Lucene search
+L

378 matches found

NVD
NVD
added 2023/06/13 9:15 a.m.31 views

CVE-2022-41327

A cleartext transmission of sensitive information vulnerability CWE-319 in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.8, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.8 allows an authenticated attacker with readonly superadmin privileges to intercept traffic in...

7.8CVSS7.5AI score0.00126EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/13 9:15 a.m.29 views

Design/Logic Flaw

A cleartext transmission of sensitive information vulnerability CWE-319 in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.8, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.8 allows an authenticated attacker with readonly superadmin privileges to intercept traffic in...

1.4CVSS4.4AI score0.00126EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2023/06/13 8:41 a.m.16 views

CVE-2022-41327

A cleartext transmission of sensitive information vulnerability CWE-319 in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.8, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.8 allows an authenticated attacker with readonly superadmin privileges to intercept traffic in...

7.8CVSS6.2AI score0.00126EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/06/13 8:41 a.m.47 views

CVE-2022-41327

A cleartext transmission of sensitive information vulnerability CWE-319 in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.8, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.8 allows an authenticated attacker with readonly superadmin privileges to intercept traffic in...

7.8CVSS7.5AI score0.00126EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/06/12 12:00 a.m.42 views

Fortinet Fortigate Read Only administrator can intercept sensitive data (FG-IR-22-380)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-380 advisory. - A cleartext transmission of sensitive information vulnerability CWE-319 in Fortinet FortiOS version 7.2.0 through 7.2.4,...

7.8CVSS5.2AI score0.00126EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/05/08 12:00 a.m.15 views

Fedora: Security Advisory for rust-tealdeer (FEDORA-2023-cc21019773)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.8AI score0.01121EPSS
SaveExploits1References2
NVD
NVD
added 2023/05/03 10:15 p.m.41 views

CVE-2023-27993

A relative path traversal CWE-23 in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to delete arbitrary directories from the underlying file system via crafted CLI commands...

7.1CVSS6.2AI score0.00226EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/03 10:15 p.m.22 views

Path traversal

A relative path traversal CWE-23 in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to delete arbitrary directories from the underlying file system via crafted CLI commands...

3.2CVSS6.7AI score0.00226EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/03 9:26 p.m.20 views

CVE-2023-27993

A relative path traversal CWE-23 in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to delete arbitrary directories from the underlying file system via crafted CLI commands...

6CVSS6.8AI score0.00226EPSS
SaveExploits0References1
NVD
NVD
added 2023/05/01 5:15 p.m.28 views

CVE-2023-22924

A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00AARP.14C0 could allow a remote authenticated attacker with administrator privileges to cause denial-of-service DoS conditions by executing crafted CLI commands on a vulnerable device...

4.9CVSS5.2AI score0.008EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/01 5:15 p.m.26 views

Buffer overflow

A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00AARP.14C0 could allow a remote authenticated attacker with administrator privileges to cause denial-of-service DoS conditions by executing crafted CLI commands on a vulnerable device...

3.3CVSS5.3AI score0.008EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2023/04/17 10:15 p.m.32 views

CVE-2023-28966

An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS Evolved allows a low-privileged local attacker with shell access to modify existing files or execute commands as root. The issue is caused by improper file and directory permissions on certain system files, allowing an...

7.8CVSS7.6AI score0.00164EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/04/17 12:00 a.m.35 views

CVE-2023-28966 Junos OS Evolved: Local low-privileged user with shell access can execute CLI commands as root

An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS Evolved allows a low-privileged local attacker with shell access to modify existing files or execute commands as root. The issue is caused by improper file and directory permissions on certain system files, allowing an...

7.8CVSS7.8AI score0.00164EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/04/17 12:00 a.m.14 views

Juniper Networks Junos OS Evolved 安全漏洞

Juniper Networks Junos OS Evolved is an updated version of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved, which can be exploited by a local, low-privileged user with shell access to execute CLI commands as root, and affects the following products...

7.8CVSS7.5AI score0.00164EPSS
SaveExploits0References2
CVE
CVE
added 2023/04/05 12:00 a.m.108 views

CVE-2023-20023

Cisco Identity Services Engine (ISE) CLI command vulnerability: multiple input validation issues allow an authenticated local attacker with Administrator privileges to inject commands and potentially gain root privileges. Affected product: ISE; root cause: insufficient validation of user-supplied...

6.7CVSS6.6AI score0.00448EPSS
SaveExploits0References1Affected Software1
CISA KEV Catalog
CISA KEV Catalog
added 2023/03/14 12:00 a.m.131 views

Fortinet FortiOS Path Traversal Vulnerability

Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI commands...

7.1CVSS6AI score0.10682EPSS
SaveIn wildExploits0
OSV
OSV
added 2023/03/07 5:15 p.m.8 views

CVE-2022-41328

A improper limitation of a pathname to a restricted directory vulnerability 'path traversal' CWE-22 in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands...

7.1CVSS5.8AI score0.10682EPSS
SaveExploits0References2
NVD
NVD
added 2023/03/07 5:15 p.m.40 views

CVE-2022-41328

A improper limitation of a pathname to a restricted directory vulnerability 'path traversal' CWE-22 in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands...

7.1CVSS6.7AI score0.10682EPSS
SaveExploits0References2
Prion
Prion
added 2023/03/07 5:15 p.m.36 views

Path traversal

A improper limitation of a pathname to a restricted directory vulnerability 'path traversal' CWE-22 in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands...

3.2CVSS6.7AI score0.10682EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/03/07 12:00 a.m.62 views

CVE-2022-41328

A improper limitation of a pathname to a restricted directory vulnerability ‘path traversal’ CWE-22 in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands...

7.1CVSS6.6AI score0.10682EPSS
SaveIn wildExploits0References2
Rows per page
Query Builder