Skip to content
OpenAdvisories

Category

Network devices

11,275 known vulnerabilities.

64 results · Clear filters · Feed

  • High 7.2
    CVE-2023-35081 Exploited EPSS 64%

    A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) a…

    KEV Jul 31, 2023
  • High 7.8
    CVE-2022-20775 Exploited EPSS 12%

    Cisco SD-WAN Software Privilege Escalation Vulnerability

    A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerab…

    KEV Feb 25, 2026
  • High 8.6
    CVE-2022-0028 Exploited

    PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering

    A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. The DoS attack would appear to originate from a Palo Alto Networks PA-Series (hardware), VM-Series (vi…

    KEV Aug 22, 2022
  • High 7.2
    CVE-2021-20022 Exploited · Ransomware EPSS 17%

    SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload …

    KEV Nov 3, 2021
  • High 8.6
    CVE-2020-3569 Exploited

    Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities

    Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to either immediately crash the Internet Group Management Protocol (IGMP) process or make it co…

    KEV Nov 3, 2021
  • High 8.6
    CVE-2020-3566 Exploited

    Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

    A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust process memory of an affected device. The vulnerability is due to insufficient queue manageme…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-3433 Exploited · Ransomware Public exploit EPSS 10%

    Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

    A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need to ha…

    KEV Oct 24, 2022
  • High 7.5
    CVE-2020-3452 Exploited Public exploit Scanner template EPSS 100%

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

    A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files…

    KEV Nov 3, 2021
  • High 7.5
    CVE-2020-3259 Exploited · Ransomware EPSS 72%

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability

    A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to retrieve memory contents on an affected device, which could …

    KEV Feb 15, 2024
  • High 8.8
    CVE-2020-1631 Exploited

    Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services

    A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform local file inclusion (LFI)…

    KEV Mar 25, 2022
  • High 8.8
    CVE-2020-3118 Exploited EPSS 12%

    Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability

    A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability is due to improper validation of st…

    KEV Nov 3, 2021
  • High 7.5
    CVE-2019-7483 Exploited

    In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user …

    KEV Mar 28, 2022
  • High 7.5
    CVE-2019-7481 Exploited · Ransomware Scanner template EPSS 100%

    Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This v…

    KEV Nov 3, 2021
  • High 8.8
    CVE-2019-15271 Exploited

    Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability

    A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The attacker must have either a valid credential or an ac…

    KEV Jun 8, 2022
  • High 7.8
    CVE-2018-20250 Exploited · Ransomware Public exploit EPSS 96%

    In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field …

    KEV Feb 15, 2022
  • High 7.2
    CVE-2019-1652 Exploited Public exploit EPSS 96%

    Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. The vu…

    KEV Mar 3, 2022
  • High 7.5
    CVE-2019-1653 Exploited Public exploit Scanner template EPSS 100%

    Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

    A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls …

    KEV Nov 3, 2021
  • High 8.8
    CVE-2017-6740 Exploited EPSS 11%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6743 Exploited EPSS 11%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6744 Exploited

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6737 Exploited EPSS 45%

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6738 Exploited EPSS 11%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6736 Exploited Public exploit EPSS 70%

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2017-6742 Exploited Public exploit EPSS 21%

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…

    KEV Apr 19, 2023