131 matches found
CVE-2021-22126
A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 to 8.3.2, version 8.2.7 to 8.2.6 may allow a local, authenticated attacker to connect to the managed Access Point Meru AP and FortiAP-U as root using the default hard-coded...
EUVD-2021-19424
Malware in sbrugna...
EUVD-2017-12275
Malware in sbrugna...
EUVD-2017-16362
Malware in sbrugna...
EUVD-2016-9339
Malware in sbrugna...
EUVD-2020-30114
Malware in sbrugna...
EUVD-2021-12908
Malware in sbrugna...
EUVD-2016-8414
Malware in sbrugna...
EUVD-2017-16368
Malware in sbrugna...
EUVD-2017-8700
Malware in sbrugna...
EUVD-2021-12914
Malware in sbrugna...
EUVD-2016-8413
Malware in sbrugna...
EUVD-2021-29716
Malicious code in bioql PyPI...
EUVD-2022-28514
Malicious code in bioql PyPI...
EUVD-2021-9282
Malicious code in bioql PyPI...
CVE-2021-42758
An improper access control vulnerability CWE-284 in FortiWLC 8.6.1 and below may allow an authenticated and remote attacker with low privileges to execute any command as an admin user with full access rights via bypassing the GUI restrictions...
CVE-2021-26093
An access of uninitialized pointer CWE-824 vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a local and authenticated attacker to crash the access point being managed by the controller by executing a crafted CLI command...
CVE-2020-9288
An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack XSS via the ESS profile or the Radius Profile...
CVE-2021-32584
An improper access control CWE-284 vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 and below, version 8.2.7 to 8.2.4, version 8.1.3 may allow an unauthenticated and remote attacker to access certain areas of the web management CGI...
CVE-2021-26087
An improper neutralization of input during web page generation in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 web interface may allow both authenticated remote attackers and non-authenticated attackers in the same network as the appliance to perform a...