CVE-2021-22126

A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 to 8.3.2, version 8.2.7 to 8.2.6 may allow a local, authenticated attacker to connect to the managed Access Point Meru AP and FortiAP-U as root using the default hard-coded...

EUVD-2016-8413

Malware in sbrugna...

EUVD-2021-12914

Malware in sbrugna...

EUVD-2017-8700

Malware in sbrugna...

EUVD-2017-12275

Malware in sbrugna...

EUVD-2020-30114

Malware in sbrugna...

EUVD-2017-16368

Malware in sbrugna...

EUVD-2017-16362

Malware in sbrugna...

EUVD-2021-19424

Malware in sbrugna...

EUVD-2016-8414

Malware in sbrugna...

EUVD-2021-12908

Malware in sbrugna...

EUVD-2016-9339

Malware in sbrugna...

EUVD-2022-28514

Malicious code in bioql PyPI...

EUVD-2021-9282

Malicious code in bioql PyPI...

EUVD-2021-29716

Malicious code in bioql PyPI...

CVE-2021-42758

An improper access control vulnerability CWE-284 in FortiWLC 8.6.1 and below may allow an authenticated and remote attacker with low privileges to execute any command as an admin user with full access rights via bypassing the GUI restrictions...

CVE-2021-26093

An access of uninitialized pointer CWE-824 vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a local and authenticated attacker to crash the access point being managed by the controller by executing a crafted CLI command...

CVE-2020-9288

An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack XSS via the ESS profile or the Radius Profile...

CVE-2021-32584

An improper access control CWE-284 vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 and below, version 8.2.7 to 8.2.4, version 8.1.3 may allow an unauthenticated and remote attacker to access certain areas of the web management CGI...

CVE-2021-26087

An improper neutralization of input during web page generation in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 web interface may allow both authenticated remote attackers and non-authenticated attackers in the same network as the appliance to perform a...