Firewalls Family for Nessus

IDNameSeverity
189995SonicWall SonicOS Multiple Vulnerabilities (SNWLID-2023-0012)
high
187948Fortinet FortiProxy Privilage Escalation (FG-IR-23-315)
high
187947Fortinet FortiOS Privilage Escalation (FG-IR-23-315)
high
187809Fortinet Fortigate Improper authorization for HA requests (FG-IR-23-315)
high
186482Zyxel USG / VPN < 5.37 Privilege Management
medium
186481Zyxel USG / ATP < 5.37 Buffer Overflow
medium
186480Zyxel USG / ATP / VPN < 5.37 Multiple Vulnerabilities
medium
186479Zyxel USG / ATP / VPN < 5.37 XSS
medium
185608Fortinet Fortigate DOS in headers management (FG-IR-23-151)
medium
185607Fortinet Fortigate VM - Bypass of root file system integrity checks at boot time on VM (FG-IR-22-396)
medium
183028Fortinet Fortigate xss (FG-IR-23-104)
medium
182967Fortinet Fortigate Improper authorization via prof-admin profile (FG-IR-23-318)
high
182950Fortinet Fortigate Plain-text credentials in GET request via SSL VPN web portal (FG-IR-23-120)
high
182820Fortinet Fortigate Webproxy process DoS (FG-IR-23-184)
medium
182819Fortinet Fortigate REST API trusted host bypass (FG-IR-23-139)
medium
182350Fortinet FortiProxy's map server (FG-IR-22-468)
medium
182349Fortinet FortiProxy - SMTP password ciphertext exposure in Log (FG-IR-22-455)
medium
181358Fortinet Fortigate xss (FG-IR-23-106)
medium
179503Fortinet Fortigate Buffer overflow in execute extender command (FG-IR-23-149)
medium
179480Fortinet Fortigate xss (FG-IR-21-248)
medium
179479Fortinet Fortigate SSH authentication bypass when RADIUS authentication is used (FG-IR-22-255)
critical
179407Zyxel USG < 5.37 / ATP < 5.37 / VPN < 5.37 Multiple Vulnerabilities
high
178464Zyxel USG < 5.37 Command Injection (CVE-2023-28767)
high
178148Fortinet Fortigate Proxy mode with deep inspection - Stack-based buffer overflow (FG-IR-23-183)
critical
178143Fortinet Fortigate Existing websocket connection persists after deleting API admin (FG-IR-23-028)
critical
177588Fortinet FortiNAC RCE (FG-IR-23-074)
critical
177387Fortinet Fortigate Authenticated user null pointer dereference in SSL-VPN (FG-IR-23-015)
medium
177264Fortinet Fortigate Lack of certificate verification when establishing secure connections (FG-IR-22-468)
medium
177127Fortinet Fortigate Out-of-bound write in CLI (FG-IR-22-494)
high
177126Fortinet Fortigate -resources CLI command (FG-IR-22-463)
high
177125Fortinet Fortigate Format String Bug in Fclicense daemon (FG-IR-23-119)
high
177124Fortinet Fortigate Access of uninitialized pointer in administrative interface API (FG-IR-23-095)
medium
177123Fortinet Fortigate - SMTP password ciphertext exposure in Log (FG-IR-22-455)
medium
177122Fortinet Fortigate Null pointer dereference in sslvnd (FG-IR-23-111)
high
177121Fortinet Fortigate Path traversal vulnerability in administrative interface (FG-IR-22-393)
low
177120Fortinet Fortigate Null pointer dereference in sslvpnd proxy endpoint (FG-IR-23-125)
medium
177119Fortinet Fortigate DoS in firmware upgrade function (FG-IR-22-375)
medium
177118Fortinet FortiWeb DoS in firmware upgrade function (FG-IR-22-375)
medium
177117Fortinet Fortigate Read Only administrator can intercept sensitive data (FG-IR-22-380)
medium
177116Fortinet Fortigate Heap buffer overflow in sslvpn pre-authentication (FG-IR-23-097)
critical
176894Zyxel NAS < 5.21 / USG < 4.35 / ATP < 4.35 / VPN < 4.35 / ZyWALL < 4.35 RCE (CVE-2020-9054)
critical
176416Zyxel USG < 4.35 / ATP < 4.35 / VPN < 4.35 / ZyWALL < 4.35 (RCE) (CVE-2020-9054)
critical
176238Zyxel Command Injection (CVE-2023-28771) (Direct Check)
critical
176216Zyxel USG < 5.36 / ATP < 5.36 / VPN < 5.36 / ZyWALL < 4.73 Patch 1 (RCE) (CVE-2023-28771)
critical
175084Fortinet Fortigate Out-of-bound-write in sslvpnd (FG-IR-22-475)
high
174404Fortinet Fortigate Ability to modify privileges from Custom to Read-Write (FG-IR-22-346)
medium
174403Fortinet Fortigate Lack of certificate verification when establishing secure connections with threat feed fabric connectors (FG-IR-22-257)
high
174402Fortinet Fortigate Header injection in proxy login page (FG-IR-22-362)
medium
174401Fortinet Fortigate Flaws over DHCP and DNS keys encryption scheme (FG-IR-22-080)
low
174265Fortinet FortiWeb OS command injection in CLI (FG-IR-22-186)
high