5 matches found
K6916: Case change in URL host name circumvents Accessibility Scope
Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...
PT-2022-16904 · Unknown · Smokescreen
Name of the Vulnerable Software and Affected Versions: Smokescreen versions prior to 0.0.3 Description: Smokescreen is a simple HTTP proxy designed to prevent server-side request forgery SSRF attacks by blocking access to certain URLs. It also features a deny list to restrict access to additional...
VulnCheck KEV: CVE-2020-12812
Fortinet FortiOS SSL VPN contains an improper authentication vulnerability that may allow a user to login successfully without being prompted for the second factor of authentication FortiToken if they change the case in their username...
Fortinet FortiOS SSL VPN Authorization Issues Vulnerability
Fortinet FortiOS is a set of security operating systems dedicated to the FortiGate network security platform from the U.S. company Fiat Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam, etc. SSL VPN is one of the virtual private netwo...
Wave by wave cms file upload vulnerability
Wave CMS is the use of dotNET2.0 technology platform architecture, based on MSSQL2005 compatible with MSSQL2000 technology development of the site management system. Wave CMS file upload vulnerability, /Plugins/swfFileUpload/UploadHandler.ashx global filtering, can be bypassed by rewriting the ca...