898 matches found
Heap buffer overflow in websocket
...
Missing authentication check in OFTP service
...
Stack-based buffer overflow on fortitoken import feature
...
Improper autorization over static files
...
Open Redirect and XSS in Web Filter warning page
...
Authenticated Heap Overflow in SSL-VPN bookmarks
...
Incorrect Privilege Assignment in Security Fabric
...
Arbitrary file overwrite in FGFMd
...
Integer Overflow on SSL-VPN bookmarks
...
Double free in automation-stitch
...
Information Disclosure on SSLVPN endpoint
...
Insufficient Session Expiration in SSL-VPN cookie
...
SSH key is added even if operation is aborted
...
Weak authentication in security fabric daemon
...
Privilege escalation in automation-stitch
...
Use of uninitialized resource in SSLVPN websocket
...
Unverified password change via set_password endpoint
...
Authenticated SQLI on CLI
...
Incorrect authorization in GUI console
...
Multiple format string vulnerabilities
...
OS Command Injection in administrative interface
...
Pre-authentication Denial of Service attack in OpenSSH - CVE-2025-26466
...
Permission escalation due to an Improper Privilege Management
...
Use of Hard-coded Cryptographic Key to encrypt sensitive data
...
Disclosure of Logs of Devices not belonging to the Current ADOM from Log View
...
Multiple Reflected and Stored Cross-Site Scripting
...
FortiAP - Restricted Shell Escape via CLI Command Injection
...
Stack based buffer overflow in httpd
...
Hardcoded Session Secret Leading to Unauthenticated Remote Code Execution
...
Missing authentication for managed device configuration files
...
Multiple privilege escalation
...
Unchecked boundary length causing multiple logic flaws
...
Command injection in csfd daemon
...
File-Filter Bypass in Explicit Web Proxy Policy
...
Restricted Shell Escape via Argument Injection
...
OS Command Injection
...
SQL injections in sdnproxy daemon
...
Admin Account Persistence after Deletion
...
Multipart Form Data Denial of Service
...
OS command injection
...
FortiOS - SSLVPN session hijacking using SAML authentication
...
Stack buffer overflow in CLI command
...
Heap buffer overflow in httpd
...
OS command injection in CLI command
...
Readonly users could run some sensitive operations
...
FortiOS - Improper authentication in fgfmd
...
Arbitrary file read in administrative interface
...
Path traversal vulnerability in CLI commands
...