| CVE-2024-23113 |
Exploitée
Fortinet Multiple Products Format String Vulnerability
|
9.8
Critique
|
15 févr. 2024 |
| CVE-2023-47537 |
An improper certificate validation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6,…
|
4.4
Moyenne
|
15 févr. 2024 |
| CVE-2024-21762 |
Exploitée
Fortinet FortiOS Out-of-Bound Write Vulnerability
|
9.6
Critique
|
9 févr. 2024 |
| CVE-2023-44250 |
An improper privilege management vulnerability [CWE-269] in a Fortinet FortiOS HA cluster version 7.4.0 through 7.4.1…
|
8.3
Élevée
|
10 janv. 2024 |
| CVE-2023-47536 |
An improper access control vulnerability [CWE-284] in FortiOS version 7.2.0, version 7.0.13 and below, version 6.4.14…
|
2.8
Faible
|
13 déc. 2023 |
| CVE-2023-41678 |
A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through…
|
8.3
Élevée
|
13 déc. 2023 |
| CVE-2023-36639 |
A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through…
|
7.0
Élevée
|
13 déc. 2023 |
| CVE-2023-28002 |
An improper validation of integrity check value vulnerability [CWE-354] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through…
|
5.8
Moyenne
|
14 nov. 2023 |
| CVE-2023-36641 |
A numeric truncation error vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through…
|
6.2
Moyenne
|
14 nov. 2023 |
| CVE-2023-37935 |
A use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.5…
|
6.5
Moyenne
|
10 oct. 2023 |
| CVE-2023-41675 |
A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and…
|
4.8
Moyenne
|
10 oct. 2023 |
| CVE-2023-41841 |
An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker…
|
7.4
Élevée
|
10 oct. 2023 |
| CVE-2023-36555 |
An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiOS 7.2.0 - 7.2.4…
|
3.9
Faible
|
10 oct. 2023 |
| CVE-2023-33301 |
An improper access control vulnerability in Fortinet FortiOS 7.2.0 - 7.2.4 and 7.4.0 allows an attacker to access a…
|
6.5
Moyenne
|
10 oct. 2023 |
| CVE-2023-29183 |
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in…
|
7.3
Élevée
|
13 sept. 2023 |
| CVE-2023-29182 |
A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiOS before 7.0.3 allows a privileged attacker to…
|
6.4
Moyenne
|
17 août 2023 |
| CVE-2023-33308 |
A stack-based overflow vulnerability [CWE-124] in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through…
|
9.8
Critique
|
26 juil. 2023 |
| CVE-2023-28001 |
An insufficient session expiration in Fortinet FortiOS 7.0.0 - 7.0.12 and 7.2.0 - 7.2.4 allows an attacker to execute…
|
4.1
Moyenne
|
11 juil. 2023 |
| CVE-2022-22302 |
A clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate version 6.4.0 through 6.4.1,…
|
5.3
Moyenne
|
11 juil. 2023 |
| CVE-2023-33307 |
A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before…
|
6.4
Moyenne
|
16 juin 2023 |
| CVE-2023-33306 |
A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4…
|
6.2
Moyenne
|
16 juin 2023 |
| CVE-2023-33305 |
A loop with unreachable exit condition ('infinite loop') in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS…
|
4.9
Moyenne
|
13 juin 2023 |
| CVE-2023-29178 |
A access of uninitialized pointer vulnerability [CWE-824] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS…
|
3.9
Faible
|
13 juin 2023 |
| CVE-2023-29175 |
An improper certificate validation vulnerability [CWE-295] in FortiOS 6.2 all versions, 6.4 all versions, 7.0.0…
|
4.4
Moyenne
|
13 juin 2023 |
| CVE-2023-27997 |
Exploitée
Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability
|
9.2
Critique
|
13 juin 2023 |