CVE-2022-30304
An improper neutralization of input during web page generation vulnerability in FortiAnalyzer versions prior to 7.2.1, 7.0.4 and 6.4.8 may allow […]
İçeriği inceleyinALLSAFE / Güncel Güvenlik AçıklarıGelişmeleri izleyin.
Gelişmeleri izleyin.
Riskleri önceliklendirin.
NIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
CVE-2022-30306
A stack-based buffer overflow vulnerability in the CA sign functionality of FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 […]
İçeriği inceleyinCVE-2022-33869
An improper neutralization of special elements used in an OS command vulnerability in the management interface of FortiWAN 4.0.0 through 4.5.9 […]
İçeriği inceleyinCVE-2022-33871
A stack-based buffer overflow vulnerability in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6.3.19 and earlier may allow a […]
İçeriği inceleyinCVE-2021-42756
Multiple stack-based buffer overflow vulnerabilities in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 […]
İçeriği inceleyinCVE-2021-42761
A condition for session fixation vulnerability in the session management of FortiWeb versions 6.4 all versions, 6.3.0 through 6.3.16, 6.2.0 through […]
İçeriği inceleyinCVE-2021-43074
An improper verification of cryptographic signature vulnerability in FortiWeb 6.4 all versions, 6.3.16 and below, 6.2 all versions, 6.1 all versions, […]
İçeriği inceleyinCVE-2022-27891
Palantir Gotham included an unauthenticated endpoint that listed all active usernames on the stack with an active session. The affected services have […]
İçeriği inceleyinCVE-2022-27892
Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would have allowed an attacker to exhaust the memory of the […]
İçeriği inceleyinCVE-2022-27897
Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would load portions of maliciously crafted zip files to memory. An […]
İçeriği inceleyinCVE-2021-40555
Cross site scripting (XSS) vulnerability in flatCore-CMS 2.2.15 allows attackers to execute arbitrary code via description field on the new page creation […]
İçeriği inceleyinCVE-2022-27890
It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A […]
İçeriği inceleyin