Category
Network devices
11,300 known vulnerabilities.
868 results · Clear filters · Feed
-
Critical 9.1
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sa…
-
Critical 9.1
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sa…
-
Critical 9.1
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sa…
-
Critical 9.1
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sa…
-
Critical 9.1
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sa…
-
Critical 9.1
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sa…
-
Critical 9.0CVE-2023-35085 Public exploit
An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Mo…
-
Critical 9.1
A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow …
-
Critical 9.8
A stack-based overflow vulnerability [CWE-124] in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3…
-
Critical 10.0
An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or r…
KEV Jul 25, 2023 -
Critical 9.8
Unauthenticated remote code execution
KEV Jul 19, 2023 -
Critical 9.1CVE-2023-30799 Public exploit
MikroTik RouterOS Administrator Privilege Escalation
MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse t…
-
Critical 9.8
The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authenticati…
-
Critical 9.6
A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an a…
-
Critical 9.8
A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, cou…
KEV Aug 16, 2023 -
Critical 9.8
A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an unauthenticated user t…
-
Critical 9.8
D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts
D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts
-
Critical 9.8
D-Link DSL-G256DG firmware version vBZ_1.00.27 Authentication Bypass
D-Link DSL-G256DG version vBZ_1.00.27 web management interface allows authentication bypass via an unspecified method.
-
Critical 9.6
A vulnerability in the change password functionality of Cisco Expressway Series and Cisco TelePresence Video Communicat…
-
Critical 9.6
Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities
Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated attacker with Administrator-level read-only credentials to elevate their privileges to Administrator with read-write crede…
-
Critical 9.6CVE-2023-33299 EPSS 24%
A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier versions…
-
Critical 9.8
The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0,…
KEV Jun 23, 2023 -
Critical 9.8
Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to p…
-
Critical 9.8
A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execut…
-
Critical 10.0
Vulnerability of HwWatchHealth being hijacked.Successful exploitation of this vulnerability may cause repeated pop-up w…
-
Critical 9.2
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, vers…
KEV Jun 13, 2023 -
Critical 9.8
The facial recognition TA of some products has the out-of-bounds memory read vulnerability. Successful exploitation of …
-
Critical 9.8
The facial recognition TA of some products lacks memory length verification. Successful exploitation of this vulnerabil…
-
Critical 9.8
Lack of length check vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause …
-
Critical 9.8
A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Pa…
KEV Jun 5, 2023 -
Critical 9.8
A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 P…
KEV Jun 5, 2023 -
Critical 9.8
Cisco SPA112 2-Port Phone Adapters Remote Command Execution Vulnerability
A vulnerability in the web-based management interface of Cisco SPA112 2-Port Phone Adapters could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to a missing authentication process within t…
-
Critical 9.8CVE-2023-28769 Public exploit
The buffer overflow vulnerability in the library “libclinkc.so” of the web server “zhttpd” in Zyxel DX5401-B0 firmware …
-
Critical 9.8
Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware ver…
KEV May 31, 2023 -
Critical 9.1
The HwPCAssistant module has the out-of-bounds read/write vulnerability. Successful exploitation of this vulnerability …
-
Critical 9.3
On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading t ...
On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading to a priv…
-
Critical 9.3
A missing authentication for critical function vulnerability [CWE-306] in FortiPresence infrastructure server before ve…
-
Critical 9.8
A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.1…
KEV Nov 16, 2023 -
Critical 9.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.…
-
Critical 9.8CVE-2022-36971 EPSS 15%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.…