898 matches found
XSS via back button
...
Request smuggling attack in FortiOS
...
OpenSSL CVE-2025-15467
...
Administrative FortiCloud SSO authentication bypass
...
Heap-based buffer overflow in cw_acd daemon
...
SSRF in GUI console
...
OS command injection in multiple endpoints
...
Insufficient Session Expiration in SSLVPN
...
Reflected XSS in HA cluster
...
Multiple authenticated OS Command Injections via API
...
OS command injection in GUI backup options
...
Multiple Fortinet Products' FortiCloud SSO Login Authentication Bypass
...
Insertion of sensitive information into REST API logs
...
Private key readable by admin
...
Stack buffer overflow in CAPWAP daemon
...
Credential leakage through debug commands
...
Authenticated CLI Commands Buffer Overflow
...
File scan result bypass
...
Trusted hosts bypass via SSH
...
Stack buffer overflow in CAPWAP daemon
...
FGFM protocol allows unauthenticated reset of the connection
...
Weak authentication in WAD/GUI
...
Restricted CLI command bypass
...
Heap buffer overflow in websocket
...
Heap Overflow in fgfmsd
...
Stack-based buffer overflow on fortitoken import feature
...
Improper autorization over static files
...
Missing authentication check in OFTP service
...
Insufficient Session Expiration in SSLVPN using SAML authentication
...
Open Redirect and XSS in Web Filter warning page
...
Domain fronting protection bypass in explicit web proxy
...
Race condion in FortiCloud SSO SAML authentication
...
ZTNA Server Improper Certificate Validation
...
Authenticated Heap Overflow in SSL-VPN bookmarks
...
Insertion of Sensitive 2FA Information in logs and debug command
...
Multiple Unchecked Return Value leading to Null Pointer Dereference
...
Insertion of Sensitive Information Into Sent Data Vulnerability in csfd daemon
...
Incorrect Privilege Assignment in Security Fabric
...
Double free in automation-stitch
...
Weak authentication - FGFM protocol
...
Integer Overflow on SSL-VPN bookmarks
...
Arbitrary file overwrite in FGFMd
...
Session still active for deleted admin
...
DNS type 65 resource record requests bypass DNS filter
...
PKI via API: Authentication granted with an invalid certificate
...
Heap-based buffer overflow in cw_stad daemon
...
SQL injection in forward module
...
Buffer overflow in fgfmd
...