14 matches found
CVE-2025-61848
An improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.3,...
Path Traversal in CLI
...
Format string vulnerability in fazsvcd
...
CVE-2023-25606
An improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability CWE-23 in FortiAnalyzer and FortiManager management interface 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4 all versions may allow a remote and authenticated attacker to retrieve arbitrary files from the...
EUVD-2017-12267
Malware in sbrugna...
EUVD-2025-10306
Malicious code in bioql PyPI...
EUVD-2024-31239
Malicious code in bioql PyPI...
CVE-2024-33505
A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 allows attacker to escalation of privilege...
CVE-2024-33501
Two improper neutralization of special elements used in an SQL Command 'SQL Injection' vulnerability CWE-89 in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5, FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData version 7.4.0 and before 7.2.7...
CVE-2024-40584
CVE-2024-40584 concerns an OS Command Injection in Fortinet products due to improper neutralization of special elements in OS commands. Affected are FortiAnalyzer (versions 7.4.0–7.4.3, 7.2.0–7.2.5, 7.0.0–7.0.13, 6.4.0–6.4.15, 6.2.2–6.2.13), FortiManager (same version ranges), FortiAnalyzer BigDa...
CVE-2024-45331
CVE-2024-45331 is a privilege-escalation flaw caused by incorrect privilege assignment in Fortinet FortiAnalyzer (versions 6.4.0–6.4.15, 7.0.0–7.0.13, 7.2.0–7.2.5, 7.4.0–7.4.3) and FortiManager (6.4.0–6.4.15, 7.0.0–7.0.13, 7.2.0–7.2.5, 7.4.0–7.4.2) as well as FortiAnalyzer Cloud (6.4.1–6.4.7, 7.0...
CVE-2024-35276
A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0.0 through 7.0.12, FortiAnalyzer 6.4.0 through 6.4.14, FortiAnalyzer Cloud 7.4.1 through 7.4.3, FortiAnalyzer Cloud 7.2.1 through 7.2.5, FortiAnalyzer Clo...