Category
Network devices
11,298 known vulnerabilities.
866 results · Clear filters · Feed
-
Critical 10.0
D-Link D-View 8 Unauthenticated Probe-Core Server Communication
A security issue exists in D-Link D-View 8 v2.0.2.89 and prior that could allow an attacker to manipulate the probe inventory of the D-View service. This could result in the disclosure of information from other probes, denial of service conditions due to the …
-
Critical 9.8CVE-2023-46220 EPSS 11%
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8CVE-2023-46217 EPSS 36%
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8CVE-2023-46259 EPSS 11%
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8CVE-2023-46257 EPSS 11%
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8CVE-2023-46261 EPSS 11%
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8CVE-2023-46216 EPSS 36%
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8CVE-2023-46225 EPSS 11%
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8CVE-2023-41727 EPSS 36%
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8CVE-2023-4474 EPSS 30%
The improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C…
-
Critical 9.8CVE-2023-4473 EPSS 41%
A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 fi…
-
Critical 9.8CVE-2023-35138 EPSS 40%
A command injection vulnerability in the “show_zysync_server_contents” function of the Zyxel NAS326 firmware version V5…
-
Critical 9.8
NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol
NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.
-
Critical 9.3CVE-2023-34991 EPSS 29%
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6…
-
Critical 9.3
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM vers…
-
Critical 9.9
A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authen…
-
Critical 9.8
BIG-IP Configuration utility unauthenticated remote code execution vulnerability
Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands. Note: Software versions which have …
KEV Oct 31, 2023 -
Critical 10.0
Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176. and …
-
Critical 10.0
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IO…
KEV Oct 16, 2023 -
Critical 9.6
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versi…
-
Critical 9.6
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versi…
-
Critical 9.6
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versi…
-
Critical 9.6
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versi…
-
Critical 9.7
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
Critical 9.4
Unauthenticated sensitive information disclosure
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
KEV Oct 18, 2023 -
Critical 9.9
BIG-IP Configuration Utility vulnerability
A directory traversal vulnerability exists in the BIG-IP Configuration Utility that may allow an authenticated attacker to execute commands on the BIG-IP system. For BIG-IP system running in Appliance mode, a successful exploit can allow the attacker to cross…
-
Critical 9.8
A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected d…
-
Critical 9.8
A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could a…
-
Critical 9.8
Authentication Bypass in D-Link D-View 8
Use of a static key to protect a JWT token used in user authentication can allow an for an authentication bypass in D-Link D-View 8 v2.0.1.28
-
Critical 10.0CVE-2023-20238 EPSS 15%
A vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco …
-
Critical 9.8
A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an…
KEV Aug 22, 2023 -
Critical 9.8
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code. Using a crafted request which sets the variable PHPRC an attacker …
KEV Nov 13, 2023 -
Critical 10.0
An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted f…
KEV Jan 18, 2024 -
Critical 9.1
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sa…
-
Critical 9.1
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sa…