Everything you care about in one place

Follow feeds: blogs, news, RSS and more. An effortless way to read and digest content of your choice.

Get Feeder

fortiguard.com

FortiGuard Labs | FortiGuard Center - IR Advisories

Get the latest updates from FortiGuard Labs | FortiGuard Center - IR Advisories directly as they happen.

Follow now 111 followers

Latest posts

Last updated 4 days ago

Reflected XSS in HA cluster

4 days ago

CVSSv3 Score: 5.3 An Improper Neutralization of Input During Web Page Generation...

Current password requirement bypass for self password change

4 days ago

CVSSv3 Score: 6.5 An Unverified Password Change vulnerability [CWE-620] in FortiSOAR may...

OS command injection in GUI backup options

4 days ago

CVSSv3 Score: 6.9 An improper neutralization of special elements used in an...

Multiple Fortinet Products' FortiCloud SSO Login Authentication Bypass

4 days ago

CVSSv3 Score: 9.1 An Improper Verification of Cryptographic Signature vulnerability[CWE-347] in FortiOS,...

Insertion of sensitive information into REST API logs

4 days ago

CVSSv3 Score: 6.3 An insertion of sensitive information into log file vulnerability...

Broken access control on API endpoints

4 days ago

CVSSv3 Score: 6.2 An Improper access control vulnerability [CWE-284] in FortiSOAR may...

Missing authorization on log access

4 days ago

CVSSv3 Score: 2.6 A Direct Request ('Forced Browsing') [CWE-425] vulnerability in FortiAuthenticator...

Insufficient Session Expiration in SSLVPN

4 days ago

CVSSv3 Score: 5.3 An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSLVPN...

Multiple authenticated OS Command Injections via API

4 days ago

CVSSv3 Score: 6.7 An OS command injection vulnerabtility [CWE-78] in FortiExtender API...

Capacity to forge authentication cookies

4 days ago

CVSSv3 Score: 7.1 A reliance on cookie without validation or integrity checking...

Multiple authenticated SQL injection via extraParam

4 days ago

CVSSv3 Score: 6.8 An improper neutralization of special elements used in an...

Capacity to use password hashes instead of password for authentication

4 days ago

CVSSv3 Score: 4.4 A use of password hash instead of password for...