CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

297 matches found

NVD•added 2023/04/11 5:15 p.m.•19 views

CVE-2022-41330

An improper neutralization of input during web page generation vulnerability 'Cross-site Scripting' CWE-79 in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9, version 6.4.0 through 6.4.11 and before 6.2.12 and FortiProxy version 7.2.0 through 7.2.1 and before 7.0.7 allow...

8.8CVSS8.5AI score0.00645EPSS

SaveExploits0References1

OSV•added 2023/04/11 5:15 p.m.•10 views

CVE-2022-41330

6.1CVSS5.8AI score0.00645EPSS

SaveExploits0References1

Prion•added 2023/04/11 5:15 p.m.•31 views

Cross site scripting

5.8CVSS6AI score0.00645EPSS

SaveExploits0References1Affected Software2

Vulnrichment•added 2023/04/11 4:05 p.m.•17 views

CVE-2022-41330

8.8CVSS6.2AI score0.00645EPSS

SaveExploits0References1

Cvelist•added 2023/04/11 4:05 p.m.•38 views

CVE-2022-41330

8.8CVSS8.6AI score0.00645EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2023/04/11 12:00 a.m.•1 views

CVE-2022-41330: Improper Neutralization of Input During Web Page Generation

8.8CVSS5.8AI score0.00645EPSS

SaveExploits0References3

Tenable Nessus•added 2023/03/13 12:00 a.m.•49 views

Fortinet FortiOS - Information Disclosure (FG-IR-22-364)

The version of FortiOS installed on the remote host is therefore, affected by a information disclosure vulnerability. An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS and FortiProxy may allow an unauthenticated attacker to obtain sensitive logging information...

5.3CVSS5.7AI score0.00559EPSS

SaveExploits0References2

NVD•added 2023/03/07 5:15 p.m.•28 views

CVE-2022-41329

An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in Fortinet FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiOS version 7.2.0 through 7.2.3 and 7.0.0 through 7.0.9 allows an unauthenticated attackers to obtain sensitive logging informations ...

5.3CVSS5.5AI score0.00559EPSS

SaveExploits0References1

Vulnrichment•added 2023/03/07 4:22 p.m.•29 views

CVE-2022-41329

5.3CVSS6.5AI score0.00559EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2023/03/07 12:00 a.m.•1 views

CVE-2022-41329: Exposure of Sensitive Information to an Unauthorized Actor

5.3CVSS5.9AI score0.00559EPSS

SaveExploits0References3

NVD•added 2023/02/16 7:15 p.m.•41 views

CVE-2023-22638

Several improper neutralization of inputs during web page generation vulnerability CWE-79 in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.11 and below, 8.7.6 and below, 8.6.5 and below, 8.5.4 and below, 8.3.7 and below may allow an authenticated attacker to perform several XSS...

7.1CVSS6.6AI score0.00462EPSS

SaveExploits0References1

Vulnrichment•added 2023/02/16 6:07 p.m.•22 views

CVE-2023-22638

7.1CVSS6AI score0.00462EPSS

SaveExploits0References1

CVE•added 2023/02/16 6:07 p.m.•76 views

CVE-2023-22638

FortiNAC is affected by CVE-2023-22638. The vulnerability is an improper neutralization of inputs in the web page generation, enabling authenticated attackers to perform multiple XSS attacks via crafted HTTP GET requests. Affected FortiNAC versions: 9.4.1 and below, 9.2.6 and below, 9.1.8 and bel...

7.1CVSS5.2AI score0.00462EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2023/02/16 6:05 p.m.•16 views

CVE-2022-30300

A relative path traversal vulnerability CWE-23 in FortiWeb 7.0.0 through 7.0.1, 6.3.6 through 6.3.18, 6.4 all versions may allow an authenticated attacker to obtain unauthorized access to files and data via specifically crafted HTTP GET requests...

6.5CVSS6.6AI score0.00802EPSS

SaveExploits0References1

Cvelist•added 2023/02/16 6:05 p.m.•51 views

CVE-2022-30300

6.5CVSS6.5AI score0.00802EPSS

SaveExploits0References1

Fortinet•added 2023/02/16 12:00 a.m.•82 views

FortiWeb - Path traversal in API handler

A relative path traversal vulnerability CWE-23 in FortiWeb may allow an authenticated attacker to obtain unauthorized access to files and data via specifically crafted HTTP GET requests...

4CVSS6.1AI score0.00802EPSS

SaveExploits0Affected Software1

Rapid7 Vulnerability Database (full)•added 2023/02/16 12:00 a.m.•2 views

CVE-2023-22638: Improper Neutralization of Input During Web Page Generation

7.1CVSS5.8AI score0.00462EPSS

SaveExploits0References3

Fortinet•added 2023/02/16 12:00 a.m.•52 views

FortiNAC - Multiple Stored and Reflected XSS

Several improper neutralization of inputs during web page generation vulnerability CWE-79 in FortiNAC may allow an authenticated attacker to perform several XSS attacks via crafted HTTP GET requests...

4.9CVSS5.2AI score0.00462EPSS

SaveExploits0

Positive Technologies•added 2023/02/16 12:00 a.m.•19 views

PT-2023-1499 · Fortinet · Fortinac

Name of the Vulnerable Software and Affected Versions: FortiNAC versions 9.4.1 and below FortiNAC versions 9.2.6 and below FortiNAC versions 9.1.8 and below FortiNAC versions 8.8.11 and below FortiNAC versions 8.7.6 and below FortiNAC versions 8.6.5 and below FortiNAC versions 8.5.4 and below...

7.1CVSS5.1AI score0.00462EPSS

SaveExploits0References3

Positive Technologies•added 2023/02/16 12:00 a.m.•14 views

PT-2023-1500 · Fortinet · Fortiweb

Name of the Vulnerable Software and Affected Versions: FortiWeb versions 6.3.6 through 6.3.18 FortiWeb versions 6.4 FortiWeb versions 7.0.0 through 7.0.1 Description: The issue is related to a relative path traversal vulnerability in FortiWeb, which may allow an authenticated attacker to obtain...

6.8CVSS6.2AI score0.00802EPSS

SaveExploits0References5

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by