6014 matches found
Cross site scripting
An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6.2.0, and 6.1.1 may allow a remote unauthenticated attacker to perform a Cross Site Scripting attack XSS...
Cross site scripting
An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2 allows a remote authenticated attacker to perform a cross site scripting attack XSS...
CVE-2019-17653
A Cross-Site Request Forgery CSRF vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a remote, unauthenticated attacker to perform arbitrary actions using an authenticated user's session by persuading the victim to follow a malicious link...
CVE-2019-17653
Fortinet FortiSIEM 5.2.5 UI is affected by a Cross-Site Request Forgery (CSRF) vulnerability. The issue allows a remote, unauthenticated attacker to perform arbitrary actions in an authenticated user’s session by convincing the victim to follow a malicious link. Root cause noted in safety reports...
CVE-2020-6643
An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2 allows a remote authenticated attacker to perform a cross site scripting attack XSS...
CVE-2020-6643
CVE-2020-6643 affects Fortinet FortiIsolator 1.2.2. The issue is an improper neutralization of input in the URL Description, enabling a remote authenticated attacker to perform a cross-site scripting (XSS) attack. Documentation indicates a stored XSS variant via a parameter in the request (as des...
CVE-2019-16156
CVE-2019-16156 affects Fortinet FortiWeb 6.0.5, 6.2.0 and 6.1.1, where an Improper Neutralization of Input in the Anomaly Detection Parameter/Interface can enable a remote unauthenticated attacker to perform a Cross Site Scripting (XSS) attack. The linked connected documents confirm the root caus...
[SECURITY] Fedora 31 Update: openfortivpn-1.12.0-1.fc31
openfortivpn is a client for PPP+SSL VPN tunnel services. It spawns a pppd process and operates the communication between the gateway and this process. It is compatible with Fortinet VPNs...
[SECURITY] Fedora 30 Update: openfortivpn-1.12.0-1.fc30
openfortivpn is a client for PPP+SSL VPN tunnel services. It spawns a pppd process and operates the communication between the gateway and this process. It is compatible with Fortinet VPNs...
Fedora: Security Advisory for openfortivpn (FEDORA-2020-42eb8821db)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for openfortivpn (FEDORA-2020-c96ab3c813)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fortinet FortiOS 5.x >= 5.4.0 / 6.x < 6.0.9 / 6.2.x < 6.2.2 URL Redirection Vulnerability (FG-IR-19-179)
The remote host is running a version of FortiOS 5.x greater than or equal to 5.4.0, 6.x prior to 6.0.9, or 6.2.x prior to 6.2.2. It is, therefore, affected by a URL redirection vulnerability due to an input-validation flaw related to the admin password change page. C Tenable Network Security, Inc...
Top 10 Most Innovative Cybersecurity Companies After RSA 2020
The RSA Conference, the world's leading information security conference and exposition, held its 29th annual event in San Francisco last week. According to the organizers, over 36,000 attendees, 704 speakers, and 658 exhibitors gathered at the Moscone Center to discuss privacy, Machine Learning,...
WordPress Envira Photo Gallery plugin <= 1.7.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Fortinet in WordPress Envira Photo Gallery plugin versions = 1.7.6. Solution Update the WordPress Envira Photo Gallery plugin to the latest available version at least 1.7.7...
Fortinet FortiOS Redirection Vulnerability
Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A security vulnerability exists i...
WordPress Modula Image Gallery plugin <= 2.2.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Fortinet in WordPress Modula Image Gallery plugin versions = 2.2.4. Solution Update the WordPress Modula Image Gallery plugin to the latest available version at least 2.2.5...
Exploit for SQL Injection in Imagely Nextgen_Gallery
CVE-2019-14314 CVE-2019-14314 - NextGEN Gallery 3.2.10 Authent...
CVE-2019-5593
Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS plaint text private keys of system's builtin local certificates via unsetting the keys encryption password in FortiOS 6.2.0, 6.0.0 to 6.0.6, 5.6.10 and below or for user uploaded...
