Filter by Date
- 2021
  - 17 11-2021
  - 8 10-2021
  - 7 08-2021
  - 7 07-2021
  - 2 06-2021
  - 1 04-2021
  - 19 03-2021
  - 9 02-2021
  - 9 01-2021
- 2020
  - 6 12-2020
  - 1 11-2020
  - 6 09-2020
  - 11 08-2020
  - 10 07-2020
  - 14 06-2020
  - 6 05-2020
  - 3 04-2020
  - 12 03-2020
  - 12 02-2020
  - 27 01-2020
- 2019
  - 2 12-2019
  - 6 11-2019
  - 12 10-2019
  - 13 09-2019
  - 8 08-2019
  - 11 07-2019
  - 11 06-2019
  - 17 05-2019
  - 3 04-2019
  - 2 03-2019
  - 11 02-2019
  - 11 01-2019
- 2018
  - 4 12-2018
  - 1 11-2018
  - 6 10-2018
  - 5 09-2018
  - 7 08-2018
  - 3 07-2018
  - 11 06-2018
  - 23 05-2018
  - 6 04-2018
  - 7 03-2018
  - 6 02-2018
  - 10 01-2018
- 2017
  - 8 12-2017
  - 3 11-2017
  - 3 10-2017
  - 4 09-2017
  - 8 08-2017
  - 16 07-2017
  - 26 06-2017
  - 9 05-2017
  - 8 04-2017
  - 6 03-2017
  - 5 02-2017
  - 7 01-2017
- 2016
  - 7 12-2016
  - 12 11-2016
  - 5 10-2016
  - 8 09-2016
  - 5 08-2016
  - 7 07-2016
  - 4 06-2016
  - 6 05-2016
  - 9 04-2016
  - 1 03-2016
  - 1 02-2016
  - 3 01-2016
- 2015
  - 2 12-2015
  - 14 11-2015
  - 4 10-2015
  - 12 09-2015
  - 2 08-2015
  - 3 07-2015
  - 2 06-2015
  - 5 05-2015
  - 9 04-2015
  - 8 03-2015
  - 6 02-2015
  - 1 01-2015
- 2014
  - 2 12-2014
  - 1 11-2014
  - 1 03-2014
  - 1 02-2014
  - 2 01-2014
- 2013
  - 2 12-2013
  - 3 11-2013
  - 1 09-2013
  - 1 08-2013
  - 1 07-2013
  - 2 05-2013
  - 1 03-2013
  - 2 01-2013
- 2012
  - 1 12-2012
  - 1 11-2012
  - 1 08-2012
  - 1 07-2012
  - 1 06-2012
  - 2 05-2012
  - 4 03-2012
  - 3 02-2012
- 2011
  - 2 11-2011
  - 1 08-2011
  - 1 07-2011
  - 1 06-2011
  - 2 05-2011
  - 3 04-2011
  - 2 02-2011
  - 1 01-2011
- 2010
  - 1 10-2010
  - 2 09-2010
  - 3 08-2010
  - 8 07-2010
  - 1 06-2010
  - 3 05-2010
  - 5 04-2010
  - 4 03-2010
  - 1 02-2010
  - 1 01-2010
- 2009
  - 1 11-2009
  - 1 09-2009
  - 2 08-2009
  - 1 07-2009
  - 4 06-2009
  - 3 05-2009
  - 5 04-2009
  - 3 03-2009
  - 2 02-2009
  - 1 01-2009
- 2008
  - 1 11-2008
  - 5 10-2008
  - 5 09-2008
  - 2 08-2008
  - 1 07-2008
  - 6 06-2008
  - 1 05-2008
  - 7 04-2008
  - 1 03-2008
  - 3 01-2008
- 2007
  - 1 08-2007
- 2006
  - 1 09-2006
  - 1 08-2006
  - 1 07-2006
  - 1 06-2006
  - 1 05-2006
  - 1 04-2006
  - 1 03-2006
  - 1 02-2006
  - 1 01-2006
Filter by Risk
- 174
- 340
- 232
- 18
- 0
Filter by Vendor
- All
- 184 Adobe
- 97 Microsoft
- 57 Cisco
- 39 IBM
- 18 Apple
- 18 Schneider Electric
- 16 Netgear
- 15 Corel
- 13 Synology
- 11 Oracle
- 10 Autodesk
- 10 Foxit Software
- 9 EMC
- 8 LiveZilla
- 7 Portainer
- 7 SAP
- 6 Google
- 6 Joomla!
- 5 D-Link
- 5 Intel
- 5 MongoDB
- 5 Qiwi
- 5 RealNetworks
- 4 EOS Blockchain
- 4 HP
- 4 Symantec
- 4 VideoLAN
- 4 Wireshark
- 3 F-Secure
- 3 Imagely
- 3 Linksys
- 3 Naver
- 3 Nextcloud
- 3 Samsung
- 3 Sweetscape
- 3 The PHP Group
- 3 TorGuard
- 3 Trend Micro
- 3 VMware
- 3 WordPress
- 3 Zimbra
- 2 10Web
- 2 Abbott
- 2 Asus
- 2 Audacity
- 2 Avast
- 2 Avira
- 2 Bitdefender
- 2 Christian Web Ministries Team
- 2 Citrix
- 2 Easy Hosting Control Panel
- 2 Ethereum
- 2 FooLabs
- 2 HPE
- 2 Infoblox
- 2 Ivanti
- 2 Jenkins
- 2 MachoThemes
- 2 Malwarebytes
- 2 MikroTik
- 2 Mozilla
- 2 OpenProject
- 2 PCRE Library Project
- 2 Plone
- 2 Roundcube
- 2 Swisscom
- 2 Tableau Software
- 2 WooCommerce
- 2 YOP Poll Team
- 2 Yandex
- 1 AJDG Solutions
- 1 AVG
- 1 Adenion
- 1 Air France
- 1 AirVPN
- 1 Akamai
- 1 Amazon
- 1 AnyDesk
- 1 Apache
- 1 Apexis

