898 matches found
Improper privilege management on API requests
...
Second-Order OS Command Injection via JSON Input on start vnc feature
...
Restricted CLI escape using Lua
...
Reflected XSS in Operation Center
...
Credential disclosure in LDAP configuration web page.
...
OS Command Injection through API endpoint
...
Path Traversal in CLI
...
Stack buffer overflow in CAPWAP daemon
...
Trusted hosts bypass via SSH
...
Stack buffer overflow in CAPWAP daemon
...
Missing authentication check in OFTP service
...
Integer Overflow on SSL-VPN bookmarks
...
SSH key is added even if operation is aborted
...
Privilege escalation in automation-stitch
...
Unauthorized modification of global threat feeds
...
Incorrect authorization in GUI console
...
Multiple format string vulnerabilities
...
Os command injection on vm download feature
...
Use of hardcoded key used for remote backup server password encryption
...
Out-of-bounds Write in IPSEC Daemon
...
FortiAP - Restricted Shell Escape via CLI Command Injection
...
Arbitrary file deletion in administrative interface
...
Heap buffer overflow in httpd
...
Multiple buffer overflows in diag npu command
...
Readonly user could execute sensitive operations
...
Format String Bug in cli command
...
HTTP/2 CONTINUATION Frames Vulnerability
...
SSL-VPN user IP spoofing
...
FortiSandbox - Command injection impacting CLI command
...
Informative error messages
...
Firewall deny policy bypass
...
Unprivileged user can access web console and run some unauthorized commands
...
DoS due to unsafe function in signal handler
...
Lack of TLS Certificate Validation during initial SSO Authentication
...
Privilege escalation using undocumented CLI command
...
Buffer Overflow in LLDP OUI field
...
Multiple authenticated OS Command Injections via API
...
File scan result bypass
...
FGFM protocol allows unauthenticated reset of the connection
...
Heap buffer overflow in websocket
...
Multiple Unchecked Return Value leading to Null Pointer Dereference
...
DNS type 65 resource record requests bypass DNS filter
...
SQL injection in forward module
...
eap-cert-auth bypass via revoked certificate
...
TACACS+ authentication bypass
...
Authenticated SQLI on CLI
...
Multiple arbitrary file deletion in the CLI
...
`Host` header injection
...