Filter by Date
- 2021
  - 2 08-2021
  - 2 06-2021
  - 1 04-2021
  - 3 03-2021
  - 9 02-2021
  - 1 01-2021
- 2020
  - 3 12-2020
  - 1 11-2020
  - 6 09-2020
  - 11 08-2020
  - 10 07-2020
  - 12 06-2020
  - 6 05-2020
  - 3 04-2020
  - 12 03-2020
  - 12 02-2020
  - 27 01-2020
- 2019
  - 2 12-2019
  - 6 11-2019
  - 12 10-2019
  - 13 09-2019
  - 8 08-2019
  - 11 07-2019
  - 11 06-2019
  - 17 05-2019
  - 3 04-2019
  - 2 03-2019
  - 11 02-2019
  - 11 01-2019
- 2018
  - 4 12-2018
  - 1 11-2018
  - 6 10-2018
  - 5 09-2018
  - 7 08-2018
  - 3 07-2018
  - 11 06-2018
  - 23 05-2018
  - 6 04-2018
  - 7 03-2018
  - 6 02-2018
  - 10 01-2018
- 2017
  - 8 12-2017
  - 3 11-2017
  - 3 10-2017
  - 4 09-2017
  - 8 08-2017
  - 16 07-2017
  - 26 06-2017
  - 9 05-2017
  - 8 04-2017
  - 6 03-2017
  - 5 02-2017
  - 7 01-2017
- 2016
  - 7 12-2016
  - 12 11-2016
  - 5 10-2016
  - 8 09-2016
  - 5 08-2016
  - 7 07-2016
  - 4 06-2016
  - 6 05-2016
  - 9 04-2016
  - 1 03-2016
  - 1 02-2016
  - 3 01-2016
- 2015
  - 2 12-2015
  - 14 11-2015
  - 4 10-2015
  - 12 09-2015
  - 2 08-2015
  - 3 07-2015
  - 2 06-2015
  - 5 05-2015
  - 9 04-2015
  - 8 03-2015
  - 6 02-2015
  - 1 01-2015
- 2014
  - 2 12-2014
  - 1 11-2014
  - 1 03-2014
  - 1 02-2014
  - 2 01-2014
- 2013
  - 2 12-2013
  - 3 11-2013
  - 1 09-2013
  - 1 08-2013
  - 1 07-2013
  - 2 05-2013
  - 1 03-2013
  - 2 01-2013
- 2012
  - 1 12-2012
  - 1 11-2012
  - 1 08-2012
  - 1 07-2012
  - 1 06-2012
  - 2 05-2012
  - 4 03-2012
  - 3 02-2012
- 2011
  - 2 11-2011
  - 1 08-2011
  - 1 07-2011
  - 1 06-2011
  - 2 05-2011
  - 3 04-2011
  - 2 02-2011
  - 1 01-2011
- 2010
  - 1 10-2010
  - 2 09-2010
  - 3 08-2010
  - 8 07-2010
  - 1 06-2010
  - 3 05-2010
  - 5 04-2010
  - 4 03-2010
  - 1 02-2010
  - 1 01-2010
- 2009
  - 1 11-2009
  - 1 09-2009
  - 2 08-2009
  - 1 07-2009
  - 4 06-2009
  - 3 05-2009
  - 5 04-2009
  - 3 03-2009
  - 2 02-2009
  - 1 01-2009
- 2008
  - 1 11-2008
  - 5 10-2008
  - 5 09-2008
  - 2 08-2008
  - 1 07-2008
  - 6 06-2008
  - 1 05-2008
  - 7 04-2008
  - 1 03-2008
  - 3 01-2008
- 2007
  - 1 08-2007
- 2006
  - 1 09-2006
  - 1 08-2006
  - 1 07-2006
  - 1 06-2006
  - 1 05-2006
  - 1 04-2006
  - 1 03-2006
  - 1 02-2006
  - 1 01-2006
Filter by Risk
- 173
- 320
- 193
- 12
- 0
Filter by Vendor
- All
- 161 Adobe
- 96 Microsoft
- 56 Cisco
- 37 IBM
- 18 Apple
- 16 Netgear
- 13 Synology
- 11 Oracle
- 10 Foxit Software
- 9 EMC
- 8 LiveZilla
- 7 Portainer
- 7 SAP
- 7 Schneider Electric
- 6 Google
- 6 Joomla!
- 5 D-Link
- 5 Intel
- 5 MongoDB
- 5 Qiwi
- 5 RealNetworks
- 4 EOS Blockchain
- 4 HP
- 4 Symantec
- 4 VideoLAN
- 4 Wireshark
- 3 Autodesk
- 3 F-Secure
- 3 Imagely
- 3 Linksys
- 3 Naver
- 3 Samsung
- 3 Sweetscape
- 3 The PHP Group
- 3 TorGuard
- 3 Trend Micro
- 3 VMware
- 3 WordPress
- 3 Zimbra
- 2 10Web
- 2 Abbott
- 2 Asus
- 2 Audacity
- 2 Avast
- 2 Avira
- 2 Bitdefender
- 2 Christian Web Ministries Team
- 2 Citrix
- 2 Easy Hosting Control Panel
- 2 Ethereum
- 2 FooLabs
- 2 HPE
- 2 Infoblox
- 2 Ivanti
- 2 Jenkins
- 2 MachoThemes
- 2 Malwarebytes
- 2 MikroTik
- 2 Mozilla
- 2 OpenProject
- 2 PCRE Library Project
- 2 Plone
- 2 Roundcube
- 2 Swisscom
- 2 Tableau Software
- 2 WooCommerce
- 2 Yandex
- 1 AJDG Solutions
- 1 AVG
- 1 Adenion
- 1 Air France
- 1 AirVPN
- 1 Akamai
- 1 Amazon
- 1 AnyDesk
- 1 Apexis
- 1 BitComet
- 1 Blackberry
- 1 Box
- 1 CA

