DEBIAN-CVE-2023-50980

gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...

Command injection

gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...

CVE-2023-50980

gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...

CVE-2023-50980

gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...

CVE-2023-50980

gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...

CVE-2023-50980

CVE-2023-50980 affects Crypto++ (gf2n.cpp) up to version 8.9.0. The vulnerability allows a DoS (application crash) via DER-encoded public-key data for an F(2^m) curve when the polynomial term degrees are not strictly decreasing. Multiple advisories (OpenSUSE, SUSE, Astra Linux, Nessus references)...

The vulnerability of the FortiDDoS-F software and the FortiADC web management tool lies in the use of an unauthorized intermediate policy file, allowing attackers to access confidential information.

The vulnerability of the FortiDDoS-F software and the FortiADC web management tool lies in the use of an unauthorized intermediate policy file. Exploiting this vulnerability can allow attackers to access confidential information...

The vulnerability of the access control devices in Fortinet’s FortiNAC and FortiNAC-F systems arises from the lack of protective measures for the website structure. This allows attackers to execute arbitrary code.

The vulnerability of the access control devices in Fortinet’s FortiNAC and FortiNAC-F systems exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the FortiDDoS-F software and the FortiADC application delivery controller, which involves copying buffers without checking the size of the input data, allows attackers to execute arbitrary code or perform arbitrary commands.

The vulnerability of the FortiDDoS-F software-defined security platform and the FortiADC application delivery controller lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or perform arbitrary...

f-faro.com Improper Access Control vulnerability OBB-3798557

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

f-momiji.com Improper Access Control vulnerability OBB-3798558

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerabilities of the microprogrammed software for Ethernet communication adapters, the FX3U-ENETADP/Ethernet Communication Block FX3U-ENET(-L), and the microprogrammed software for programmable logic controllers MELSEC iQ-F and MELSEC-F, allow attackers to cause malfunctions in the equipment’s operation.

The vulnerabilities of microprogrammed software for Ethernet communication adapters, such as the FX3U-ENETADP/Ethernet Communication Block FX3U-ENET-L, and microprogrammed software for programmable logic controllers like MELSEC iQ-F and MELSEC-F, are related to insufficient verification of data...

CVE-2023-29177

Multiple buffer copy without checking size of input 'classic buffer overflow' vulnerabilities CWE-120 in FortiADC version 7.2.0 and before 7.1.2 & FortiDDoS-F version 6.5.0 and before 6.4.1 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI requests...

CVE-2023-29177

Multiple buffer copy without checking size of input 'classic buffer overflow' vulnerabilities CWE-120 in FortiADC version 7.2.0 and before 7.1.2 & FortiDDoS-F version 6.5.0 and before 6.4.1 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI requests...

CVE-2023-25603

A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6.3.0 - 6.3.4 and 6.4.0 - 6.4.1 allow an unauthorized attacker to carry out privileged actions and retrieve sensitive information via crafted web requests...

Cross site scripting

A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6.3.0 - 6.3.4 and 6.4.0 - 6.4.1 allow an unauthorized attacker to carry out privileged actions and retrieve sensitive information via crafted web requests...

Buffer overflow

Multiple buffer copy without checking size of input 'classic buffer overflow' vulnerabilities CWE-120 in FortiADC version 7.2.0 and before 7.1.2 & FortiDDoS-F version 6.5.0 and before 6.4.1 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI requests...

CVE-2023-25603

A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6.3.0 - 6.3.4 and 6.4.0 - 6.4.1 allow an unauthorized attacker to carry out privileged actions and retrieve sensitive information via crafted web requests...

CVE-2023-25603

Fortinet FortiADC and FortiDDoS-F are affected by a cross-domain policy weakness (untrusted domains) that can enable an attacker to perform privileged actions and access sensitive information via crafted web requests. Affected versions include Fortinet FortiADC 7.1.0–7.1.1 and FortiDDoS-F 6.3.0–6...

CVE-2023-29177

Multiple buffer copy without checking size of input 'classic buffer overflow' vulnerabilities CWE-120 in FortiADC version 7.2.0 and before 7.1.2 & FortiDDoS-F version 6.5.0 and before 6.4.1 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI requests...