Category
Network devices
11,298 known vulnerabilities.
3,920 results · Clear filters · Feed
-
High 7.5
BIG-IP Advanced WAF and ASM vulnerability
When a BIG-IP Advanced WAF or BIG-IP ASM policy with a Request Body Handling option is attached to a virtual server, undisclosed requests can cause the BD process to terminate. The condition results from setting the Request Body Handling option in the Header-…
-
High 7.5
BIG-IP ASM and Advanced WAF vulnerability
When a BIG-IP ASM/Advanced WAF security policy is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
-
High 7.5
BIG-IP TMM vulnerability
When a virtual server is enabled with VLAN group and SNAT listener is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
-
High 7.5
BIG-IP HTTP/2 vulnerability
When HTTP/2 is configured on BIG-IP or BIG-IP Next SPK systems, undisclosed responses can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
-
High 7.1
BIG-IP Next CNF & SPK vulnerability
A vulnerability exists in BIG-IP Next CNF and SPK systems that may allow access to undisclosed sensitive files. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
-
High 7.5
BIG-IP SSL Client Certificate LDAP and CRLDP Authentication profiles vulnerability
When SSL Client Certificate LDAP or Certificate Revocation List Distribution Point (CRLDP) authentication profile is configured on a virtual server, undisclosed requests can cause an increase in CPU resource utilization. Note: Software versions which have rea…
-
High 8.7
Appliance mode iControl REST vulnerability
When running in appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint on multi-bladed systems. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions…
-
High 7.5
BIG-IP Websockets vulnerability
When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) process to terminate. Note: Software versions which have reached End of Technical Sup…
-
High 7.5
F5 AFM Signature Matching Vulnerability
For unspecified traffic patterns, BIG-IP AFM IPS engine may spend an excessive amount of time matching the traffic against signatures, resulting in Traffic Management Microkernel (TMM) restarting and traffic disruption. Note: Software versions which have rea…
-
High 7.2
BIG-IP iControl REST API Vulnerability
When BIG-IP is deployed in high availability (HA) and an iControl REST API token is updated, the change does not sync to the peer device. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
-
High 8.3
An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy S…
-
High 7.5CVE-2024-20290 EPSS 33%
A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a den…
-
High 8.2
A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allo…
-
High 7.2
A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada G…
-
High 7.2CVE-2023-43482 Public exploit
A command execution vulnerability exists in the guest resource functionality of Tp-Link ER7206 Omada Gigabit VPN Router…
-
High 7.2
A post authentication command injection vulnerability exists in the ipsec policy functionality of Tp-Link ER7206 Omada …
-
High 7.2
A post authentication command injection vulnerability exists in the GRE policy functionality of Tp-Link ER7206 Omada Gi…
-
High 7.2
A post authentication command injection vulnerability exists when configuring the wireguard VPN functionality of Tp-Lin…
-
High 7.2
A post authentication command injection vulnerability exists when setting up the PPTP global configuration of Tp-Link E…
-
High 7.2
A post authentication command injection vulnerability exists when configuring the web group member of Tp-Link ER7206 Om…
-
High 7.2
A post authentication command execution vulnerability exists in the web filtering functionality of Tp-Link ER7206 Omada…
-
High 8.2
A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Polic…
KEV Jan 31, 2024 -
High 8.8CVE-2024-21888 EPSS 85%
A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.…
-
High 7.2CVE-2023-5372 EPSS 28%
The post-authentication command injection vulnerability in Zyxel NAS326 firmware versions through V5.21(AAZF.15)C0 and …
-
High 8.8
Junos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSS
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an attacker to construct a URL that when visited by another user enables the attacke…
-
High 7.3
A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote …
-
High 7.5
The nearby module has a privilege escalation vulnerability. Successful exploitation of this vulnerability may affect av…
-
High 7.5
Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may aff…
-
High 7.5
Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may aff…
-
High 7.5
The Celia Keyboard module has a vulnerability in access control. Successful exploitation of this vulnerability may affe…
-
High 7.5
Vulnerability of foreground service restrictions being bypassed in the NMS module. Successful exploitation of this vuln…
-
High 7.5
Denial of Service (DoS) vulnerability in the DMS module. Successful exploitation of this vulnerability will affect avai…
-
High 7.5
Vulnerability of process priorities being raised in the ActivityManagerService module. Successful exploitation of this …
-
High 7.5
Vulnerability of permissions being not strictly verified in the WMS module. Successful exploitation of this vulnerabili…
-
High 7.5
Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerabili…
-
High 7.5
The iaware module has a Use-After-Free (UAF) vulnerability. Successful exploitation of this vulnerability may affect th…
-
High 7.5
Data confidentiality vulnerability in the ScreenReader module. Successful exploitation of this vulnerability may affect…
-
High 7.5
Out-of-bounds access vulnerability in the device authentication module. Successful exploitation of this vulnerability m…
-
High 7.5
launchAnyWhere vulnerability in the ActivityManagerService module. Successful exploitation of this vulnerability will a…
-
High 7.5
Authorization vulnerability in the BootLoader module. Successful exploitation of this vulnerability may affect service …