3690 matches found
CVE-2024-26015
An incorrect parsing of numbers with different radices vulnerability CWE-1389 in FortiProxy version 7.4.3 and below, version 7.2.10 and below, version 7.0.17 and below and FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.15 and below IP address validation feature may permit a...
CVE-2024-26015
An incorrect parsing of numbers with different radices vulnerability CWE-1389 in FortiProxy version 7.4.3 and below, version 7.2.10 and below, version 7.0.17 and below and FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.15 and below IP address validation feature may permit a...
CVE-2024-26015
Fortinet FortiProxy/FortiOS vulnerable to an incorrect parsing of numbers with different radices (CWE-1389) in IP address validation, enabling an unauthenticated attacker to bypass the IP blocklist. Affected: FortiProxy 7.4.3 and below, 7.2.10 and below, 7.0.17 and below; FortiOS 7.4.3 and below,...
CVE-2024-26015
An incorrect parsing of numbers with different radices vulnerability CWE-1389 in FortiProxy version 7.4.3 and below, version 7.2.10 and below, version 7.0.17 and below and FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.15 and below IP address validation feature may permit a...
FortiOS - IP address validation mishandles zero characters
...
PT-2024-5554
Name of the Vulnerable Software and Affected Versions FortiProxy versions 7.4.3 and below FortiProxy versions 7.2.10 and below FortiProxy versions 7.0.17 and below FortiOS versions 7.4.3 and below FortiOS versions 7.2.8 and below FortiOS versions 7.0.15 and below Description The issue is related ...
CVE-2024-26015: Incorrect Parsing of Numbers with Different Radices
An incorrect parsing of numbers with different radices vulnerability CWE-1389 in FortiProxy version 7.4.3 and below, version 7.2.10 and below, version 7.0.17 and below and FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.15 and below IP address validation feature may permit a...
Cross site scripting vulnerability in SSL VPN web UI
...
Siemens RUGGEDCOM APE 1808
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
PT-2024-5733
Name of the Vulnerable Software and Affected Versions FortiOS versions prior to the fixed version FortiProxy versions prior to the fixed version Description The issue exists due to improper neutralization of input during web page generation, allowing a remote attacker to perform Cross-Site...
Exploit for Use of Password Hash With Insufficient Computational Effort in Fortinet Fortiproxy
FortiOS and FortiProxy Password Hashing Vulnerability to RCE...
PT-2024-41373
Уязвимость операционной системы FortiOS межсетевого экрана FortiGate 200F связана с недостатками механизма безопасности. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, реализовать атаку методом "грубой силы" brute force...
PT-2024-41370
Уязвимость операционной системы FortiOS межсетевого экрана FortiGate 200F связана с отсутствием механизмов контроля количества попыток ввода пароля. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, реализовать атаку методом «грубой силы» brute force...
The vulnerability of the command-line interface of FortiOS operating systems allows a hacker to execute arbitrary commands.
The vulnerability of the command-line interface of FortiOS operating systems relates to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
The vulnerability of the command-line interface of FortiOS operating systems and the FortiProx proxy server, which allows a hacker to decrypt the backup file.
The vulnerability of the command-line interface of FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to insufficient calculation of password hashes. Exploiting this vulnerability can allow attackers to decrypt the backup file...
Vulnerability fixed in Fortinet FortiOS
Fortinet has fixed vulnerabilities in FortiOS. A malicious party can exploit the vulnerabilities to execute arbitrary code on the vulnerable system through a Cross-Site-Scripting attack, or through SQL-Injection. Also, a malicious party can bypass security measures and thus allow traffic to pass...
Fortinet FortiOS Command Execution Vulnerability (CNVD-2024-29330)
Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. Fortinet FortiOS suffers from a...
The vulnerability of FortiOS operating system’s command-line interpreter, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of FortiOS command-line interpreter is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by introducing specially crafted command-line arguments...
VulnCheck KEV: CVE-2024-21754
A use of password hash with insufficient computational effort vulnerability CWE-916 affecting FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 6.4 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions may allow a privileged...
CVE-2024-26010
A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiWeb, FortiAuthenticator, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.1 through 7.0.3, FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0...