Lucene search
+L

5926 matches found

Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.9 views

PT-2025-32877 · Fortinet · Fortiweb Cli

Name of the Vulnerable Software and Affected Versions: Fortinet FortiWeb CLI versions 7.6.0 through 7.6.3 Fortinet FortiWeb CLI versions prior to 7.4.8 Description: A stack-based buffer overflow vulnerability allows a privileged attacker to execute arbitrary code or commands via crafted CLI...

6.7CVSS8.6AI score0.00135EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/08/12 12:0 a.m.9 views

Fortinet FortiSIEM 操作系统命令注入漏洞

Fortinet FortiSIEM is a suite of security information and event management systems from the American company Fiat Fortinet. The system includes features such as asset discovery, workflow automation and unified management. Fortinet FortiSIEM has an operating system command injection vulnerability,...

9.8CVSS7.5AI score0.5534EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.11 views

PT-2025-32871 · Fortinet · Fortindr +4

Name of the Vulnerable Software and Affected Versions: Fortinet FortiMail versions 7.6.0 through 7.6.1 and prior to 7.4.3 Fortinet FortiVoice versions 7.0.0 through 7.0.5 and prior to 7.4.9 Fortinet FortiRecorder versions 7.2.0 through 7.2.1 and prior to 7.0.4 Fortinet FortiCamera versions 7.6.0...

4.4CVSS6.4AI score0.00175EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/08/12 12:0 a.m.10 views

Fortinet FortiWeb CLI 安全漏洞

Fortinet FortiWeb CLI is a command line interface from Fortinet, Inc. A security vulnerability exists in Fortinet FortiWeb CLI versions 7.6.0 through 7.6.3 and prior to 7.4.8, which originates from a stack buffer overflow and could lead to the execution of arbitrary code...

6.7CVSS7.4AI score0.00135EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/12 12:0 a.m.5 views

Fortinet FortiWeb 操作系统命令注入漏洞

Fortinet FortiWeb is a Web application layer firewall from Fiat Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning, and other attacks to secure Web applications and protect sensitive database content. Fortinet FortiWeb versions 7.6.0 throu...

6.7CVSS7.9AI score0.0045EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.7 views

PT-2025-32870

Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS versions 6.4.0 through 6.4.15 and versions prior to 6.2.16 Fortinet FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8 and versions prior to 7.0.15 Fortinet FortiPAM versions prior to 1.2.0 Description: An...

8.1CVSS5.7AI score0.00572EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.11 views

PT-2025-32882 · Fortinet · Fortiadc

Name of the Vulnerable Software and Affected Versions: Fortinet FortiADC versions 7.2.0 and prior to 7.1.1 Description: An improper neutralization of special elements used in an OS Command Injection vulnerability allows a remote and authenticated attacker with low privilege to execute unauthorize...

7.2CVSS7.8AI score0.01094EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/08/12 12:0 a.m.8 views

Fortinet多款产品 输入验证错误漏洞

Fortinet FortiOS and others are products of Fortinet, Inc.Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform.Fortinet FortiProxy SSL VPN is a software application.Fortinet FortiPAM is a platform for privilege access control. An input validation...

6.5CVSS6.8AI score0.00448EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/12 12:0 a.m.12 views

Fortinet FortiOS Security Fabric 安全漏洞

Fortinet FortiOS Security Fabric is a network security platform from Fortinet, Inc. A security vulnerability exists in Fortinet FortiOS Security Fabric versions 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all, 7.0 all, and 6.4 all, which stems from an improper assignment of privileges and could...

7.2CVSS6.5AI score0.00612EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/08/12 12:0 a.m.23 views

Fortinet FortiWeb 安全漏洞

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures web applications and protects sensitive database content. A security vulnerability exists in Fortinet...

8.1CVSS7.1AI score0.09825EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
added 2025/08/12 12:0 a.m.35 views

Fortinet Fortigate Weak authentication - FGFM protocol (FG-IR-24-042)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-042 advisory. - An authentication bypass using an alternate path or channel CWE-288 vulnerability in Fortinet FortiOS version 6.4.0 through...

8.1CVSS5.7AI score0.00572EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/12 12:0 a.m.9 views

Fortinet FortiManager Arbitrary file overwrite in FGFMd (FG-IR-24-473)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-473 advisory. - An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability CWE-22 in Fortinet...

6.5CVSS5.9AI score0.00601EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/12 12:0 a.m.8 views

Fortinet Fortigate Integer Overflow on SSL-VPN bookmarks (FG-IR-24-364)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-364 advisory. - An Integer Overflow or Wraparound vulnerability CWE-190 in FortiOS version 7.6.2 and below, version 7.4.7 and below, versio...

6.5CVSS5.6AI score0.00448EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/08/08 12:0 a.m.10 views

The vulnerability of the FortiMail email security system, a software-hardware solution for information protection based on AI and deep neural networks from Fortinet’s FortiNDR (Network Detection and Response), arises from the possibility of copying buffers without checking the size of the input data. This allows attackers to execute arbitrary code.

The vulnerability of the FortiMail email security system, a software-hardware solution for information protection based on AI and deep neural networks from Fortinet, is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker...

6.5CVSS5.8AI score0.00341EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/08/08 12:0 a.m.11 views

The vulnerability of Fortinet FortiClient Windows security devices, which stems from the use of a strictly encrypted cryptographic key, allows attackers to gain unauthorized access to protected information.

The vulnerability of Fortinet FortiClient Windows protection lies in the use of a strictly encrypted cryptographic key. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

3.3CVSS5.4AI score0.00216EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2025/08/06 12:0 a.m.9 views

PT-2025-32349 · Undefined · Undefined

CVE-2025-55023 - Fortinet SSL/TLS Weakness CVE ID : CVE-2025-55023 Published : Aug. 6, 2025, 4:16 a.m. | 2 hours, 19 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

7.3AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/07/28 12:0 a.m.11 views

The vulnerability of Fortinet FortiOS operating systems, related to operations beyond the buffer in memory, allows attackers to cause a malfunction of the FGFM daemon.

The vulnerability of Fortinet FortiOS operating systems lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to trigger a malfunction of the FGFM daemon using a specially created request...

3.7CVSS5.8AI score0.00657EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/28 12:0 a.m.9 views

The vulnerability of Fortinet FortiOS operating systems, related to integer overflows, allows attackers to cause crashes in the csfd daemon.

The vulnerability of Fortinet FortiOS operating systems is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to trigger a crash of the csfd daemon through a specially crafted request...

5.3CVSS5.5AI score0.00694EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2025/07/25 12:0 a.m.5 views

Fortinet FortiIsolator Access Control Error Vulnerability

Fortinet FortiIsolator is a Fortinet application that provides remote security isolation for browsers. The application adds additional advanced threat protection capabilities to the Fortinet Security Fabric and protects business-critical data from sophisticated threats on the Web. Content and fil...

4.3CVSS6.9AI score0.00318EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/07/24 10:19 p.m.352 views

Exploit for Improper Access Control in Fortinet Forticlient

CVE-2024-40586 Windows Coerced Authentication in FortiClient...

6.7CVSS8AI score0.00243EPSS
SaveExploits1
Rows per page
Query Builder