898 matches found
Log Pollution via login page
...
Client-side enforcement of server-side security related to vm download feature
...
Stack buffer overflow in fabric service
...
Multiple arbitrary file deletion in the CLI
...
FortiOS / FortiProxy / FortiPAM / FortiSwitchManager - Format string vulnerability in CLI commands
...
Null pointer dereference leading to sslvpn DOS
...
Arbitrary file delete on firmware import image feature
...
IPsec dynamic assignation IP spoofing
...
Weak Authentication in csfd daemon
...
Integer Overflow in ipsec ike
...
Path traversal vulnerability leading to file creation
...
Real-time file system integrity checking write protection bypass
...
FortiOS - IP address validation mishandles zero characters
...
Readonly user could execute sensitive operations
...
SSL-VPN user IP spoofing
...
Format String Bug in cli command
...
FortiSandbox - Command injection impacting CLI command
...
Arbitrary file read on endpoint
...
Web server ETag exposure
...
Administrator cookie leakage
...
FortiManager - Code Injection via Jinja Template
...
Out-of-bounds Write in captive portal
...
Firewall deny policy bypass
...
DOS in headers management
...
Path traversal via unrestricted file upload
...
Header injection in Web Filter warning page
...
SSL-VPN Reflected XSS
...
Stack Buffer Overflow in Log Report
...
Incorrect global authorization
...
DoS due to unsafe function in signal handler
...
Arbitrary directory delete on vmimages delete feature
...
Path Traversal in CLI
...
OS Command Injection through API endpoint
...
Unauthenticated Authentication bypass and Privilege escalation in FortiSandbox
...
Buffer overflow via fgtupdates service
...
Privilege escalation using undocumented CLI command
...
SQL injection in jsonrpc api
...
Lack of TLS Certificate Validation during initial SSO Authentication
...
Format string vulnerability in fazsvcd
...
Authentication Lockout Bypass via Race Condition
...
Buffer Overflow in LLDP OUI field
...
SSL-VPN Symlink Persistence Patch Bypass
...
Firewall policy bypass in FSSO Terminal Services Agent
...
Request smuggling attack in FortiOS
...
Administrative FortiCloud SSO authentication bypass
...
SSRF in GUI console
...
Insufficient Session Expiration in SSLVPN
...
Reflected XSS in HA cluster
...