Firewalls Family for Nessus

IDNameSeverity
277588SonicWall SonicOS SSLVPN Stack-Based Buffer Overflow DoS (SNWLID-2025-0016)
high
275780Fortinet FortiAnalyzer Pre-authentication DoS attack in OpenSSH - CVE-2025-26466 (FG-IR-25-122)
medium
275779Fortinet FortiManager Pre-authentication DoS attack in OpenSSH - CVE-2025-26466 (FG-IR-25-122)
medium
275778Fortinet FortiWeb Pre-authentication DoS attack in OpenSSH - CVE-2025-26466 (FG-IR-25-122)
medium
275774Fortinet FortiWeb Multiple OS Command Injection (FG-IR-25-513)
high
275611Fortinet Fortigate Trusted hosts bypass via SSH (FG-IR-25-545)
low
275610Fortinet Fortigate Stack buffer overflow in CAPWAP daemon (FG-IR-25-632)
high
275608Fortinet Fortigate Stack buffer overflow in CAPWAP daemon (FG-IR-25-358)
high
275451Fortinet FortiWeb Path Confusion in GUI (FG-IR-25-910)
critical
275166SonicWall SonicOS DOS (SNWLID-2025-0009)
high
272042Squid < 7.2 Information Disclosure (SQUID-2025:2)
critical
270570Fortinet Fortigate ZTNA Server Improper Certificate Validation (FG-IR-24-457)
high
270567Fortinet Fortigate Authenticated Heap Overflow in SSL-VPN bookmarks (FG-IR-25-756)
high
270409Fortinet FortiAnalyzer Missing authentication check in OFTP service (FG-IR-25-378)
medium
270408Fortinet FortiAnalyzer SSO SAML authentication (FG-IR-25-198)
medium
270407Fortinet Fortigate Restricted CLI command bypass (FG-IR-24-361)
high
270406Fortinet Fortigate Domain fronting protection bypass in explicit web proxy (FG-IR-24-372)
medium
270405Fortinet FortiWeb Insertion of Sensitive Information Into Sent Data in csfd daemon (FG-IR-24-228)
medium
270404Fortinet FortiManager Insertion of Sensitive Information Into Sent Data in csfd daemon (FG-IR-24-228)
medium
270403Fortinet Fortigate Insertion of Sensitive Information Into Sent Data in csfd daemon (FG-IR-24-228)
medium
270402Fortinet Fortigate FGFM protocol allows unauthenticated reset of the connection (FG-IR-24-041)
medium
270401Fortinet Fortigate Insufficient Session Expiration in SSLVPN using SAML authentication (FG-IR-24-487)
medium
270400Fortinet Fortigate Insertion of Sensitive 2FA Information in logs and debug command (FG-IR-24-452)
medium
270397Fortinet FortiManager Heap Overflow in fgfmsd (FG-IR-24-442)
high
270396Fortinet FortiAnalyzer Heap Overflow in fgfmsd (FG-IR-24-442)
high
270395Fortinet Fortigate Heap Overflow in fgfmsd (FG-IR-24-442)
high
270363Fortinet Fortigate xss (FG-IR-24-542)
medium
270362Fortinet Fortigate Improper autorization over static files (FG-IR-25-684)
medium
270361Fortinet Fortigate import feature (FG-IR-23-354)
medium
270360Fortinet Fortigate Multiple Unchecked Return Value leading to Null Pointer Dereference (FG-IR-25-653)
low
270357Fortinet Fortigate Heap buffer overflow in websocket (FG-IR-24-546)
medium
249173Fortinet FortiManager Arbitrary file overwrite in FGFMd (FG-IR-24-473)
medium
249172Fortinet Fortigate Integer Overflow on SSL-VPN bookmarks (FG-IR-24-364)
medium
249171Fortinet Fortigate Double free in automation-stitch (FG-IR-23-209)
medium
249170Fortinet Fortigate Incorrect Privilege Assignment in Security Fabric (FG-IR-25-173)
high
249169Fortinet Fortigate Weak authentication - FGFM protocol (FG-IR-24-042)
high
242169Sophos XG Firewall <= 17.5.12 RCE
critical
241983Fortinet FortiAnalyzer SQLi (FG-IR-24-437)
low
241982Fortinet FortiManager SQLi (FG-IR-24-437)
low
241567Fortinet Fortigate Heap-based buffer overflow in cw_stad daemon (FG-IR-25-026)
medium
241531Fortinet Fortigate DNS type 65 resource record requests bypass DNS filter (FG-IR-24-053)
medium
241530Fortinet Fortigate PKI via API: Authentication granted with an invalid certificate (FG-IR-24-511)
high
241525Fortinet FortiWeb sqli (FG-IR-25-151)
critical
238114Fortinet Fortigate Insufficient Session Expiration in SSL-VPN cookie (FG-IR-24-339)
medium
238113Fortinet Fortigate Privilege escalation in automation-stitch (FG-IR-24-385)
medium
238112Fortinet Fortigate eap-cert-auth bypass via revoked certificate (FG-IR-24-544)
medium
238111Fortinet Fortigate SSH key is added even if operation is aborted (FG-IR-23-008)
low
238110Fortinet Fortigate Weak authentication in security fabric daemon (FG-IR-24-058)
medium
238105Fortinet Fortigate Firewall session injection in FGSP (FG-IR-24-287)
low
238104Fortinet Fortigate Information Disclosure on SSLVPN endpoint (FG-IR-24-257)
medium