RCE via OOM corruption

PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal

Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities

RCE via stale global state

HTTP/2 Rapid Reset Attack Vulnerability

Fortinet Multiple Products Path Traversal Vulnerability

PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)

PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution

An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an…

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate…

PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching

RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.

Stored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.0

A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unauthorized code…

A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0…

An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions;…

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility

A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information…

A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection…

Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0

PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled

Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.0

Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0

PAN-OS: Information Disclosure Vulnerability in URL Filtering

PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing

DoS through oversized audit log entries in Guardian/CMC before 26.2.0

PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent

PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4…

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4…

An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions…

Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0

X.400 address type confusion in X.509 GeneralName

PAN-OS: Buffer Overflow Vulnerability via XML Processing

PAN-OS: IPv6 Firewall Policy Bypass

PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)

PAN-OS: Authenticated Command Injection in CLI

PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI

PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)

PAN-OS: Authenticated Admin Command Injection Vulnerability

An incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.0 all versions, 6.4 all…

PAN-OS: Information Disclosure Vulnerability in Management Web Interface

Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0

An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7,…

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiOS 7.4.0 through 7.4.7, 7.2.0 through 7.2.11, 7.0.6 and above; and FortiProxy 7.6.0…

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM…