898 matches found
Arbitrary file delete on endpoint
...
FortiSandbox - Command injection impacting CLI command
...
Arbitrary file read on endpoint
...
FortiOS - Format String in CLI command
...
Web server ETag exposure
...
Administrator cookie leakage
...
OS command injection on endpoint
...
FortiManager - Code Injection via Jinja Template
...
Authorization bypass in SSLVPN bookmarks
...
Improper authentication following read-only user login
...
Format string vulnerability in administrative interface
...
Improper access control in backup and restore features
...
Out-of-bounds Write in captive portal
...
Informative error messages
...
CVE-2023-44487 - Rapid Reset HTTP/2 vulnerability
...
Out-of-bound Write in sslvpnd
...
Fortilink lack of certificate validation
...
Format String Bug in fgfmd
...
Improper authorization for HA requests
...
OpenSSH Terrapin attack (CVE-2023-48795)
...
Reflected Cross Site Scripting (XSS) on download PDF report endpoint
...
Firewall deny policy bypass
...
Format String Bug in HTTPSd
...
Double free in cache management
...
Reflected Cross Site Scripting (XSS)
...
Cross-site scripting forgery (CSRF) in HTTPd CLI console
...
DOS in headers management
...
Curl and libcurl CVE-2023-38545 and CVE-2023-38546 vulnerabilities
...
Use of hardcoded credentials in fmgsvrd
...
Bypass of root file system integrity checks at boot time on VM
...
Reflected Cross Site Scripting (XSS) on download progress endpoint
...
XSS on delete endpoint
...
Arbitrary file delete
...
Reflected Cross Site Scripting (XSS) on the "file ondemand" rendering endpoint
...
Improper inter ADOM access control
...
Command injection due to an unsafe usage of function
...
Server side request forgery on fortiview top threats report generation feature.
...
Plain-text credentials in GET request via SSL VPN web portal
...
Improper authorization via prof-admin profile
...
Arbitrary file deletion
...
IPS Engine evasion using custom TCP flags
...
Authorization bypass via key value controlled by user
...
Path traversal via unrestricted file upload
...
Unprivileged user can access web console and run some unauthorized commands
...
Webproxy process denial of service
...
Syslog not protected by an extra layer of authentication
...
REST API trusted host bypass
...
HTML injection in SAML and Security Fabric components
...