{"items":[{"id":"CVE-2024-48766","published":"2025-05-13T00:00:00.000Z","updated":"2025-05-13T19:53:28.974Z","title":"NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos…","severity":"HIGH","score":8.6,"vendor":"NetAlertX","product":"NetAlertX","kev":false,"epss":0.67909,"kevAdded":null},{"id":"CVE-2024-46506","published":"2025-05-13T00:00:00.000Z","updated":"2025-05-13T19:09:51.072Z","title":"NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an…","severity":"CRITICAL","score":10,"vendor":"NetAlertX","product":"NetAlertX","kev":false,"epss":0.62666,"kevAdded":null}]}