Fortinet FortiWeb 输入验证错误漏洞

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning, and other attacks to secure web applications and protect sensitive database content. An input validation error vulnerability...

Authorization Bypass

Overview When access rules are used inside a protected host, some URL encodings may bypass filtering system. Recommendation Upgrade to version 0.5.2. References - https://github.com/advisories/GHSA-x44x-r84w-8v67 - https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2290...

CVE-2019-9488: Improper Restriction of XML External Entity Reference

Trend Micro Deep Security Manager 10.x, 11.x and Vulnerability Protection 2.0 are vulnerable to a XML External Entity Attack. However, for the attack to be possible, the attacker must have root/admin access to a protected host which is authorized to communicate with the Deep Security Manager DSM...