Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 23:21:02 +0000 certfr-2022-avi-197 — De multiples vulnérabilités ont été découvertes dans les produits Fortinet. Certaines d'entre elles permettent à un att… https://cve.radiocsirt.org/vuln/certfr-2022-avi-197 certfr-2022-avi-197 https://cve.radiocsirt.org/vuln/certfr-2022-avi-197 cnvd-2022-50951 https://cve.radiocsirt.org/vuln/cnvd-2022-50951 cnvd-2022-50951 https://cve.radiocsirt.org/vuln/cnvd-2022-50951 EUVD-2026-196964 https://cve.radiocsirt.org/vuln/euvd-2026-196964 EUVD-2026-196964 https://cve.radiocsirt.org/vuln/euvd-2026-196964 fkie_cve-2021-44166 https://cve.radiocsirt.org/vuln/fkie_cve-2021-44166 <p>An improper access control vulnerability [CWE-284 ] in FortiToken Mobile (Android) external push notification 5.1.0 and below may allow a remote attacker having already obtained a user&#39;s password to access the protected system during the 2FA procedure, even though the deny button is clicked by the legitimate user.</p> <p>An improper access control vulnerability [CWE-284 ] in FortiToken Mobile (Android) external push notification 5.1.0 and below may allow a remote attacker having already obtained a user&#39;s password to access the protected system during the 2FA procedure, even though the deny button is clicked by the legitimate user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-44166 GHSA-7w6m-4c3c-jjv3 https://cve.radiocsirt.org/vuln/ghsa-7w6m-4c3c-jjv3 <p>An improper access control vulnerability [CWE-284 ] in FortiToken Mobile (Android) external push notification 5.1.0 and below may allow a remote attacker having already obtained a user&#39;s password to access the protected system during the 2FA procedure, even though the deny button is clicked by the legitimate user.</p> <p>An improper access control vulnerability [CWE-284 ] in FortiToken Mobile (Android) external push notification 5.1.0 and below may allow a remote attacker having already obtained a user&#39;s password to access the protected system during the 2FA procedure, even though the deny button is clicked by the legitimate user.</p> https://cve.radiocsirt.org/vuln/ghsa-7w6m-4c3c-jjv3 gsd-2021-44166 https://cve.radiocsirt.org/vuln/gsd-2021-44166 gsd-2021-44166 https://cve.radiocsirt.org/vuln/gsd-2021-44166