Firewalls Family for Nessus

IDNameSeverity
176216Zyxel USG < 5.36 / ATP < 5.36 / VPN < 5.36 / ZyWALL < 4.73 Patch 1 (RCE) (CVE-2023-28771)
critical
175084Fortinet Fortigate - Out-of-bound-write in sslvpnd (FG-IR-22-475)
high
174404Fortinet Fortigate - Ability to modify privileges from Custom to Read-Write (FG-IR-22-346)
medium
174403Fortinet Fortigate - Lack of certificate verification when establishing secure connections with threat feed fabric connectors (FG-IR-22-257)
high
174402Fortinet Fortigate - header injection in proxy login page (FG-IR-22-362)
medium
174401Fortinet Fortigate - Flaws over DHCP and DNS keys encryption scheme (FG-IR-22-080)
low
174265Fortinet FortiWeb - OS command injection in CLI (FG-IR-22-186)
high
174264Fortinet Fortigate xss (FG-IR-22-363)
medium
174263Fortinet Fortigate - Policy-based NGFW SSL VPN mode doesn't filter accesses via Bookmarks (FG-IR-22-381)
medium
174262Fortinet Fortigate - Anti brute-force bypass in administrative interface (FG-IR-22-444)
high
174258Fortinet FortiWeb xss (FG-IR-22-428)
medium
174237Fortinet Fortigate - Open redirect in sslvpnd (FG-IR-22-479)
medium
174223Fortinet Fortigate xss (FG-IR-22-224)
medium
173302SonicWall SonicOS Buffer Overflow (SNWLID-2023-0004)
high
172582Zyxel USG Hardcoded Default Password (CVE-2020-29583)
critical
172579Fortinet FortiOS - Path Traversal Vulnerability (FG-IR-22-401)
high
172492Fortinet FortiOS - Information Disclosure (FG-IR-22-364)
medium
172491Fortinet FortiOS - Path Traversal in Execute Command (FG-IR-22-369)
high
172440SonicWall SonicOS Security Misconfiguration (SNWLID-2023-0005)
high
172395Fortinet Fortigate - Access of NULL pointer in SSLVPNd (FG-IR-22-477)
medium
172390Fortinet Fortigate - Heap buffer underflow in administrative interface (FG-IR-23-001)
critical
172258Zyxel Unified Security Gateway (USG) Local Detection
info
172171Fortinet FortiWeb - Stack-based buffer overflows in Proxyd (FG-IR-21-186)
critical
171902Fortinet FortiWeb - Stack based buffer overflow in SAML management (FG-IR-22-151)
high
171888Fortinet Fortigate - Padding oracle in cookie encryption (FG-IR-21-126)
medium
171887Fortinet FortiWeb - Padding oracle in cookie encryption (FG-IR-21-126)
medium
171852Fortinet Fortigate - Arbitrary read/write vulnerability in administrative interface (FG-IR-22-391)
high
171238Sophos SG UTM < 9.511 / 9.6 < 9.607 / 9.7 < 9.705 RCE (CVE-2020-25223)
critical
170906Sophos Unified Threat Management (UTM) Local Detection
info
170671Fortinet FortiManager Incorrect User Management (FG-IR-22-371)
high
168637Fortinet Fortigate heap-based buffer overflow in sslvpnd (FG-IR-22-398)
critical
168124Sophos XG Firewall <= 19.0.1 RCE
critical
166983Fortinet FortiOS Key Management Error (FG-IR-21-228)
high
166982Fortinet FortiOS Improper Access Control (FG-IR-22-174)
medium
166981Fortinet FortiOS SSL-VPN Information Disclosure (FG-IR-21-223)
high
165982Fortinet Fortigate - Privilege escalation via switch-control CLI command (FG-IR-21-242)
high
165765Fortinet FortiWeb sqli (FG-IR-22-140)
low
165763Fortinet Fortigate Authentication Bypass (FG-IR-22-377)
critical
165242Fortinet Fortigate - Flaws over krb keytab encryption scheme (FG-IR-22-158)
low
165179Fortinet Fortigate xss (FG-IR-21-222)
medium
164722FortiWeb: FortiWeb - OS command injection due to direct input interpolation in API controllers (FG-IR-21-180)
high
163711Fortinet Fortigate -- Inter-VDOM information leaking (FG-IR-22-036)
medium
163262Fortinet FortiOS Buffer Overflow (FG-IR-21-206)
medium
163254Fortinet FortiManager Buffer Overflow (FG-IR-21-206)
medium
163253Fortinet FortiOS Buffer Overflow (FG-IR-21-206)
medium
163252Fortinet FortiOS 7.0.x <= 7.0.5 / 6.4.x <= 6.4.9 XSS (FG-IR-21-057)
medium
162782Fortinet FortiOS Integer Overflow (FG-IR-21-155)
medium
162313Fortinet FortiOS < 6.4 MitM (FG-IR-18-292)
medium
161892Fortinet FortiOS < 6.0.14 / 6.2 < 6.2.10 / 6.4 < 6.4.8 / 7.0 < 7.0.3 Arbitrary File Download (FG-IR-21-201)
high
161660Fortinet FortiOS Certificate Validation (FG-IR-21-239)
medium