Lucene search
+L

5 matches found

OSV
OSV
added 2026/03/27 8:10 a.m.7 views

CVE-2025-59028

When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail. Invalid BASE64 data can be used to DoS a vulnerable server to break concurrent logins. Install fixed version or disable concurrency in login processes hea...

5.3CVSS6AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/08/13 12:0 a.m.14 views

The vulnerability in the FortiOS operating system’s web interface allows a hacker to perform cross-site fraudulently.

The vulnerability in the FortiOS operating system’s web interface is related to the lack of authentication for requests. Exploiting this vulnerability allows a malicious actor to perform cross-site forgery of requests to pages like /logindisconnect/disconnectadmins or...

5.8CVSS5.3AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/08/13 12:0 a.m.13 views

The vulnerability of the page handler /login_disconnect/current_admins in the FortiOS operating system interface allows a hacker to trigger a service failure.

The vulnerability of the /logindisconnect/currentadmins page handler in the FortiOS operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures by using a specially crafted POST request...

3.5CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/08/13 12:0 a.m.16 views

The vulnerability of the page handler /login_disconnect/disconnect_admins in the FortiOS operating system interface allows a hacker to trigger a service failure.

The vulnerability of the /logindisconnect/disconnectadmins page handler in the FortiOS operating system is due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to cause service failures by sending incorrect values to the application—values that are not...

6.8CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/08/13 12:0 a.m.15 views

The vulnerability of the page handler /login_disconnect/current_admins in the FortiOS operating system allows a hacker to upload arbitrary files to the device.

The vulnerability of the /logindisconnect/currentadmins page handler in the FortiOS operating system is related to access control errors. Exploiting this vulnerability allows a malicious actor to upload arbitrary files to a device using specially crafted POST requests...

4CVSS5.6AI score
SaveExploits0Affected Software1
Rows per page
Query Builder