898 matches found
IPsec dynamic assignation IP spoofing
...
Command injection in csfd daemon
...
OS command injection in CLI command
...
FortiOS - Improper authentication in fgfmd
...
Format String Bug in fazsvcd
...
GUI Console WebSockets do not terminate on logout
...
FortiOS - IP address validation mishandles zero characters
...
Weak key derivation for backup file
...
Node.js crash over administrative interface
...
FortiSandbox - Arbitrary file write on CLI leading to arbitrary code execution
...
Web server ETag exposure
...
FortiOS - Format String in CLI command
...
CVE-2023-44487 - Rapid Reset HTTP/2 vulnerability
...
Curl and libcurl CVE-2023-38545 and CVE-2023-38546 vulnerabilities
...
Arbitrary file deletion
...
FortiAP's - Arbitrary file read through the CLI
...
shell command limitation bypass by SSH local config overriding
...
Format string vulnerability in fazsvcd
...
XSS in LDAP server option
...
Buffer overflow via fgtupdates service
...
OS command injection on vmimages update feature
...
XSS via back button
...
Administrative FortiCloud SSO authentication bypass
...
OS command injection in GUI backup options
...
Weak authentication in WAD/GUI
...
Domain fronting protection bypass in explicit web proxy
...
Race condion in FortiCloud SSO SAML authentication
...
Insertion of Sensitive Information Into Sent Data Vulnerability in csfd daemon
...
Incorrect Privilege Assignment in Security Fabric
...
Weak authentication - FGFM protocol
...
Weak authentication in security fabric daemon
...
Denial of Service in Security Fabric Root
...
No certificate name verification for fgfm connection
...
error based SQLI on device del feature
...
Pre-authentication Denial of Service attack in OpenSSH - CVE-2025-26466
...
Multiple Reflected and Stored Cross-Site Scripting
...
Disclosure of Logs of Devices not belonging to the Current ADOM from Log View
...
Multiple privilege escalation
...
OS command injection
...
Admin Account Persistence after Deletion
...
Integer Overflow in ipsec ike
...
Out-of-bounds Write in sndproxy
...
OS command injection
...
Lack of capacity to filter logs by administrator access
...
Path traversal vulnerability in CLI commands
...
Missing authentication in fgfmsd
...
Priviledged admin able to modify super-admins password
...
Privilege escalation from low privilege administrator
...