898 matches found
IDOR on download logs feature
...
Priviledged admin able to modify super-admins password
...
GUI Console WebSockets do not terminate on logout
...
RADIUS Protocol CVE-2024-3596
...
Cross site scripting vulnerability in SSL VPN web UI
...
Privilege escalation from low privilege administrator
...
FortiOS/FortiProxy - XSS in reboot page
...
Multiple buffer overflows in diag npu command
...
Buffer overflow in administrative interface
...
HTTP/2 CONTINUATION Frames Vulnerability
...
Node.js crash over administrative interface
...
FortiSandbox - Arbitrary file write on CLI leading to arbitrary code execution
...
FortiOS - Format String in CLI command
...
OS command injection on endpoint
...
Improper authentication following read-only user login
...
Format string vulnerability in administrative interface
...
Informative error messages
...
CVE-2023-44487 - Rapid Reset HTTP/2 vulnerability
...
Out-of-bound Write in sslvpnd
...
Improper authorization for HA requests
...
OpenSSH Terrapin attack (CVE-2023-48795)
...
Reflected Cross Site Scripting (XSS) on download PDF report endpoint
...
Double free in cache management
...
Reflected Cross Site Scripting (XSS)
...
Curl and libcurl CVE-2023-38545 and CVE-2023-38546 vulnerabilities
...
Bypass of root file system integrity checks at boot time on VM
...
XSS on delete endpoint
...
Reflected Cross Site Scripting (XSS) on the "file ondemand" rendering endpoint
...
Arbitrary file deletion
...
Authorization bypass via key value controlled by user
...
Arbitrary file listing and deletion through the CLI
...
Improper privilege management on API requests
...
Path Traversal vulnerability
...
HTTP/2 Bomb CVE-2026-49975
...
Unauthenticated VNC access exposed on all interfaces
...
Second-Order OS Command Injection via JSON Input on start vnc feature
...
Restricted CLI escape using Lua
...
Credential disclosure in LDAP configuration web page.
...
Reflected XSS in Operation Center
...
Missing Authentication for critical function in CAPWAP daemon
...
Path Traversal in CLI
...
SQL Injection via JSON RPC API
...
shell command limitation bypass by SSH local config overriding
...
XSS in LDAP server option
...
OS command injection on vmimages update feature
...
Multiple authenticated OS Command Injections via API
...
OS command injection in GUI backup options
...
Multiple Fortinet Products' FortiCloud SSO Login Authentication Bypass
...