Refine Search

Zero-Day Research | Fixes Available

Fortinet's team of dedicated expert researchers and analysts examine many third party products and software applications daily, looking for weaknesses and exploitable vulnerabilities. When a vulnerability is found the Fortiguard Lab teams work together to create protective measures that can be delivered to our customers and notify the software/product vendor of the vulnerability. Learn More

Vulnerability Severity Level

FortiGuard Event Name's Severity Level is mainly based on the ratings set forth by the Common Vulnerability Scoring System (CVSS). The CVSS is a vendor-neutral, industry standard that provides an open framework for communicating the characteristics and impacts of IT vulnerabilities.

FortiGuard Security Level	CVSS v2 Rating
Critical	9 - 10
High	7 - 8.9
Medium	4 - 6.9
Low	0.1 - 3.9
Info	0

Common Vulnerability Scoring System Version 2.0

The Common Vulnerability Scoring System (CVSS) provides an open framework for communicating the characteristics and impacts of IT vulnerabilities. CVSS consists of 3 groups: Base, Temporal and Environmental.

Each group produces a numeric score ranging from 0 to 10, and a Vector, a compressed textual representation that reflects the values used to derive the score. The Base group represents the intrinsic qualities of a vulnerability. The Temporal group reflects the characteristics of a vulnerability that change over time.

The Environmental group represents the characteristics of a vulnerability that are unique to any user's environment. CVSS enables IT managers, vulnerability bulletin providers, security vendors, application vendors and researchers to all benefit by adopting this common language of scoring IT vulnerabilities.

Exceptions

If there is no CVSS rating posted, then the CVSS rating is calculated. A Base Score tool form is available at: http://nvd.nist.gov/cvss.cfm
If the vulnerable software/system is not common in a business network environment and the FortiGuard Severity Level would normally be Critical, then the FortiGuard Severity Level may be reduced to High.
If the vulnerability is a Denial of Service (DoS) attack and only affecting the availability of a remote service or host, then the FortiGuard Severity Level is adjusted to at most Medium for Client-side DoS and High for Server-side DoS
For any "remote code execution" type of vulnerability, the FortiGuard Severity Level is set to either High or Critical.

Exceptions

For identifying or detecting network traffic, the FortiGuard Severity Level is set to Informational.
For a vulnerability/exploit that is highly active, the FortiGuard Severity Level is temporarily set to either High or Critical. Later, the level may be reduced back to its normal level; generally this is based on the temporal parameter of a vulnerability.
For zero-day vulnerabilities where the rating has not yet been fully evaluated, the FortiGuard Severity Level is generally set at either Medium or High.

For more information on CVSS, visit A Complete Guide to the Common Vulnerability Scoring System Version 2.0.

Please view our Responsible Disclosure Policies

FG-VD-21-033 (Corel)

Fortinet Discovers Corel Presentations Memory Corruption Vulnerability

Discovered: Mar 01, 2021 Released: Sep 29, 2021 Risk light-circle-logo

CVE-2021-38105

FG-VD-21-037 (Corel)

Fortinet Discovers Corel WordPerfect Memory Corruption Vulnerability

Discovered: Mar 01, 2021 Released: Sep 29, 2021 Risk light-circle-logo

CVE-2021-38108

FG-VD-21-036 (Corel)

Fortinet Discovers Corel WordPerfect Memory Corruption Vulnerability

Discovered: Mar 01, 2021 Released: Sep 29, 2021 Risk light-circle-logo

CVE-2021-38110

FG-VD-21-045 (Apache)

