Category
Network devices
11,300 known vulnerabilities.
868 results · Clear filters · Feed
-
Critical 9.1
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2…
-
Critical 9.1
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2…
-
Critical 9.4CVE-2022-36980 EPSS 82%
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2…
-
Critical 9.8CVE-2022-36974 EPSS 84%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.…
-
Critical 9.1
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2…
-
Critical 9.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.…
-
Critical 9.1
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2…
-
Critical 9.8
Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause kernel privilege es…
-
Critical 9.1
The control component has a spoofing vulnerability. Successful exploitation of this vulnerability may affect confidenti…
-
Critical 9.1
The MediaProvider module has a vulnerability of unauthorized data read. Successful exploitation of this vulnerability m…
-
Critical 9.1
A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. A s…
-
Critical 9.8CVE-2023-20079 EPSS 10%
Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities,…
-
Critical 9.8CVE-2023-20078 EPSS 10%
Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities
Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities,…
-
Critical 9.8
A security misconfiguration vulnerability exists in the Zyxel LTE3316-M604 firmware version V2.00(ABMP.6)C0 due to a fa…
-
Critical 9.8
A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, …
-
Critical 9.3
Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 …
-
Critical 9.8CVE-2023-20032 EPSS 30%
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ …
-
Critical 9.1
The phone-PC collaboration module has a logic bypass vulnerability. Successful exploitation of this vulnerability may a…
-
Critical 9.0CVE-2023-20025 Public exploit
A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, and RV082 Routers c…
-
Critical 9.8
TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an authentication bypass vulnerabi…
-
Critical 9.8
A vulnerable HTTP Basic Authentication process in TP-Link routers, Archer C5 and WR710N-V1, is susceptible to either a DoS or an arbitrary code execution via any interface.
In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service can be sent a crafted packet that causes a heap overflow. This can result in either a DoS (by crashing the httpd process…
-
Critical 9.3
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0…
KEV Dec 13, 2022 -
Critical 9.8
A thread security vulnerability exists in the authentication process. Successful exploitation of this vulnerability may…
-
Critical 9.8
The kernel module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may cause memo…
-
Critical 9.8
Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause privilege escalatio…
-
Critical 9.8
Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause sy…
-
Critical 9.8
Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause sy…
-
Critical 9.8
Fingerprint calibration has a vulnerability of lacking boundary judgment. Successful exploitation of this vulnerability…
-
Critical 9.8
Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause sys…
-
Critical 9.8
Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause sys…
-
Critical 9.8
Unauthenticated remote arbitrary code execution
Unauthenticated remote arbitrary code execution
KEV Dec 13, 2022 -
Critical 9.8
A flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00(ABLG.6)C0 could allow a remote attacker to access the…
-
Critical 9.9
DLINK - DSL-224 Post-auth RCE.
DLINK - DSL-224 Post-auth RCE. DLINK router version 3.0.8 has an interface where you can configure NTP servers (Network Time Protocol) via jsonrpc API. It is possible to inject a command through this interface that will run with ROOT permissions on the router.
-
Critical 9.8
An XML External Entity (XEE) vulnerability allows server-side request forgery (SSRF) and potential code execution in So…
-
Critical 9.8
The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerabi…
-
Critical 9.8
The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerabi…
-
Critical 9.8
The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect con…
-
Critical 9.8
The system framework layer has a vulnerability of serialization/deserialization mismatch. Successful exploitation of th…
-
Critical 9.8
The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerabi…
-
Critical 9.8
Unauthorized access to Gateway user capabilities
Unauthorized access to Gateway user capabilities