Category
Network devices
11,283 known vulnerabilities.
3,911 results · Clear filters · Feed
-
High 8.4
Multi-thread race condition vulnerability in the network management module. Impact: Successful exploitation of this vul…
-
High 7.1
Race condition vulnerability in the network module. Impact: Successful exploitation of this vulnerability may affect se…
-
High 8.4
Input verification vulnerability in the compression and decompression module. Impact: Successful exploitation of this v…
-
High 7.3
Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerab…
-
High 8.4
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affe…
-
High 8.0
Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability ma…
-
High 7.3
DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may…
-
High 8.4
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may a…
-
High 7.3
D-Link DIR-852 gena.cgi command injection
A vulnerability was identified in D-Link DIR-852 1.00. This issue affects some unknown processing of the file /gena.cgi. Such manipulation of the argument service leads to command injection. The attack can be executed remotely. The exploit is publicly availab…
-
High 8.8
D-Link DWR-M920 formPinManageSetup sub_41C7FC buffer overflow
A weakness has been identified in D-Link DWR-M920 1.1.50. This affects the function sub_41C7FC of the file /boafrm/formPinManageSetup. This manipulation of the argument submit-url causes buffer overflow. It is possible to initiate the attack remotely. The exp…
-
High 8.8
D-Link DIR-822K/DWR-M920 formWlEncrypt buffer overflow
A security flaw has been discovered in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The impacted element is an unknown function of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url results in buffer overflow. The attack m…
-
High 8.8
D-Link DIR-822K/DWR-M920 formWanConfigSetup buffer overflow
A vulnerability was identified in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The affected element is an unknown function of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url leads to buffer overflow. The attack is …
-
High 8.8
D-Link DIR-822K/DWR-M920 formVpnConfigSetup buffer overflow
A vulnerability was determined in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. Impacted is an unknown function of the file /boafrm/formVpnConfigSetup. Executing manipulation of the argument submit-url can lead to buffer overflow. The attack can be…
-
High 8.8
D-Link DIR-822K formNtp sub_455524 buffer overflow
A vulnerability was found in D-Link DIR-822K 1.00. This issue affects the function sub_455524 of the file /boafrm/formNtp. Performing manipulation of the argument submit-url results in buffer overflow. Remote exploitation of the attack is possible. The exploi…
-
High 8.8
D-Link DIR-822K/DWR-M920 formFirewallAdv buffer overflow
A vulnerability has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This vulnerability affects unknown code of the file /boafrm/formFirewallAdv. Such manipulation of the argument submit-url leads to buffer overflow. The attack may be la…
-
High 8.8
D-Link DIR-822K/DWR-M920 formDdns memory corruption
A flaw has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This affects an unknown part of the file /boafrm/formDdns. This manipulation of the argument submit-url causes memory corruption. The attack may be initiated remotely. The explo…
-
High 7.5
A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to c…
-
High 7.1
UPnP DOS in TL-WR940N V6
Improper input validation vulnerability in TP-Link System Inc. TL-WR940N V6 (UPnP modules), which allows unauthenticated adjacent attackers to perform DoS attack. This issue affects TL-WR940N V6 <= Build 220801.
-
High 7.1
A Heap-based Buffer Overflow vulnerability [CWE-122] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, …
-
High 7.7
An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerab…
-
High 7.1
An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows …
-
High 8.8
A post-authentication command injection vulnerability in the "priv" parameter of Zyxel DX3300-T0 firmware version 5.50(…
-
High 8.8
D-Link DWR-M920/DWR-M921/DWR-M960/DIR-822K/DIR-825M formTracerouteDiagnosticRun buffer overflow
A weakness has been identified in D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K and DIR-825M 1.01.07. This issue affects some unknown processing of the file /boafrm/formTracerouteDiagnosticRun. Executing manipulation of the argument host can lead to buffer ov…
-
High 8.8
D-Link DWR-M920/DWR-M921/DWR-M960/DWR-M961/DIR-825M formPingDiagnosticRun buffer overflow
A security flaw has been discovered in D-Link DWR-M920, DWR-M921, DWR-M960, DWR-M961 and DIR-825M 1.01.07/1.1.47. This vulnerability affects unknown code of the file /boafrm/formPingDiagnosticRun. Performing manipulation of the argument host results in buffer…
-
High 8.8
D-Link DIR-816L soap.cgi soapcgi_main stack-based overflow
A vulnerability was determined in D-Link DIR-816L 2_06_b09_beta. This issue affects the function soapcgi_main of the file /soap.cgi. This manipulation causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been pub…
-
High 8.8
D-Link DIR-816L __ajax_exporer.sgi scandir_main stack-based overflow
A vulnerability was found in D-Link DIR-816L 2_06_b09_beta. This vulnerability affects the function scandir_main of the file /portal/__ajax_exporer.sgi. The manipulation of the argument en results in stack-based buffer overflow. The attack may be performed fr…
-
High 8.8
D-Link DIR-816L gena.cgi genacgi_main stack-based overflow
A vulnerability has been found in D-Link DIR-816L 2_06_b09_beta. This affects the function genacgi_main of the file gena.cgi. The manipulation of the argument SERVER_ID/HTTP_SID leads to stack-based buffer overflow. The attack is possible to be carried out re…
-
High 8.8
Cisco Catalyst Center Privilege Escalation Vulnerability
A vulnerability in Cisco Catalyst Center Virtual Appliance could allow an authenticated, remote attacker to elevate privileges to Administrator on an affected system. This vulnerability is due to insufficient validation of user-supplied input. An attacker cou…
-
High 7.1
Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticat…
-
High 8.6CVE-2025-20343 Public exploit
Cisco Identity Services Engine Radius Suppression Denial of Service Vulnerability
A vulnerability in the RADIUS setting Reject RADIUS requests from clients with repeated failures on Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause Cisco ISE to restart unexpectedly. This vulnerability is due to a…
-
High 7.3
A vulnerability was identified in certain UniFi Talk devices where internal debugging functionality remained unintentio…
-
High 7.5
On affected platforms, restricted users could use SSH port forwarding to access host-internal services
On affected platforms, restricted users could use SSH port forwarding to access host-internal services
-
High 7.8
On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.
On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.
-
High 7.2CVE-2025-6978 EPSS 14%
Diagnostics command injection vulnerability
Diagnostics command injection vulnerability
-
High 8.8
Captive Portal can allow authentication bypass
Captive Portal can allow authentication bypass
-
High 7.5CVE-2025-6980 Public exploit
Captive Portal can expose sensitive information
Captive Portal can expose sensitive information
-
High 8.1
A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series f…
-
High 7.2
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, U…
-
High 8.7
Unauthorized root access via debug functionality
An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.
-
High 8.6
OS command injection using information obtained from the web management interface
An arbitrary OS command may be executed on the product by the user who can log in to the web management interface.