Lucene search
+L

1350 matches found

CNNVD
CNNVD
added 2025/01/14 12:00 a.m.6 views

Fortinet FortiManager和FortiAnalyzer 路径遍历漏洞

Fortinet FortiManager and Fortinet FortiAnalyzer are both products of Fortinet, Inc. Fortinet FortiManager is a centralized network security management platform. The platform supports centralized management of any number of Fortinet devices, and can be grouped into different management domains AD...

7.2CVSS7.1AI score0.01399EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/14 12:00 a.m.8 views

PT-2025-2438

Name of the Vulnerable Software and Affected Versions: FortiAnalyzer versions 6.4.0 through 6.4.14 FortiAnalyzer versions 7.0.0 through 7.0.12 FortiAnalyzer versions 7.2.0 through 7.2.5 FortiAnalyzer versions 7.4.0 through 7.4.3 FortiAnalyzer Cloud versions 6.4.1 through 6.4.7 FortiAnalyzer Cloud...

9.8CVSS6.4AI score0.0042EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/01/14 12:00 a.m.9 views

Fortinet FortiManager和Fortinet FortiAnalyzer 缓冲区错误漏洞

Fortinet FortiManager and Fortinet FortiAnalyzer are both products of Fortinet, Inc. Fortinet FortiManager is a centralized network security management platform. The platform supports centralized management of any number of Fortinet devices, and can be grouped into different management domains AD...

8.8CVSS7AI score0.00663EPSS
SaveExploits0References1
Fortinet
Fortinet
added 2025/01/14 12:00 a.m.6 views

Admin Account Persistence after Deletion

...

9.8CVSS0.00909EPSS
SaveExploits0
Fortinet
Fortinet
added 2025/01/14 12:00 a.m.6 views

OS Command Injection

...

8.8CVSS0.01068EPSS
SaveExploits0
Fortinet
Fortinet
added 2025/01/14 12:00 a.m.5 views

Out-of-bounds Write in sndproxy

...

8.8CVSS0.00663EPSS
SaveExploits0
Fortinet
Fortinet
added 2025/01/14 12:00 a.m.6 views

SQL injections in sdnproxy daemon

...

8.8CVSS0.00819EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/01/14 12:00 a.m.66 views

Fortinet Fortigate Path traversal in csfd daemon (FG-IR-24-259)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the FG-IR-24-259 advisory. - A improper limitation of a pathname to a restricted directory 'path traversal' in Fortinet FortiRecorder versions...

9.1CVSS5.6AI score0.15308EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/14 12:00 a.m.5 views

PT-2025-1186

Name of the Vulnerable Software and Affected Versions FortiManager versions 7.6.0 through 7.6.1 FortiManager versions 7.4.1 through 7.4.3 FortiOS versions 7.6.0 FortiOS versions 7.4.0 through 7.4.4 FortiOS versions 7.2.5 through 7.2.9 FortiOS versions 7.0.0 through 7.0.15 FortiOS versions 6.4.0...

9.1CVSS7AI score0.15308EPSS
SaveExploits0References13
CNNVD
CNNVD
added 2025/01/14 12:00 a.m.11 views

Fortinet FortiManager 操作系统命令注入漏洞

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices, and can group devices into different management domains ADOM to further simplify the deployment and management of multi-device...

8.8CVSS7.7AI score0.01068EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/14 12:00 a.m.15 views

Fortinet多款产品 路径遍历漏洞

Fortinet FortiOS, etc. are products of Fortinet, Inc. Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform.Fortinet FortiManager is a centralized network security management platform.Fortinet FortiProxy is a secure network proxy that protects...

9.1CVSS6.6AI score0.15308EPSS
SaveExploits0References3
Information Security Automation
Information Security Automation
added 2025/01/02 7:34 p.m.42 views

New episode “In The Trend of VM” (#10): 8 trending vulnerabilities of November, zero budget VM and who should look for patches

New episode "In The Trend of VM" 10: 8 trending vulnerabilities of November, zero budget VM and who should look for patches. The competition for the best question on the topic of VM continues. Video on YouTube, LinkedIn Post on Habr rus Digest on the PT website Content: 00:29 Spoofing - Windows...

5.9CVSS7.6AI score0.99718EPSS
SaveExploits44
CNVD
CNVD
added 2024/12/25 12:00 a.m.10 views

Fortinet FortiManager Operating System Command Injection Vulnerability

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices, and can group devices into different management domains ADOM to further simplify the deployment and management of multi-device...

7.2CVSS7.8AI score0.01684EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/12/25 12:00 a.m.14 views

The vulnerability of the software for centralized device management by Fortinet’s FortiManager and FortiAnalyzer devices lies in their ability to bypass authentication using a user-controlled key. This allows unauthorized users to gain access to protected information.

The vulnerability of the software for centralized device management by Fortinet’s FortiManager and the network firewall FortiAnalyzer lies in the ability to bypass authentication by using a user-controlled key. Exploiting this vulnerability allows an attacker to gain unauthorized access to...

5CVSS5.5AI score0.00529EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:00 a.m.26 views

The vulnerability of the Fortinet FortiManager software, a centralized device management tool, arises from the lack of measures to neutralize specific elements, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Fortinet FortiManager device management software is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8.4AI score0.01684EPSS
SaveExploits0References2Affected Software2
CISA
CISA
added 2024/12/20 12:00 p.m.11 views

Fortinet Releases Security Updates for FortiManager

Fortinet released a security update to address a vulnerability in FortiManager. A remote cyber threat actor could exploit this vulnerability to take control of an affected system. Users and administrators are encouraged to review the following Fortinet Security Bulletin and apply the necessary...

7.4AI score
SaveExploits0References1
NCSC
NCSC
added 2024/12/19 3:22 p.m.9 views

Vulnerability fixed in FortiManager

Fortinet has fixed a vulnerability in FortiManager. The vulnerability is in the OS command injection in FortiManager, which allows authenticated remote attackers to execute unauthorized code via specially crafted FGFM requests. Fortinet has released updates to fix the vulnerability. See attached...

7.2CVSS7.9AI score0.01684EPSS
SaveExploits0References1
NCSC
NCSC
added 2024/12/19 2:53 p.m.11 views

Vulnerability fixed in Fortinet FortiWLM

Fortinet has fixed a vulnerability in FortiWLM Specifically for versions 8.6.0 to 8.6.5 and 8.5.0 to 8.5.4. The vulnerability is located in FortiWLM's relative path-traversal functionality, which allows remote, unauthenticated attackers to execute unauthorized code via specially crafted Web...

9.8CVSS7.3AI score0.24901EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/19 1:15 p.m.9 views

CVE-2021-32589

A Use After Free CWE-416 vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.2.10 and below, version 5.0.12 and below and FortiAnalyzer version 7.0.0, version 6.4.5 an...

9.8CVSS5.9AI score0.08703EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/19 1:15 p.m.38 views

CVE-2021-32589

A Use After Free CWE-416 vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.2.10 and below, version 5.0.12 and below and FortiAnalyzer version 7.0.0, version 6.4.5 an...

9.8CVSS0.08703EPSS
SaveExploits0References1
Rows per page
Query Builder