https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-39921.htmlhttps://patchthecve.com/cve/CVE-2024-39921.htmlWed, 17 Jun 2026 07:43:01 +0000HIGH 7.5: Observable timing discrepancy issue exists in IPCOM EX2 Series V01L02NF0001 to V01L06NF0401, V01L20NF0001 to V01L20NF0401, V02L20NF0001 to V02L21NF0301, and IPCOM VE2 Series V01L04NF0001 to V01L06NF0112. If this vulnerability is exploited, some of the encrypted communication may be decrypted by an ahttps://patchthecve.com/cve/CVE-2024-40617.htmlhttps://patchthecve.com/cve/CVE-2024-40617.htmlWed, 17 Jun 2026 07:46:11 +0000MEDIUM 6.5: Path traversal vulnerability exists in FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS). If a remote authenticated attacker with User Class privilege sends a specially crafted request to the affected product, access restricted files containing sensitive information may be accessed. As a result, Admhttps://patchthecve.com/cve/CVE-2023-40238.htmlhttps://patchthecve.com/cve/CVE-2023-40238.htmlWed, 17 Jun 2026 06:16:50 +0000MEDIUM 5.5: A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.47, 5.5 before 05.53.47, and 5.6 before 05.60.47 for certain Lenovo devices. Image parsing of crafted BMP logo files can copy data to a specific address during https://patchthecve.com/cve/CVE-2023-4096.htmlhttps://patchthecve.com/cve/CVE-2023-4096.htmlWed, 17 Jun 2026 06:37:04 +0000HIGH 8.6: Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea version 1.5.0.0, which exploitation could allow an attacker to perform a brute force attack on the emailed PIN number in order to change the password of a legitimate user.https://patchthecve.com/cve/CVE-2023-4095.htmlhttps://patchthecve.com/cve/CVE-2023-4095.htmlWed, 17 Jun 2026 06:37:04 +0000MEDIUM 5.3: User enumeration vulnerability in Arconte Áurea 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to obtain a list of registered users in the application, obtaining the necessary information to perform more complex attacks on the platform.https://patchthecve.com/cve/CVE-2023-4094.htmlhttps://patchthecve.com/cve/CVE-2023-4094.htmlWed, 17 Jun 2026 06:37:04 +0000MEDIUM 6.5: ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a denial of service. In addition, a resource has been identified that could allow circumventing the attempt limit set in the lohttps://patchthecve.com/cve/CVE-2023-4093.htmlhttps://patchthecve.com/cve/CVE-2023-4093.htmlWed, 17 Jun 2026 06:37:03 +0000MEDIUM 5.5: Reflected and persistent XSS vulnerability in Arconte Áurea, in its 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to inject malicious JavaScript code, compromise the victim's browser and take control of it, redirect the user to malicious domains or access informatiohttps://patchthecve.com/cve/CVE-2023-4092.htmlhttps://patchthecve.com/cve/CVE-2023-4092.htmlWed, 17 Jun 2026 06:37:03 +0000HIGH 8.8: SQL injection vulnerability in Arconte Áurea, in its 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to read sensitive data from the database, modify data (insert/update/delete), perform database administration operations and, in some cases, execute commands on the op