898 matches found
File-Filter Bypass in Explicit Web Proxy Policy
...
Missing authentication for managed device configuration files
...
Arbitrary file delete on firmware import image feature
...
Multipart Form Data Denial of Service
...
Admin Account Persistence after Deletion
...
Path traversal in csfd daemon
...
Integer Overflow in ipsec ike
...
Out of bounds read in ipsec ike
...
Restricted Shell Escape via Argument Injection
...
Weak Authentication in csfd daemon
...
OS Command Injection
...
SQL injections in sdnproxy daemon
...
Out-of-bounds Write in sndproxy
...
OS command injection
...
Stack buffer overflow in CLI command
...
Lack of capacity to filter logs by administrator access
...
FortiOS - SSLVPN session hijacking using SAML authentication
...
Heap buffer overflow in httpd
...
OS command injection in CLI command
...
Readonly users could run some sensitive operations
...
FortiOS - Improper authentication in fgfmd
...
Path traversal vulnerability leading to file creation
...
Path traversal vulnerability in CLI commands
...
SSLVPN WEB UI Text injection
...
Arbitrary file read in administrative interface
...
Missing authentication in fgfmsd
...
Priviledged admin able to view device summary for device in different ADOM
...
Format String Bug in fazsvcd
...
Sensitive files disclosure in diagnostic logs download
...
IDOR on download logs feature
...
Priviledged admin able to modify super-admins password
...
Real-time file system integrity checking write protection bypass
...
GUI Console WebSockets do not terminate on logout
...
RADIUS Protocol CVE-2024-3596
...
Privilege escalation from low privilege administrator
...
Cross site scripting vulnerability in SSL VPN web UI
...
OpenSSH regreSSHion Attack (CVE-2024-6387)
...
FortiOS - IP address validation mishandles zero characters
...
Stack buffer overflow on bluetooth write feature
...
Weak key derivation for backup file
...
Multiple buffer overflows in diag npu command
...
FortiOS/FortiProxy - XSS in reboot page
...
Readonly user could execute sensitive operations
...
Buffer overflow in administrative interface
...
Format String Bug in cli command
...
SSL-VPN user IP spoofing
...
HTTP/2 CONTINUATION Frames Vulnerability
...
Node.js crash over administrative interface
...