6011 matches found
Cross site scripting
A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the applicationSearch parameter in the FortiView functionality...
CVE-2017-7342
A weak password recovery process vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via a hidden Close button...
CVE-2017-7342
CVE-2017-7342 relates to Fortinet FortiPortal. Affected product: FortiPortal versions 4.0.0 and earlier. Root cause: a weak password recovery process that can allow an attacker to execute unauthorized code or commands via a hidden Close button. Impact: as per NVD, high/severe potential with remot...
CVE-2017-7342
A weak password recovery process vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via a hidden Close button...
CVE-2017-7340
CVE-2017-7340 affects Fortinet FortiPortal 4.0.0 and earlier. A Cross-Site Scripting flaw allows an attacker to execute unauthorized code/commands via the FortiView applicationSearch parameter. The vulnerability is tied to FortiPortal’s FortiView functionality; no exploitation details or patch/ve...
CVE-2017-7340
A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the applicationSearch parameter in the FortiView functionality...
CVE-2017-7340
A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the applicationSearch parameter in the FortiView functionality...
Fortinet FortiClient Local Privilege Escalation
The version of Fortinet FortiClient running on the remote host is prior to 6.0.5. It is, therefore, affected by a privilege escalation vulnerability. An unauthenticated, remote attacker can exploit this to gain privileged or administrator access to the system. C Tenable Network Security, Inc...
Fortinet FortiClient NDIS Miniport Driver Null Pointer Dereference
The version of Fortinet FortiClient running on the remote host is prior to 6.0.3. It is, therefore, affected by a NULL pointer dereference flaw due to a failure to utilize necessary NULL checks before doing indirect function calls. An unauthenticated, local attacker can exploit this, via the NDIS...
Fortinet FortiOS 5.6.0 Remote Code Execution (FG-IR-18-018)
The version of Fortinet FortiOS running on the remote device is 5.6.0. It is, therefore, affected by a remote execution vulnerability which can be exploited via the SSH username variable. A remote attacker can exploit this to bypass authentication and execute arbitrary commands which could cause...
Fortinet SSL VPN Bruteforce Login Utility
This module scans for Fortinet SSL VPN web login portals and performs login brute force to identify valid credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Fortinet SSL VPN Bruteforc...
Automattic: [FG-VD-19-022] Wordpress WooCommerce Cross-Site Scripting Vulnerability Notification
Subject: FG-VD-19-022 Wordpress WooCommerce Cross-Site Scripting Vulnerability Notification Dear Automattic, Fortinet's FortiGuard Labs have discovered a security issue in your product WooCommerce on 02/13/2019. We estimate its risk level is 2, on a scale of 1 lowest to 5 highest, in terms of its...
Null pointer dereference
A null pointer dereference vulnerability in Fortinet FortiClientWindows 6.0.2 and earlier allows attacker to cause a denial of service via the NDIS miniport driver...
CVE-2018-9190
A null pointer dereference vulnerability in Fortinet FortiClientWindows 6.0.2 and earlier allows attacker to cause a denial of service via the NDIS miniport driver...
CVE-2018-9190
A null pointer dereference vulnerability in Fortinet FortiClientWindows 6.0.2 and earlier allows attacker to cause a denial of service via the NDIS miniport driver...
CVE-2018-9190
A null pointer dereference vulnerability in Fortinet FortiClientWindows 6.0.2 and earlier allows attacker to cause a denial of service via the NDIS miniport driver...
CVE-2018-9190
A null pointer dereference vulnerability in Fortinet FortiClientWindows 6.0.2 and earlier allows attacker to cause a denial of service via the NDIS miniport driver...
CVE-2018-9190
A null pointer dereference vulnerability in Fortinet FortiClientWindows 6.0.2 and earlier allows attacker to cause a denial of service via the NDIS miniport driver...
CVE-2018-9190
Fortinet FortiClient Windows has a NULL pointer dereference in the NDIS Miniport driver that affects FortiClient.exe prior to version 6.0.3. The issue, caused by missing NULL checks before indirect calls, can be exploited by a local attacker to cause a denial of service. A fix is available in For...