898 matches found
FortiSandbox - Command injection impacting CLI command
...
Arbitrary file delete on endpoint
...
Web server ETag exposure
...
FortiOS - Format String in CLI command
...
OS command injection on endpoint
...
FortiSandbox - Arbitrary file write on CLI leading to arbitrary code execution
...
Administrator cookie leakage
...
Arbitrary file read on endpoint
...
Improper authentication following read-only user login
...
Out-of-bounds Write in captive portal
...
Authorization bypass in SSLVPN bookmarks
...
Improper access control in backup and restore features
...
Format string vulnerability in administrative interface
...
Informative error messages
...
Out-of-bound Write in sslvpnd
...
Format String Bug in fgfmd
...
Fortilink lack of certificate validation
...
CVE-2023-44487 - Rapid Reset HTTP/2 vulnerability
...
Improper authorization for HA requests
...
OpenSSH Terrapin attack (CVE-2023-48795)
...
Reflected Cross Site Scripting (XSS)
...
Double free in cache management
...
Reflected Cross Site Scripting (XSS) on download PDF report endpoint
...
Format String Bug in HTTPSd
...
Cross-site scripting forgery (CSRF) in HTTPd CLI console
...
Firewall deny policy bypass
...
Use of hardcoded credentials in fmgsvrd
...
DOS in headers management
...
Bypass of root file system integrity checks at boot time on VM
...
Curl and libcurl CVE-2023-38545 and CVE-2023-38546 vulnerabilities
...
XSS on delete endpoint
...
Reflected Cross Site Scripting (XSS) on download progress endpoint
...
Reflected Cross Site Scripting (XSS) on the "file ondemand" rendering endpoint
...
Arbitrary file delete
...
Arbitrary file deletion
...
Improper inter ADOM access control
...
HTML injection in SAML and Security Fabric components
...
Path traversal via unrestricted file upload
...
Unprivileged user can access web console and run some unauthorized commands
...
Webproxy process denial of service
...
Improper authorization via prof-admin profile
...
REST API trusted host bypass
...
Plain-text credentials in GET request via SSL VPN web portal
...
Syslog not protected by an extra layer of authentication
...
IPS Engine evasion using custom TCP flags
...
Server side request forgery on fortiview top threats report generation feature.
...
Command injection due to an unsafe usage of function
...
OS command injection
...