PT-2025-41919

Name of the Vulnerable Software and Affected Versions Web Server affected versions not specified Description A denial-of-service issue exists due to a high volume of requests sent to the web server. This can lead to a system crash, requiring a power cycle for recovery and webpage utilization. The...

Fortinet FortiVoice 操作系统命令注入漏洞

FortiVoice is Fortinet's all-in-one enterprise voice over IP communications system. A command injection vulnerability exists in the Fortinet FortiVoice operating system that stems from improper neutralization of specific elements. An attacker could exploit this vulnerability to construct a...

CVE-2025-58324: Improper Neutralization of Input During Web Page Generation

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authenticated attacker ...

PT-2025-41941

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.4.0 through 7.4.3 and prior to 7.2.7 FortiProxy versions 7.4.0 through 7.4.3 and prior to 7.2.9 FortiPAM versions prior to 1.2.0 FortiSwitchManager versions 7.2.0 through 7.2.3 and 7.0.0 through 7.0.3 Description An improper...

The vulnerability of the JetBrains Ktor web application development framework, related to inconsistent interpretation of HTTP requests, allows attackers to compromise the integrity of protected information.

The vulnerability of the JetBrains Ktor web application framework lies in its inconsistent interpretation of HTTP requests. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

CVE-2025-31366: Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation vulnerability CWE-79 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4 all...

Fortinet Fortigate Heap Overflow in fgfmsd (FG-IR-24-442)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-442 advisory. - A heap-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.10, 7.0.0...

Fortinet Fortigate Heap buffer overflow in websocket (FG-IR-24-546)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-546 advisory. - A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0...

Fortinet FortiManager Heap Overflow in fgfmsd (FG-IR-24-442)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-442 advisory. - A heap-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.10, 7.0.0...

Fortinet Fortigate FGFM protocol allows unauthenticated reset of the connection (FG-IR-24-041)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-041 advisory. - An improper check or handling of exceptional conditions vulnerability CWE-703 in FortiOS version 7.4.0 through 7.4.3 and...

PT-2025-41958

Name of the Vulnerable Software and Affected Versions Fortinet FortiOS versions 7.4.0 through 7.4.1 and versions prior to 7.2.8 Fortinet FortiProxy versions prior to 7.4.8 Description An improper authorization issue exists that allows an authenticated attacker to access static files of other...

The vulnerability of the IPMacBindModify() function in the Tenda G3 wireless access point’s software allows a hacker to cause a service failure.

The vulnerability of the IPMacBindModify function in the Tenda G3 wireless access point software is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending specially crafted POST requests...

The vulnerability of the formDelPortMapping() function in the Tenda G3 wireless access point software allows a intruder to trigger a service failure.

The vulnerability of the formDelPortMapping function in the Tenda G3 wireless access point software is related to buffer overflows due to the processing of the portMappingIndex parameter. Exploiting this vulnerability allows an attacker to cause service interruptions by sending specially crafted...

The vulnerability of the getsinglepppuser() function in the Tenda G3 wireless access point software allows a intruder to trigger a service failure.

The vulnerability of the getsinglepppuser function in the Tenda G3 wireless access point’s microprogramming system is related to buffer overflows due to the processing of the pPppUser parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending speciall...

Domain fronting protection bypass in explicit web proxy

...

Fortinet FortiOS和Fortinet FortiProxy 授权问题漏洞

Fortinet FortiOS is a network operating system developed by Fortinet for use in its firewall and network security appliances. A security vulnerability exists in Fortinet FortiOS that stems from a flaw in the authorization mechanism. An attacker could exploit the vulnerability to access static fil...

PT-2025-41957

Name of the Vulnerable Software and Affected Versions Fortinet FortiAnalyzer versions 7.6.0 through 7.6.3 Fortinet FortiAnalyzer versions prior to 7.4.6 Description An improper authentication issue exists in FortiAnalyzer. An unauthenticated attacker can obtain information about the device’s heal...

CVE-2025-49201: Weak Authentication

A weak authentication vulnerability in Fortinet FortiPAM 1.5.0, FortiPAM 1.4.0 through 1.4.2, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiSwitchManager 7.2.0 through 7.2.4 allows attacker to execute unauthorized code or commands...

CVE-2025-25255: Improperly Implemented Security Check for Standard

An Improperly Implemented Security Check for Standard vulnerability CWE-358 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0.1 through 7.0.22 may allow an unauthenticated proxy user ...

PT-2025-41967

Name of the Vulnerable Software and Affected Versions Fortinet FortiADC versions 7.4.0, 7.2.3 and below, 7.1.4 and below, 7.0 all versions, 6.2 all versions Description An issue exists in Fortinet FortiADC that may allow an authenticated attacker to obtain sensitive data via crafted HTTP or HTTPS...