Category
Network devices
11,291 known vulnerabilities.
3,914 results · Clear filters · Feed
-
High 7.6
An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch v…
-
High 7.1
An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 through 7.4.4…
-
High 7.0
A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 a…
-
High 7.0
An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyz…
-
High 7.5
An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and belo…
-
High 7.2
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
High 8.8
An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions th…
-
High 7.7
Expedition: OS Command Injection Vulnerability
An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configuration…
-
High 7.0
Expedition: Cross-Site Scripting (XSS) Vulnerability
A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition enables attackers to execute malicious JavaScript code in the context of an authenticated Expedition user’s browser if that authenticated user clicks a malicious link that a…
-
High 8.8
Specially constructed queries cause cross platform scripting leaking administrator tokens
Specially constructed queries cause cross platform scripting leaking administrator tokens
-
High 7.6
A user with advanced report application access rights can perform actions for which they are not authorized
A user with advanced report application access rights can perform actions for which they are not authorized
-
High 8.3
Backup uploads to ETM subject to man-in-the-middle interception
Backup uploads to ETM subject to man-in-the-middle interception
-
High 8.3
Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.
Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.
-
High 8.1
The administrator is able to configure an insecure captive portal script
The administrator is able to configure an insecure captive portal script
-
High 7.2
A user with administrator privileges can perform command injection
A user with administrator privileges can perform command injection
-
High 7.5
Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash
An Out-of-bounds Read vulnerability in Juniper Networks Junos OS and Junos OS Evolved's routing protocol daemon (rpd) allows an unauthenticated, network-based attacker to send malformed BGP packets to a device configured with packet receive trace options enab…
-
High 7.5
Junos OS Evolved: Receipt of specifically malformed IPv6 packets causes kernel memory exhaustion leading to Denial of Service
A Missing Release of Memory after Effective Lifetime vulnerability in the Juniper Tunnel Driver (jtd) of Juniper Networks Junos OS Evolved allows an unauthenticated network-based attacker to cause Denial of Service. Receipt of specifically malformed IPv6 pac…
-
High 7.2
A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall an…
-
High 7.2
A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash…
-
High 7.8
A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to …
-
High 7.5
A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establi…
-
High 8.2
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass auth…
KEV Feb 18, 2025 -
High 7.0CVE-2025-0283 EPSS 17%
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.…
-
High 7.3
Integer overflow vulnerability during glTF model loading in the 3D engine module Impact: Successful exploitation of thi…
-
High 7.8
Vulnerability of improper permission control in the window management module Impact: Successful exploitation of this vu…
-
High 7.5
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerabilit…
-
High 7.5
Access control vulnerability in the identity authentication module Impact: Successful exploitation of this vulnerabilit…
-
High 7.3
D-Link DIR-823G Web Management Interface HNAP1 SetVirtualServerSettings access control
A vulnerability was found in D-Link DIR-823G 1.0.2B05_20181207. It has been rated as critical. This issue affects the function SetAutoRebootSettings/SetClientInfo/SetDMZSettings/SetFirewallSettings/SetParentsControlInfo/SetQoSSettings/SetVirtualServerSettings…
-
High 7.3
Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerabili…
-
High 7.5
Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may c…
-
High 7.5
Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful exploita…
-
High 7.7
Some Huawei wearables have a permission management vulnerability.
-
High 7.3
Netgear R6900P/R7000P HTTP Header sub_16C4C buffer overflow
A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub_16C4C of the component HTTP Header Handler. The manipulation of the argument Host leads to buffer overflow. Th…
-
High 7.3
DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection
A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component Web Management Interface. The manipulation of the argu…
KEV May 15, 2025 -
High 7.3
DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injection
A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and Vigor300B 1.5.1.3/1.5.1.4. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi/apmcfgupptim of the component Web Management Interface. The …
-
High 8.8
There is an improper interface design vulnerability in Huawei product. A module interface of the impated product does n…
-
High 7.0
There is a privilege escalation vulnerability in Huawei FusionCompute product. Due to insufficient verification on spec…
-
High 7.1
PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger th…
KEV Dec 30, 2024 -
High 7.8
There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker …
-
High 8.0
Huawei Home Music System has a path traversal vulnerability. Successful exploitation of this vulnerability may cause th…