Refine Search

Zero-Day Research | Fixes Available

Fortinet's team of dedicated expert researchers and analysts examine many third party products and software applications daily, looking for weaknesses and exploitable vulnerabilities. When a vulnerability is found the Fortiguard Lab teams work together to create protective measures that can be delivered to our customers and notify the software/product vendor of the vulnerability. Learn More

Vulnerability Severity Level

FortiGuard Event Name's Severity Level is mainly based on the ratings set forth by the Common Vulnerability Scoring System (CVSS). The CVSS is a vendor-neutral, industry standard that provides an open framework for communicating the characteristics and impacts of IT vulnerabilities.

FortiGuard Security Level	CVSS v2 Rating
Critical	9 - 10
High	7 - 8.9
Medium	4 - 6.9
Low	0.1 - 3.9
Info	0

Common Vulnerability Scoring System Version 2.0

The Common Vulnerability Scoring System (CVSS) provides an open framework for communicating the characteristics and impacts of IT vulnerabilities. CVSS consists of 3 groups: Base, Temporal and Environmental.

Each group produces a numeric score ranging from 0 to 10, and a Vector, a compressed textual representation that reflects the values used to derive the score. The Base group represents the intrinsic qualities of a vulnerability. The Temporal group reflects the characteristics of a vulnerability that change over time.

The Environmental group represents the characteristics of a vulnerability that are unique to any user's environment. CVSS enables IT managers, vulnerability bulletin providers, security vendors, application vendors and researchers to all benefit by adopting this common language of scoring IT vulnerabilities.

Exceptions

If there is no CVSS rating posted, then the CVSS rating is calculated. A Base Score tool form is available at: http://nvd.nist.gov/cvss.cfm
If the vulnerable software/system is not common in a business network environment and the FortiGuard Severity Level would normally be Critical, then the FortiGuard Severity Level may be reduced to High.
If the vulnerability is a Denial of Service (DoS) attack and only affecting the availability of a remote service or host, then the FortiGuard Severity Level is adjusted to at most Medium for Client-side DoS and High for Server-side DoS
For any "remote code execution" type of vulnerability, the FortiGuard Severity Level is set to either High or Critical.

Exceptions

For identifying or detecting network traffic, the FortiGuard Severity Level is set to Informational.
For a vulnerability/exploit that is highly active, the FortiGuard Severity Level is temporarily set to either High or Critical. Later, the level may be reduced back to its normal level; generally this is based on the temporal parameter of a vulnerability.
For zero-day vulnerabilities where the rating has not yet been fully evaluated, the FortiGuard Severity Level is generally set at either Medium or High.

For more information on CVSS, visit A Complete Guide to the Common Vulnerability Scoring System Version 2.0.

