Category
Network devices
11,291 known vulnerabilities.
3,914 results · Clear filters · Feed
-
High 7.5
Huawei printers have an input verification vulnerability. Successful exploitation of this vulnerability may cause devic…
-
High 7.5
There is an improper input verification vulnerability in Huawei printer product. Successful exploitation of this vulner…
-
High 8.6
There is an insufficient input verification vulnerability in Huawei product. Successful exploitation of this vulnerabil…
-
High 8.3
Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability
Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files and disclose sensitive information on affected installations of Arista NG Firewall. Authentication i…
-
High 8.1
Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability
Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is not required to exploit this vul…
-
High 7.2
Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability
Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is required to exploit this vulnerab…
-
High 8.8
A post-auth code injection vulnerability in the User Portal allows authenticated users to execute code remotely in Soph…
-
High 7.7
A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and belo…
-
High 7.6
An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a l…
-
High 8.6
An execution with unnecessary privileges vulnerability in the VCM engine of FortiClient for Linux versions 6.2.7 and be…
-
High 7.2
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in…
-
High 7.1
Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect…
-
High 7.1
Null pointer dereference vulnerability in the image decoding module Impact: Successful exploitation of this vulnerabili…
-
High 8.5
Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability ma…
-
High 7.3
Security vulnerability in the HiView module Impact: Successful exploitation of this vulnerability may affect feature im…
-
High 7.5
An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacke…
-
High 7.5
A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated …
-
High 7.8
Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2,…
-
High 7.8
Under specific circumstances, insecure permissions in Ivanti Performance Manager before version 2024.3 HF1, 2024.1 HF1,…
-
High 7.8
Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a local…
-
High 7.8
Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local authen…
-
High 7.8
Under specific circumstances, insecure permissions in Ivanti Security Controls before version 2024.4.1 allows a local a…
-
High 7.1
Insufficient permissions in Ivanti DSM before version 2024.3.5740 allows a local authenticated attacker to delete arbit…
-
High 8.8
Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker …
-
High 7.1
Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before version 22.7R2.4 allows…
-
High 7.1
Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arb…
-
High 8.1
A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded b…
-
High 8.1
A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based bu…
-
High 7.5
Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote au…
-
High 8.5
Insufficient Integrity Verification Vulnerability in TP-Link Archer C50
This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges within the router’s Wi-Fi range could exploit this vulnerabil…
-
High 7.1
An Improper Certificate Validation on the UniFi iOS App managing a standalone UniFi Access Point (not using UniFi Netwo…
-
High 7.2
A post-authentication command injection vulnerability in the "host" parameter of the diagnostic function in Zyxel VMG40…
-
High 7.5
A buffer overflow vulnerability in the packet parser of the third-party library "libclinkc" in Zyxel VMG8825-T50K firmw…
-
High 8.8
D-Link DIR-605L formSetPortTr buffer overflow
A vulnerability was found in D-Link DIR-605L 2.13B01. It has been declared as critical. This vulnerability affects the function formSetPortTr of the file /goform/formSetPortTr. The manipulation of the argument curTime leads to buffer overflow. The attack can …
-
High 8.8
D-Link DIR-605L formResetStatistic buffer overflow
A vulnerability was found in D-Link DIR-605L 2.13B01. It has been classified as critical. This affects the function formResetStatistic of the file /goform/formResetStatistic. The manipulation of the argument curTime leads to buffer overflow. It is possible to…
-
High 7.5CVE-2024-11667 Exploited · Ransomware
A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through…
KEV Dec 3, 2024 -
High 7.1
GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation
An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same sub…
-
High 7.8
Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability
Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Check Point ZoneAlarm Extreme Security. An attacker must first obtain…
-
High 8.8
NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability
NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploi…
-
High 7.5
NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability
NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR RAX30 routers. Authentication is…