898 matches found
Arbitrary file read on endpoint
...
Arbitrary file delete on endpoint
...
FortiSandbox - Arbitrary file write on CLI leading to arbitrary code execution
...
Web server ETag exposure
...
Administrator cookie leakage
...
FortiOS - Format String in CLI command
...
FortiManager - Code Injection via Jinja Template
...
OS command injection on endpoint
...
Authorization bypass in SSLVPN bookmarks
...
Improper authentication following read-only user login
...
Improper access control in backup and restore features
...
Format string vulnerability in administrative interface
...
Out-of-bounds Write in captive portal
...
Informative error messages
...
Out-of-bound Write in sslvpnd
...
CVE-2023-44487 - Rapid Reset HTTP/2 vulnerability
...
Fortilink lack of certificate validation
...
Format String Bug in fgfmd
...
Improper authorization for HA requests
...
OpenSSH Terrapin attack (CVE-2023-48795)
...
Reflected Cross Site Scripting (XSS) on download PDF report endpoint
...
Format String Bug in HTTPSd
...
Firewall deny policy bypass
...
Double free in cache management
...
Cross-site scripting forgery (CSRF) in HTTPd CLI console
...
Reflected Cross Site Scripting (XSS)
...
DOS in headers management
...
Use of hardcoded credentials in fmgsvrd
...
Curl and libcurl CVE-2023-38545 and CVE-2023-38546 vulnerabilities
...
Bypass of root file system integrity checks at boot time on VM
...
Arbitrary file delete
...
XSS on delete endpoint
...
Reflected Cross Site Scripting (XSS) on download progress endpoint
...
Reflected Cross Site Scripting (XSS) on the "file ondemand" rendering endpoint
...
Improper authorization via prof-admin profile
...
Plain-text credentials in GET request via SSL VPN web portal
...
Improper inter ADOM access control
...
Command injection due to an unsafe usage of function
...
Server side request forgery on fortiview top threats report generation feature.
...
IPS Engine evasion using custom TCP flags
...
Path traversal via unrestricted file upload
...
Authorization bypass via key value controlled by user
...
Arbitrary file deletion
...
Unprivileged user can access web console and run some unauthorized commands
...
Webproxy process denial of service
...
HTML injection in SAML and Security Fabric components
...
Syslog not protected by an extra layer of authentication
...
OS command injection
...