898 matches found
Hardcoded Session Secret Leading to Unauthenticated Remote Code Execution
...
FortiAP - Restricted Shell Escape via CLI Command Injection
...
File-Filter Bypass in Explicit Web Proxy Policy
...
Exposure of sensitive information in RADIUS Accounting-Request
...
Command injection in csfd daemon
...
Arbitrary file write on GUI
...
Arbitrary file deletion in administrative interface
...
Admin Account Persistence after Deletion
...
Unchecked boundary length causing multiple logic flaws
...
Path traversal in csfd daemon
...
Integer Overflow in ipsec ike
...
Stack based buffer overflow in httpd
...
Arbitrary file delete on firmware import image feature
...
OS command injection
...
Path traversal vulnerability in CLI commands
...
Stack buffer overflow in CLI command
...
FortiOS - SSLVPN session hijacking using SAML authentication
...
Arbitrary file read in administrative interface
...
Lack of capacity to filter logs by administrator access
...
Heap buffer overflow in httpd
...
FortiOS - Improper authentication in fgfmd
...
Readonly users could run some sensitive operations
...
Path traversal vulnerability leading to file creation
...
OS command injection in CLI command
...
SSLVPN WEB UI Text injection
...
Missing authentication in fgfmsd
...
Priviledged admin able to view device summary for device in different ADOM
...
Format String Bug in fazsvcd
...
Sensitive files disclosure in diagnostic logs download
...
IDOR on download logs feature
...
Real-time file system integrity checking write protection bypass
...
Priviledged admin able to modify super-admins password
...
GUI Console WebSockets do not terminate on logout
...
RADIUS Protocol CVE-2024-3596
...
OpenSSH regreSSHion Attack (CVE-2024-6387)
...
Cross site scripting vulnerability in SSL VPN web UI
...
FortiOS - IP address validation mishandles zero characters
...
Privilege escalation from low privilege administrator
...
Multiple buffer overflows in diag npu command
...
FortiOS/FortiProxy - XSS in reboot page
...
Weak key derivation for backup file
...
Stack buffer overflow on bluetooth write feature
...
Node.js crash over administrative interface
...
SSL-VPN user IP spoofing
...
Buffer overflow in administrative interface
...
HTTP/2 CONTINUATION Frames Vulnerability
...
Double free with double usage of json_object_put
...
Readonly user could execute sensitive operations
...