898 matches found
IPsec dynamic assignation IP spoofing
...
Command injection in csfd daemon
...
File-Filter Bypass in Explicit Web Proxy Policy
...
Restricted Shell Escape via Argument Injection
...
OS Command Injection
...
Out-of-bounds Write in sndproxy
...
SQL injections in sdnproxy daemon
...
Weak Authentication in csfd daemon
...
Admin Account Persistence after Deletion
...
Multipart Form Data Denial of Service
...
Out of bounds read in ipsec ike
...
Integer Overflow in ipsec ike
...
Path traversal in csfd daemon
...
OS command injection
...
FortiOS - SSLVPN session hijacking using SAML authentication
...
Lack of capacity to filter logs by administrator access
...
Stack buffer overflow in CLI command
...
Heap buffer overflow in httpd
...
OS command injection in CLI command
...
Readonly users could run some sensitive operations
...
FortiOS - Improper authentication in fgfmd
...
Arbitrary file read in administrative interface
...
Path traversal vulnerability leading to file creation
...
Path traversal vulnerability in CLI commands
...
SSLVPN WEB UI Text injection
...
Missing authentication in fgfmsd
...
Priviledged admin able to view device summary for device in different ADOM
...
Format String Bug in fazsvcd
...
Sensitive files disclosure in diagnostic logs download
...
IDOR on download logs feature
...
Priviledged admin able to modify super-admins password
...
Real-time file system integrity checking write protection bypass
...
GUI Console WebSockets do not terminate on logout
...
RADIUS Protocol CVE-2024-3596
...
Cross site scripting vulnerability in SSL VPN web UI
...
Privilege escalation from low privilege administrator
...
OpenSSH regreSSHion Attack (CVE-2024-6387)
...
FortiOS - IP address validation mishandles zero characters
...
Weak key derivation for backup file
...
Stack buffer overflow on bluetooth write feature
...
FortiOS/FortiProxy - XSS in reboot page
...
Multiple buffer overflows in diag npu command
...
Readonly user could execute sensitive operations
...
SSL-VPN user IP spoofing
...
Buffer overflow in administrative interface
...
HTTP/2 CONTINUATION Frames Vulnerability
...
Format String Bug in cli command
...
Node.js crash over administrative interface
...