898 matches found
Arbitrary file delete on firmware import image feature
...
Arbitrary file deletion in administrative interface
...
OS command injection
...
Multipart Form Data Denial of Service
...
Admin Account Persistence after Deletion
...
Path traversal in csfd daemon
...
Integer Overflow in ipsec ike
...
Out of bounds read in ipsec ike
...
Restricted Shell Escape via Argument Injection
...
OS Command Injection
...
SQL injections in sdnproxy daemon
...
Out-of-bounds Write in sndproxy
...
Weak Authentication in csfd daemon
...
OS command injection
...
Stack buffer overflow in CLI command
...
Lack of capacity to filter logs by administrator access
...
FortiOS - SSLVPN session hijacking using SAML authentication
...
Heap buffer overflow in httpd
...
OS command injection in CLI command
...
Readonly users could run some sensitive operations
...
FortiOS - Improper authentication in fgfmd
...
Path traversal vulnerability leading to file creation
...
Path traversal vulnerability in CLI commands
...
Arbitrary file read in administrative interface
...
SSLVPN WEB UI Text injection
...
Missing authentication in fgfmsd
...
Priviledged admin able to view device summary for device in different ADOM
...
Format String Bug in fazsvcd
...
Sensitive files disclosure in diagnostic logs download
...
IDOR on download logs feature
...
Priviledged admin able to modify super-admins password
...
Real-time file system integrity checking write protection bypass
...
GUI Console WebSockets do not terminate on logout
...
RADIUS Protocol CVE-2024-3596
...
Privilege escalation from low privilege administrator
...
OpenSSH regreSSHion Attack (CVE-2024-6387)
...
Cross site scripting vulnerability in SSL VPN web UI
...
FortiOS - IP address validation mishandles zero characters
...
Stack buffer overflow on bluetooth write feature
...
Weak key derivation for backup file
...
Multiple buffer overflows in diag npu command
...
FortiOS/FortiProxy - XSS in reboot page
...
Readonly user could execute sensitive operations
...
Buffer overflow in administrative interface
...
Format String Bug in cli command
...
SSL-VPN user IP spoofing
...
HTTP/2 CONTINUATION Frames Vulnerability
...
Node.js crash over administrative interface
...