| CVE-2024-26006 |
An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS version 7.4.3 and…
|
6.9
Moyenne
|
14 mars 2025 |
| CVE-2024-45324 |
A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version…
|
7.0
Élevée
|
11 mars 2025 |
| CVE-2025-24472 |
Exploitée
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
|
8.1
Élevée
|
11 févr. 2025 |
| CVE-2023-40721 |
A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged…
|
6.3
Moyenne
|
11 févr. 2025 |
| CVE-2024-40591 |
An incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4.0 through 7.4.4,…
|
8.0
Élevée
|
11 févr. 2025 |
| CVE-2024-35279 |
A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.4 through 7.2.8 and version…
|
7.7
Élevée
|
11 févr. 2025 |
| CVE-2022-23439 |
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison…
|
4.1
Moyenne
|
22 janv. 2025 |
| CVE-2024-36504 |
An out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through 7.4.4, versions…
|
6.2
Moyenne
|
14 janv. 2025 |
| CVE-2024-46666 |
An allocation of resources without limits or throttling [CWE-770] vulnerability in FortiOS versions 7.6.0, versions…
|
4.8
Moyenne
|
14 janv. 2025 |
| CVE-2024-54021 |
An Improper Neutralization of CRLF Sequences in HTTP Headers ('http response splitting') vulnerability [CWE-113] in…
|
6.4
Moyenne
|
14 janv. 2025 |
| CVE-2024-48886 |
A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0…
|
8.0
Élevée
|
14 janv. 2025 |
| CVE-2024-48884 |
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet…
|
6.7
Moyenne
|
14 janv. 2025 |
| CVE-2024-46668 |
An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 through 7.4.4,…
|
7.1
Élevée
|
14 janv. 2025 |
| CVE-2023-46715 |
An origin validation error [CWE-346] vulnerability in Fortinet FortiOS IPSec VPN version 7.4.0 through 7.4.1 and…
|
4.7
Moyenne
|
14 janv. 2025 |
| CVE-2023-42786 |
A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all…
|
6.4
Moyenne
|
14 janv. 2025 |
| CVE-2023-42785 |
A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all…
|
6.4
Moyenne
|
14 janv. 2025 |
| CVE-2024-46670 |
An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below…
|
7.5
Élevée
|
14 janv. 2025 |
| CVE-2024-46669 |
An Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below;…
|
3.2
Faible
|
14 janv. 2025 |
| CVE-2024-55591 |
Exploitée
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
|
9.6
Critique
|
14 janv. 2025 |
| CVE-2024-52963 |
A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through…
|
3.5
Faible
|
14 janv. 2025 |
| CVE-2024-46665 |
An insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7.4.0 through 7.4.4 may…
|
3.5
Faible
|
14 janv. 2025 |
| CVE-2020-12820 |
Under non-default configuration, a stack-based buffer overflow in FortiOS version 6.0.10 and below, version 5.6.12 and…
|
5.4
Moyenne
|
19 déc. 2024 |
| CVE-2020-12819 |
A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate versions…
|
5.4
Moyenne
|
19 déc. 2024 |
| CVE-2024-26011 |
A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2,…
|
5.2
Moyenne
|
12 nov. 2024 |
| CVE-2024-33510 |
An improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability…
|
3.6
Faible
|
12 nov. 2024 |