Firewalls Family for Nessus

IDNameSeverity
272042Squid < 7.2 Information Disclosure (SQUID-2025:2)
critical
270570Fortinet Fortigate ZTNA Server Improper Certificate Validation (FG-IR-24-457)
high
270567Fortinet Fortigate Authenticated Heap Overflow in SSL-VPN bookmarks (FG-IR-25-756)
high
270409Fortinet FortiAnalyzer Missing authentication check in OFTP service (FG-IR-25-378)
medium
270408Fortinet FortiAnalyzer SSO SAML authentication (FG-IR-25-198)
medium
270407Fortinet Fortigate Restricted CLI command bypass (FG-IR-24-361)
high
270406Fortinet Fortigate Domain fronting protection bypass in explicit web proxy (FG-IR-24-372)
medium
270405Fortinet FortiWeb Insertion of Sensitive Information Into Sent Data in csfd daemon (FG-IR-24-228)
medium
270404Fortinet FortiManager Insertion of Sensitive Information Into Sent Data in csfd daemon (FG-IR-24-228)
medium
270403Fortinet Fortigate Insertion of Sensitive Information Into Sent Data in csfd daemon (FG-IR-24-228)
medium
270402Fortinet Fortigate FGFM protocol allows unauthenticated reset of the connection (FG-IR-24-041)
medium
270401Fortinet Fortigate Insufficient Session Expiration in SSLVPN using SAML authentication (FG-IR-24-487)
medium
270400Fortinet Fortigate Insertion of Sensitive 2FA Information in logs and debug command (FG-IR-24-452)
low
270397Fortinet FortiManager Heap Overflow in fgfmsd (FG-IR-24-442)
high
270396Fortinet FortiAnalyzer Heap Overflow in fgfmsd (FG-IR-24-442)
high
270395Fortinet Fortigate Heap Overflow in fgfmsd (FG-IR-24-442)
high
270363Fortinet Fortigate xss (FG-IR-24-542)
medium
270362Fortinet Fortigate Improper autorization over static files (FG-IR-25-684)
medium
270361Fortinet Fortigate import feature (FG-IR-23-354)
medium
270360Fortinet Fortigate Multiple Unchecked Return Value leading to Null Pointer Dereference (FG-IR-25-653)
low
270357Fortinet Fortigate Heap buffer overflow in websocket (FG-IR-24-546)
medium
249173Fortinet FortiManager Arbitrary file overwrite in FGFMd (FG-IR-24-473)
medium
249172Fortinet Fortigate Integer Overflow on SSL-VPN bookmarks (FG-IR-24-364)
medium
249171Fortinet Fortigate Double free in automation-stitch (FG-IR-23-209)
medium
249170Fortinet Fortigate Incorrect Privilege Assignment in Security Fabric (FG-IR-25-173)
high
249169Fortinet Fortigate Weak authentication - FGFM protocol (FG-IR-24-042)
high
242169Sophos XG Firewall <= 17.5.12 RCE
critical
241983Fortinet FortiAnalyzer SQLi (FG-IR-24-437)
low
241982Fortinet FortiManager SQLi (FG-IR-24-437)
low
241567Fortinet Fortigate Heap-based buffer overflow in cw_stad daemon (FG-IR-25-026)
medium
241531Fortinet Fortigate DNS type 65 resource record requests bypass DNS filter (FG-IR-24-053)
medium
241530Fortinet Fortigate PKI via API: Authentication granted with an invalid certificate (FG-IR-24-511)
high
241525Fortinet FortiWeb sqli (FG-IR-25-151)
critical
238114Fortinet Fortigate Insufficient Session Expiration in SSL-VPN cookie (FG-IR-24-339)
medium
238113Fortinet Fortigate Privilege escalation in automation-stitch (FG-IR-24-385)
medium
238112Fortinet Fortigate eap-cert-auth bypass via revoked certificate (FG-IR-24-544)
medium
238111Fortinet Fortigate SSH key is added even if operation is aborted (FG-IR-23-008)
low
238110Fortinet Fortigate Weak authentication in security fabric daemon (FG-IR-24-058)
medium
238105Fortinet Fortigate Firewall session injection in FGSP (FG-IR-24-287)
low
238104Fortinet Fortigate Information Disclosure on SSLVPN endpoint (FG-IR-24-257)
medium
238102Fortinet Fortigate Privilege escalation in GUI websocket module (FG-IR-25-006)
medium
238101Fortinet FortiWeb Privilege escalation in GUI websocket module (FG-IR-25-006)
medium
237023Zyxel USG FLEX H Series Firewall < 1.30 Privilege Escalation
high
237022Zyxel USG FLEX H Series Firewall < 1.32 Privilege Escalation
medium
237021Zyxel USG FLEX H Series Firewall 1.20 < 1.32 Privilege Escalation
high
236971Fortinet FortiMail 7.0.x < 7.0.9 / 7.2.x < 7.2.8 / 7.4.x < 7.4.5 / 7.6.x < 7.6.3 API Stack-based Buffer Overflow (FG-IR-25-254)
critical
235826Fortinet Fortigate TACACS+ authentication bypass (FG-IR-24-472)
critical
235825Fortinet Fortigate Buffer over-read in FGFM (FG-IR-24-381)
low
235823Fortinet Fortigate DoS in Security Fabric Root (FG-IR-24-388)
medium
234007Fortinet FortiWeb Incorrect user management in widgets dashboard (FG-IR-24-184)
medium