Skip to content
OpenAdvisories

Category

Network devices

11,298 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3,920 results · Clear filters · Feed

  • High 7.5
    CVE-2023-32154

    Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability

    Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Mikrotik RouterOS. Authentication is not required to exploit this vuln…

    MikroTik RouterOS Network devices
  • High 8.8
    CVE-2023-32149

    D-Link DIR-2640 prog.cgi Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-2640 prog.cgi Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Authentication is n…

    D-Link DIR-2640 Network devices
  • High 8.8
    CVE-2023-32146

    D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not req…

    D-Link DAP-1360 Network devices
  • High 8.8
    CVE-2023-32145

    D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability

    D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulne…

    D-Link DAP-1360 Network devices
  • High 8.8
    CVE-2023-32144

    D-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is …

    D-Link DAP-1360 Network devices
  • High 8.8
    CVE-2023-32143

    D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability

    D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required…

    D-Link DAP-1360 Network devices
  • High 8.8
    CVE-2023-32142

    D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not requir…

    D-Link DAP-1360 Network devices
  • High 7.5
    CVE-2023-32140

    D-Link DAP-1360 webproc var:sys_Token Heap-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-1360 webproc var:sys_Token Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not re…

    D-Link DAP-1360 Network devices
  • High 8.8
    CVE-2023-32141

    D-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not…

    D-Link DAP-1360 Network devices
  • High 8.8
    CVE-2023-32139

    D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exp…

    D-Link DAP-1360 Network devices
  • High 7.5
    CVE-2023-32138

    D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to expl…

    D-Link DAP-1360 Network devices
  • High 8.8
    CVE-2023-32136

    D-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not requir…

    D-Link DAP-1360 Network devices
  • High 8.8
    CVE-2023-27369

    NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability

    NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30. Authentication is not required to exploit th…

    NETGEAR RAX30 Network devices
  • High 8.8
    CVE-2023-27368

    NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability

    NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to ex…

    NETGEAR RAX30 Network devices
  • High 8.0
    CVE-2023-27367

    NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability

    NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit t…

    NETGEAR RAX30 Network devices
  • High 7.5
    CVE-2023-27360

    NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability

    NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30. Authentication is not required to exploit this vulnerabilit…

    NETGEAR RAX30 Network devices
  • High 8.8
    CVE-2023-27358

    NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability

    NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vul…

    NETGEAR RAX30 Network devices
  • High 8.8
    CVE-2023-27346

    TP-Link AX1800 Firmware Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    TP-Link AX1800 Firmware Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AX1800 routers. Authentication is not required…

    TP-Link Systems AX1800 Network devices
  • High 8.8
    CVE-2023-27332

    TP-Link Archer AX21 tdpServer Logging Stack-based Buffer Overflow Remote Code Execution Vulnerability

    TP-Link Archer AX21 tdpServer Logging Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer AX21 routers. Authentication is n…

    TP-Link Systems Archer AX21 Network devices
  • High 7.5
    CVE-2024-29011

    Use of hard-coded password in the GMS ECM endpoint leading to authentication bypass vulnerability. This issue affects G…

    SonicWall GMS Network devices
  • High 7.1
    CVE-2024-29010

    The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity (XXE) injection, potentiall…

    SonicWall GMS Network devices
  • High 7.5
    CVE-2024-20376

    A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote…

    Cisco Cisco IP Phones with Multiplatform Firmware Cisco PhoneOS Network devices
  • High 7.5
    CVE-2024-20378

    A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote…

    Cisco Cisco IP Phones with Multiplatform Firmware Cisco PhoneOS Network devices
  • High 7.5
    CVE-2024-29205

    An Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of Ivanti Connect Secure (9.…

    ivanti Connect Secure Policy Secure Network devices
  • High 7.4
    CVE-2024-20313

    A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacen…

    Cisco Cisco IOS XE Software iOS Network devices
  • High 8.8
    CVE-2024-20295

    A vulnerability in the CLI of the Cisco Integrated Management Controller (IMC) could allow an authenticated, local atta…

    Cisco Cisco Unified Computing System E-Series Software (UCSE) Cisco Unified Computing System (Standalone) Network devices
  • High 8.7
    CVE-2024-20356 Public exploit EPSS 30%

    A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an au…

    Cisco Cisco Unified Computing System E-Series Software (UCSE) Cisco Unified Computing System (Standalone) Network devices
  • High 8.6
    CVE-2024-20353 Exploited EPSS 70%

    A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Fi…

    Cisco Cisco Firepower Threat Defense Software Cisco Adaptive Security Appliance (ASA) Software Network devices
    KEV Apr 24, 2024
  • High 8.1
    CVE-2024-22061

    A Heap Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows a remote unauthent…

    ivanti Avalanche Network devices
  • High 8.8
    CVE-2024-25000

    A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker…

    ivanti Avalanche Network devices
  • High 8.8
    CVE-2024-24999

    A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker…

    ivanti Avlanche Network devices
  • High 8.8
    CVE-2024-24995

    A Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated…

    ivanti Avalanche Network devices
  • High 8.8
    CVE-2024-24993

    A Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated…

    ivanti Avalanche Network devices
  • High 8.8
    CVE-2024-24994 EPSS 68%

    A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker…

    ivanti Avalanche Network devices
  • High 8.8
    CVE-2024-24997

    A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker…

    ivanti Avalanche Network devices
  • High 8.8
    CVE-2024-24992 EPSS 71%

    A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker…

    ivanti Avalanche Network devices
  • High 8.8
    CVE-2024-24998

    A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker…

    ivanti Avalanche Network devices
  • High 7.1
    CVE-2024-27984

    A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker…

    ivanti Avalanche Network devices
  • High 8.8
    CVE-2024-27975

    An Use-after-free vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows a remote authen…

    ivanti Avalanche Network devices
  • High 8.8
    CVE-2024-27976

    A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker…

    ivanti Avalanche Network devices