Please view our Responsible Disclosure Policies

FG-VD-20-087 (Adobe)

Fortinet Discovers Adobe After Effects Memory Corruption Vulnerability

Discovered: Jun 30, 2020 Released: Oct 21, 2020 Risk

CVE-2020-24418

FG-VD-20-096 (Adobe)

Fortinet Discovers Adobe Animate Memory Corruption Vulnerability

Discovered: Jul 15, 2020 Released: Oct 21, 2020 Risk

CVE-2020-9750

FG-VD-20-095 (Adobe)

Fortinet Discovers Adobe Animate Memory Corruption Vulnerability

Discovered: Jul 15, 2020 Released: Oct 21, 2020 Risk

CVE-2020-9749

FG-VD-20-093 (Adobe)

Fortinet Discovers Adobe Animate Memory Corruption Vulnerability

Discovered: Jul 15, 2020 Released: Oct 21, 2020 Risk

CVE-2020-9747

FG-VD-20-094 (Adobe)

Fortinet Discovers Adobe Animate Memory Corruption Vulnerability

Discovered: Jul 15, 2020 Released: Oct 21, 2020 Risk

CVE-2020-9748

FG-VD-20-066 (Adobe)

Fortinet Discovers Adobe Illustrator Memory Corruption Vulnerability

Discovered: May 09, 2020 Released: Oct 21, 2020 Risk

CVE-2020-24413

FG-VD-20-065 (Adobe)

Fortinet Discovers Adobe Illustrator Memory Corruption Vulnerability

Discovered: May 09, 2020 Released: Oct 21, 2020 Risk

CVE-2020-24412

FG-VD-20-067 (Adobe)

Fortinet Discovers Adobe Illustrator Memory Corruption Vulnerability

Discovered: May 09, 2020 Released: Oct 21, 2020 Risk

CVE-2020-24414

FG-VD-20-068 (Adobe)

Fortinet Discovers Adobe Illustrator Memory Corruption Vulnerability

Discovered: May 09, 2020 Released: Oct 21, 2020 Risk

CVE-2020-24415

FG-VD-20-104 (Adobe)

Fortinet Discovers Adobe InDesign Memory Corruption Vulnerability

Discovered: Aug 03, 2020 Released: Oct 21, 2020 Risk

CVE-2020-24421

FG-VD-20-102 (Schneider Electric)

Fortinet Discovers Schneider Electric Modicon Insecure Credential Transmission Vulnerability

Discovered: Jul 23, 2020 Released: Oct 13, 2020 Risk

CVE-2017-6028

FG-VD-20-100 (Microsoft)

Fortinet Discovers GDI+ StretchDIBitts Information Disclosure Vulnerability

Discovered: Jun 09, 2020 Released: Sep 16, 2020 Risk

CVE-2020-0921

FG-VD-20-123 (MetaSlider)

Fortinet Discovers WordPress Metaslider Plugin Cross-Site Scripting Vulnerability

Discovered: Aug 21, 2020 Released: Sep 16, 2020 Risk

FG-VD-20-075 (Adobe)

Fortinet Discovers Adobe InDesign Memory Corruption Vulnerability

Discovered: Jun 05, 2020 Released: Sep 09, 2020 Risk

CVE-2020-9727

FG-VD-20-088 (Adobe)

Fortinet Discovers Adobe InDesign Memory Corruption Vulnerability

Discovered: Jul 01, 2020 Released: Sep 09, 2020 Risk

CVE-2020-9731

FG-VD-20-083 (Adobe)

Fortinet Discovers Adobe InDesign Memory Corruption Vulnerability

Discovered: Jun 17, 2020 Released: Sep 09, 2020 Risk

CVE-2020-9728

FG-VD-20-085 (Adobe)

Fortinet Discovers Adobe InDesign Memory Corruption Vulnerability

Discovered: Jun 18, 2020 Released: Sep 09, 2020 Risk

CVE-2020-9730

FG-VD-20-084 (Adobe)

Fortinet Discovers Adobe InDesign Memory Corruption Vulnerability

Discovered: Jun 18, 2020 Released: Sep 09, 2020 Risk

CVE-2020-9729

FG-VD-20-060 (FooPlugins)

Fortinet Discovers WordPress FooGallery Lightbox Cross Site Scripting Vulnerability

Discovered: Apr 10, 2020 Released: Aug 25, 2020 Risk

FG-VD-20-030 (Shaped Plugin)

Fortinet Discovers WordPress Plugin Testimonials Cross-Site Scripting Vulnerability

Discovered: Jan 28, 2020 Released: Aug 10, 2020 Risk

At a glance:

Zero-Day Research | Fixes Available