898 matches found
Hardcoded Session Secret Leading to Unauthenticated Remote Code Execution
...
FortiAP - Restricted Shell Escape via CLI Command Injection
...
File-Filter Bypass in Explicit Web Proxy Policy
...
Exposure of sensitive information in RADIUS Accounting-Request
...
Arbitrary file write on GUI
...
Admin Account Persistence after Deletion
...
Unchecked boundary length causing multiple logic flaws
...
Path traversal in csfd daemon
...
Integer Overflow in ipsec ike
...
Stack based buffer overflow in httpd
...
Arbitrary file delete on firmware import image feature
...
Command injection in csfd daemon
...
Arbitrary file deletion in administrative interface
...
OS command injection
...
Path traversal vulnerability in CLI commands
...
Stack buffer overflow in CLI command
...
FortiOS - SSLVPN session hijacking using SAML authentication
...
Arbitrary file read in administrative interface
...
Lack of capacity to filter logs by administrator access
...
Heap buffer overflow in httpd
...
FortiOS - Improper authentication in fgfmd
...
Readonly users could run some sensitive operations
...
Path traversal vulnerability leading to file creation
...
OS command injection in CLI command
...
SSLVPN WEB UI Text injection
...
Missing authentication in fgfmsd
...
Priviledged admin able to view device summary for device in different ADOM
...
Format String Bug in fazsvcd
...
Sensitive files disclosure in diagnostic logs download
...
IDOR on download logs feature
...
Real-time file system integrity checking write protection bypass
...
Priviledged admin able to modify super-admins password
...
RADIUS Protocol CVE-2024-3596
...
GUI Console WebSockets do not terminate on logout
...
OpenSSH regreSSHion Attack (CVE-2024-6387)
...
Cross site scripting vulnerability in SSL VPN web UI
...
FortiOS - IP address validation mishandles zero characters
...
Privilege escalation from low privilege administrator
...
Multiple buffer overflows in diag npu command
...
FortiOS/FortiProxy - XSS in reboot page
...
Stack buffer overflow on bluetooth write feature
...
Weak key derivation for backup file
...
Node.js crash over administrative interface
...
SSL-VPN user IP spoofing
...
Buffer overflow in administrative interface
...
Format String Bug in cli command
...
Double free with double usage of json_object_put
...
Readonly user could execute sensitive operations
...