All CVEs — page 22 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
A missing origin validation flaw in FortiClient versions 7.2.x and 7.4.x allows remote attackers to bypass expected origin checks during SSL/TLS tunnel establishment, enabling unauthorized code execution when a victim interacts with a malicious endpoint. This is a CWE-346 (Missing Origin Validation) vulnerability affecting both Windows and macOS clients.
A flaw in Arista EOS causes RIPv2 to be silently enabled on management interfaces despite being configured as disabled, allowing unauthenticated attackers to inject malicious routes via adjacent network access. This violates expected security boundaries and enables traffic redirection or blackholing without authentication.