Archive
2 February 2022
Vulnerabilities first published on this day (UTC), newest first.
6 results · Clear filters · Feed
-
Medium 6.3
IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker t…
-
Medium 4.3
IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site request forgery which could allow an attacker to ex…
-
Medium 5.3
Heap-buffer-overflow in jhead
JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections. Crafted jpeg images c…
-
Medium 6.3
Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticat…
-
Medium 6.1
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version 7.…
-
Medium 4.2
An improper access control vulnerability [CWE-284] in FortiAuthenticator HA service 6.3.2 and below, 6.2.x, 6.1.x, 6.0.…