Fortinet Discovers Apache Shiro Authentication Bypass Vulnerability

Discovered: Mar 31, 2021 Released: Sep 17, 2021 Risk light-circle-logo

CVE-2021-41303

FG-VD-21-051 (Microsoft)

Fortinet Discovers Windows PE Signature Spoofing Vulnerability

Discovered: Jun 23, 2021 Released: Sep 15, 2021 Risk light-circle-logo

CVE-2021-36959

FG-VD-21-060 (Galleryblocks Team)

Fortinet Discovers WordPress SimpLy Gallery Blocks Plugin Cross-Site Scripting Vulnerability

Discovered: Aug 02, 2021 Released: Aug 23, 2021 Risk light-circle-logo

CVE-2021-24667

FG-VD-21-059 (Tips and Tricks HQ)

Fortinet Discovers WordPress WP Video Lightbox Plugin Cross-Site Scripting Vulnerability

Discovered: Aug 02, 2021 Released: Aug 23, 2021 Risk light-circle-logo

CVE-2021-24665

FG-VD-21-050 (Christian Web Ministries Team)

Fortinet Discovers Joomla Proclaim Extension Cross-Site Scripting Vulnerability

Discovered: Jun 02, 2021 Released: Jul 20, 2021 Risk light-circle-logo

FG-VD-21-048 (Microsoft)

Fortinet Discovers Microsoft Windows Installer Authenticode Signature Validation Bypass Vulnerability

Discovered: Apr 23, 2021 Released: Jul 20, 2021 Risk light-circle-logo

CVE-2021-33765

FG-VD-21-022 (Adobe)

Fortinet Discovers Adobe Photoshop Buffer Overflow Vulnerability

Discovered: Feb 05, 2021 Released: Jul 15, 2021 Risk light-circle-logo

CVE-2021-21082

FG-VD-21-042 (Cisco)

Fortinet Discovers Cisco WebEx Player Memory Corruption Vulnerability

Discovered: Mar 01, 2021 Released: Jul 15, 2021 Risk light-circle-logo

CVE-2021-1526

FG-VD-21-043 (Cisco)

Fortinet Discovers Cisco WebEx Player Memory Corruption Vulnerability

Discovered: Mar 01, 2021 Released: Jul 15, 2021 Risk light-circle-logo

CVE-2021-1527

FG-VD-21-012 (Cisco)

Fortinet Discovers Cisco WebEx Products Memory Corruption Vulnerability

Discovered: Feb 05, 2021 Released: Jul 15, 2021 Risk light-circle-logo

CVE-2021-1502

FG-VD-21-013 (Cisco)

Fortinet Discovers Cisco WebEx Products Memory Corruption Vulnerability

Discovered: Feb 05, 2021 Released: Jul 15, 2021 Risk light-circle-logo

CVE-2021-1503

FG-VD-20-128 (Schneider Electric)

Fortinet Discovers Authentication Bypass By Spoofing Vulnerability In Multiple Schneider Electric Products

Discovered: Sep 09, 2020 Released: Jul 13, 2021 Risk light-circle-logo

CVE-2021-22779

FG-VD-20-126 (Schneider Electric)

Fortinet Discovers Authentication Bypass Vulnerability In Multiple Schneider Electric Products

Discovered: Sep 02, 2020 Released: Jul 13, 2021 Risk light-circle-logo

CVE-2021-22780

FG-VD-21-047 (Microsoft)

Fortinet Discovers MSRawImage Store Uncomrpessed DNG Out-of-bound Write Vulnerability

Discovered: Mar 30, 2021 Released: Jul 13, 2021 Risk light-circle-logo

CVE-2021-34521

FG-VD-20-133 (Autodesk)

Fortinet Discovers Autodesk AutoCAD Products Arbitrary Address Write Vulnerability

Discovered: Nov 12, 2020 Released: Jun 24, 2021 Risk light-circle-logo

CVE-2021-27043

FG-VD-20-136 (Autodesk)

Fortinet Discovers Autodesk AutoCAD Products Arbitrary Code Execution Vulnerability

Discovered: Dec 08, 2020 Released: Jun 24, 2021 Risk light-circle-logo

CVE-2021-27042

FG-VD-20-137 (Autodesk)

Fortinet Discovers Autodesk AutoCAD Products Out-of-Bounds Read Vulnerability

Discovered: Dec 08, 2020 Released: Jun 24, 2021 Risk light-circle-logo

CVE-2021-27040

Network

Content and Endpoint

Application

Response

FortiNDR

FortiSandbox

FortiTester

Zero-Day Research | Fixes Available

News / Research

Network

Content and Endpoint

Application

Response

FortiGate

FortiDeceptor

FortiClient

FortiMail

FortiEDR

FortiADC

FortiAnalyzer/FortiSIEM

FortiCWP

FortiWeb

FortiNDR

FortiSandbox

FortiTester

Threat Lookup

PSIRT

Resources

Zero-Day Research | Fixes Available