Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

TI-2024-32490 CVE-2024-48766 · GHSA-h96f-qxw6-vq8x

Path traversal in NetAlertX

Priority HIGH 80

NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.67909 Published 2025-05-13 Fixed in 24.10.12 CWE-698
TI-2024-31001 CVE-2024-46506 · GHSA-3qp4-7wm4-9hhr

Missing authentication in NetAlertX

Priority HIGH 84

NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an authentication requirement, as exploited in the wild in May 2025.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.62666 Published 2025-05-13 Fixed in 24.10.12 CWE-306