Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

Critical9.8Fortinet FortiOS Out-of-Bound Write VulnerabilityVuln · CVE-2024-21762 · Fortinet · FortiOS · CERT-FR · CISA KEV · CVE.org · FortinetPatch nowKEVEPSS 83.43%Feb 8, 2024
UnknownFortinet FortiWeb Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Vuln · CVE-2021-22122 · Fortinet · FortiWeb · CVE.org · FIRST EPSS · VulnCheck KEV · FortinetPatch nowKEVEPSS 10.52%Jan 22, 2024
UnknownGzip .tar.gz Security BypassVuln · CVE-2012-1461 · anti-virus · vba32 · CVE.org · FIRST EPSS · VulnCheck KEV · Fortinet, SophosPatch nowKEVEPSS 91.71%Dec 7, 2023
UnknownFortinet fortinac External Control of File Name or PathVuln · CVE-2022-39952 · Fortinet · fortinac · CVE.org · FIRST EPSS · VulnCheck KEV · FortinetPatch nowKEVEPSS 99.79%Jul 5, 2023
Critical9.8Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow VulnerabilityVuln · CVE-2023-27997 · Fortinet · FortiOS and FortiProxy · CISA KEV · CVE.org · FIRST EPSS · FortinetPatch nowKEVEPSS 85.69%Jun 12, 2023
High7.1Fortinet FortiOS Path Traversal VulnerabilityVuln · CVE-2022-41328 · Fortinet · FortiOS · CISA KEV · CVE.org · FIRST EPSS · FortinetPatch nowKEVEPSS 10.68%Mar 7, 2023
Critical9.8Fortinet FortiOS Heap-Based Buffer Overflow VulnerabilityVuln · CVE-2022-42475 · Fortinet · FortiOS · CISA KEV · CVE.org · FIRST EPSS · FortinetPatch nowKEVEPSS 99.47%Dec 12, 2022
Critical9.8Fortinet Multiple Products Authentication Bypass VulnerabilityVuln · CVE-2022-40684 · Fortinet · Multiple Products · CISA KEV · CVE.org · FIRST EPSS · FortinetPatch nowKEVEPSS 99.98%Oct 10, 2022
High7.5The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli.Vuln · CVE-2022-0778 · Fortinet · openssl · CVE.org · FIRST EPSS · Fortinet PSIRT · Fortinet, OpenSSLCheck this weekEPSS 73.19%Mar 15, 2022
High7.8Fortinet FortiOS Arbitrary File DownloadVuln · CVE-2021-44168 · Fortinet · FortiOS · CISA KEV · CVE.org · FIRST EPSS · FortinetPatch nowKEVEPSS 0.86%Dec 7, 2021
Medium6.5Fortinet FortiOS Default Configuration VulnerabilityVuln · CVE-2019-5591 · Fortinet · FortiOS · CISA KEV · CVE.org · FIRST EPSS · FortinetPatch nowKEVEPSS 18.57%Aug 14, 2020
Critical9.8Fortinet FortiOS SSL VPN Improper Authentication VulnerabilityVuln · CVE-2020-12812 · Fortinet · FortiOS · CISA KEV · CVE.org · FIRST EPSS · FortinetPatch nowKEVEPSS 45.38%Jul 24, 2020
Medium6.5Fortinet FortiOS Use of Hard-Coded Credentials VulnerabilityVuln · CVE-2019-6693 · Fortinet · FortiOS · CISA KEV · CVE.org · FIRST EPSS · FortinetPatch nowKEVEPSS 6.64%Nov 21, 2019
High7.5Fortinet FortiOS and FortiProxy Improper AuthorizationVuln · CVE-2018-13382 · Fortinet · FortiOS and FortiProxy · CISA KEV · CVE.org · FIRST EPSS · FortinetPatch nowKEVEPSS 81.69%Jun 4, 2019
Critical9.8Fortinet FortiOS SSL VPN Path Traversal VulnerabilityVuln · CVE-2018-13379 · Fortinet · FortiOS · CISA KEV · CVE.org · FIRST EPSS · FortinetPatch nowKEVEPSS 100.00%Jun 4, 2019
Medium6.5Fortinet FortiOS and FortiProxy Out-of-bounds WriteVuln · CVE-2018-13383 · Fortinet · FortiOS and FortiProxy · CISA KEV · CVE.org · FIRST EPSS · FortinetPatch nowKEVEPSS 33.65%May 29, 2019
Medium4.3Fortinet FortiOS and FortiADC Improper Access Control VulnerabilityVuln · CVE-2018-13374 · Fortinet · FortiOS and FortiADC · CISA KEV · CVE.org · FIRST EPSS · FortinetPatch nowKEVEPSS 38.09%Jan 22, 2019
UnknownFortinet FortiOS Improper Restriction of Operations within the Bounds of a Memory BufferVuln · CVE-2016-6909 · Fortinet · FortiOS · CVE.org · FIRST EPSS · VulnCheck KEV · FortinetPatch nowKEVEPSS 49.86%Sep 28, 2016