Skip to content
Patcharo

Public catalog

Vulnerabilities

Explore the vulnerabilities Patcharo tracks and find the ones that concern your technologies.

Intelligence updated 1 Oct 2026 at 13:38 UTC

Identifiers, titles, summaries, vendors and products of the whole published catalog; the results follow as you type.

260 vulnerabilities · sorted by Publication date — newest first

61–90 of 260

  1. CVE-2025-53843

    A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.…

    FortinetFortinet FortiOS

    Severity · CVSSHigh7.5
    Known exploitationNone known
    EPSS0.59%
    PublishedFix stated
  2. CVE-2025-58413

    A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.…

    FortinetFortinet FortiOS, Fortinet FortiSASE

    Severity · CVSSHigh7.5
    Known exploitationNone known
    EPSS0.32%
    PublishedFix stated
  3. CVE-2025-58034

    Fortinet FortiWeb OS Command Injection Vulnerability

    FortinetFortinet FortiWeb

    Severity · CVSSHigh7.2
    Known exploitationKEVDue 25 Nov 2025
    EPSS56%
    PublishedFix stated
  4. CVE-2025-64446

    Fortinet FortiWeb Path Traversal Vulnerability

    FortinetFortinet FortiWeb

    Severity · CVSSCritical9.8
    Known exploitationKEVDue 21 Nov 2025
    EPSS92%
    PublishedFix stated
  5. CVE-2023-46718

    A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0…

    FortinetFortinet FortiOS, Fortinet FortiProxy

    Severity · CVSSHigh7.8
    Known exploitationNone known
    EPSS0.19%
    PublishedFix stated
  6. CVE-2024-50571

    A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0…

    FortinetFortinet FortiManager, Fortinet FortiOS, Fortinet FortiAnalyzer

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS0.54%
    PublishedFix stated
  7. CVE-2025-22258

    A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1…

    FortinetFortinet FortiOS, Fortinet FortiProxy, Fortinet FortiPAM

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS0.56%
    PublishedFix stated
  8. CVE-2025-25253

    An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 …

    FortinetFortinet FortiProxy, Fortinet FortiOS, Fortinet FortiPAM

    Severity · CVSSHigh7.5
    Known exploitationNone known
    EPSS0.11%
    PublishedFix stated
  9. CVE-2025-57740

    An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and b…

    FortinetFortinet FortiProxy, Fortinet FortiOS, Fortinet FortiPAM

    Severity · CVSSHigh8.8
    Known exploitationNone known
    EPSS0.68%
    PublishedFix stated
  10. CVE-2025-4615

    PAN-OS: Improper Neutralization of Input in the Management Web Interface

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS0.79%
    PublishedFix stated
  11. CVE-2025-20362

    Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

    CiscoCisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD)

    Severity · CVSSHigh8.6
    Known exploitationKEVDue 26 Sept 2025
    EPSS87%
    PublishedFix stated
  12. CVE-2025-20333

    Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

    CiscoCisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD)

    Severity · CVSSCritical9.9
    Known exploitationKEVDue 26 Sept 2025
    EPSS71%
    PublishedFix stated
  13. CVE-2025-20352

    Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

    CiscoCisco IOS, Cisco IOS XE Software, Cisco IOS XE Catalyst SD-WAN

    Severity · CVSSHigh7.7
    Known exploitationKEVDue 20 Oct 2025
    EPSS39%
    PublishedFix stated
  14. CVE-2024-26009

    An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0…

    FortinetFortinet FortiProxy, Fortinet FortiOS, Fortinet FortiPAM

    Severity · CVSSHigh8.1
    Known exploitationNone known
    EPSS0.59%
    PublishedFix stated
  15. CVE-2023-45584

    A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, F…

    FortinetFortinet FortiProxy, Fortinet FortiOS, Fortinet FortiPAM

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS0.59%
    PublishedFix stated
  16. CVE-2025-53744

    An incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6.0 through 7.…

    FortinetFortinet FortiOS

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS0.63%
    PublishedFix stated
  17. CVE-2025-25257

    Fortinet FortiWeb SQL Injection Vulnerability

    FortinetFortinet FortiWeb

    Severity · CVSSCritical9.8
    Known exploitationKEVDue 8 Aug 2025
    EPSS100%
    PublishedFix stated
  18. CVE-2025-20337

    Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

    CiscoCisco Identity Services Engine Software, Cisco ISE Passive Identity Connector

    Severity · CVSSCritical10
    Known exploitationKEVDue 18 Aug 2025
    EPSS68%
    PublishedFix stated
  19. CVE-2024-52965

    A missing critical step in authentication vulnerability [CWE-304] in Fortinet FortiOS version 7.6.0 through 7…

    FortinetFortinet FortiOS, Fortinet FortiProxy

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS0.28%
    PublishedFix stated
  20. CVE-2025-20281

    Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

    CiscoCisco Identity Services Engine Software

    Severity · CVSSCritical10
    Known exploitationKEVDue 18 Aug 2025
    EPSS98%
    PublishedFix stated
  21. CVE-2025-4231

    PAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web Interface

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS0.98%
    PublishedFix stated
  22. CVE-2025-22254

    An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.…

    FortinetFortinet FortiOS, Fortinet FortiProxy, Fortinet FortiWeb

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS0.85%
    PublishedFix stated
  23. CVE-2025-22252

    A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwit…

    FortinetFortinet FortiProxy, Fortinet FortiOS, Fortinet FortiSwitchManager

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS0.94%
    PublishedFix stated
  24. CVE-2025-0130

    PAN-OS: Firewall Denial-of-Service (DoS) in the Web-Proxy Feature via a Burst of Maliciously Crafted Packets

    Palo Alto NetworksPalo Alto Networks PAN-OS

    Severity · CVSSHigh7.5
    Known exploitationNone known
    EPSS0.42%
    PublishedFix stated
  25. CVE-2025-32756

    Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability

    FortinetFortinet FortiNDR, Fortinet FortiCamera, Fortinet FortiRecorder

    Severity · CVSSCritical9.8
    Known exploitationKEVDue 4 Jun 2025
    EPSS30%
    PublishedFix stated
  26. CVE-2024-50565

    A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet For…

    FortinetFortinet FortiOS, Fortinet FortiWeb, Fortinet FortiAnalyzer

    Severity · CVSSHigh7.5
    Known exploitationNone known
    EPSS0.39%
    PublishedFix stated
  27. CVE-2024-26013

    A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet For…

    FortinetFortinet FortiProxy, Fortinet FortiManager, Fortinet FortiOS

    Severity · CVSSHigh7.5
    Known exploitationNone known
    EPSS0.50%
    PublishedFix stated
  28. CVE-2023-37930

    Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration [CWE-834] vul…

    FortinetFortinet FortiProxy, Fortinet FortiOS

    Severity · CVSSHigh8.8
    Known exploitationNone known
    EPSS0.63%
    PublishedFix stated
  29. CVE-2023-25610

    A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS ve…

    FortinetFortinet FortiAnalyzer, Fortinet FortiProxy, Fortinet FortiOS

    Severity · CVSSCritical9.8
    Known exploitationNone known
    EPSS18%
    PublishedFix stated
  30. CVE-2020-9295

    FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and be…

    FortinetFortinet FortiClientWindows

    Severity · CVSSHigh7.5
    Known exploitationNone known
    EPSS0.32%
    PublishedNo fix stated