CVE-2021-26105

MEDIUM Year: 2021
CVSS v3 Score
6.8
Medium
Weakness Type
CWE-358
View all →

Vulnerability Description

A stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox version 3.2.2 and below, version 3.1.4 and below may allow an authenticated attacker to potentially execute unauthorized code or commands via specifically crafted HTTP requests.

Related Vulnerabilities

CVE-2019-14823

MEDIUM
CVSS:6.8(Medium)

A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly trusted the root certificate of a certificate chain. A...

CWE-3582019

CVE-2018-20934

MEDIUM
CVSS:6.5(Medium)

cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts (SEC-411).

CWE-3582018

CVE-2023-28601

MEDIUM
CVSS:6.5(Medium)

Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the bounds of a memory buffer vulnerability. A malicious user may alter protected Zoom Client memory buffe...

CWE-3582023

CVE-2024-5500

MEDIUM
CVSS:6.5(Medium)

Inappropriate implementation in Sign-In in Google Chrome prior to 1.3.36.351 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CWE-3582024

CVE-2024-2617

HIGH
CVSS:7.2(High)

A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update. If a malicious actor successfully exploits this vulnerability, they could use it to upd...

CWE-3582024

CVE-2024-23592

MEDIUM
CVSS:6.3(Medium)

An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hel...

CWE-3582024