19 results · Clear filters · Feed
-
Medium 4.2
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiADC 8.0.…
-
Medium 6.3
An Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all ver…
-
Medium 6.2
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiADC version 7.4.…
-
Medium 6.6
An improper neutralization of special elements used in an OS Command ("OS Command Injection") vulnerability [CWE-78] in…
-
Medium 4.1
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison w…
-
Medium 4.8
An improper access control vulnerability [CWE-284] in Fortinet FortiADC version 7.4.0 through 7.4.1 and before 7.2.4 al…
-
Medium 4.7
An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2 all versions, 7.1 all versions, 7.0 a…
-
Medium 5.2
An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiADC versi…
-
Medium 6.9
An improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low p…
-
Medium 5.4
A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6…
-
Medium 6.2
Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC v…
-
Medium 6.3
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC CLI 7.1.0, 7.0.…
-
Medium 5.7
A relative path traversal [CWE-23] in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to …
-
Medium 6.5
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb versi…
-
Medium 5.1
An improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability in Fortinet Forti…
-
Medium 5.1
Multiple instances of improper input validation vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0 through…
-
Medium 6.3
An improper privilege management vulnerability [CWE-269] in FortiADC versions 6.2.1 and below, 6.1.5 and below, 6.0.4 a…
-
Medium 6.3
Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticat…
-
Medium 6.3
A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may all…