could exploit this vulnerability by enticing a target user to open a malicious AVI file.

A denial-of-service vulnerability has been reported in Microsoft Windows NFS Server. The vulnerability is caused by a NULL pointer dereference that can occur when an invalid NFS file operation is requested on a read-only share. A remote attacker can exploit this vulnerability by sending a malicious NFS request.

Threat Encyclopedia

1236405

WEB Progress WhatsUp Gold GetSqlWhereClause SQL Injection -1 (CVE-2024-46906)

High

2025/04/08

1236270

WEB Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability -1 (CVE-2024-55591)

Critical

2025/04/08

1057529

FILE Microsoft DirectShow QuickTime Movie Parsing Code Execution (CVE-2009-1537)

Critical

2025/03/31

1236468

EXPLOIT Microsoft Windows NFS Server NULL Pointer Dereference (CVE-2013-1281) state 1

Medium

2025/03/26