Category
Network devices
11,298 known vulnerabilities.
3,920 results · Clear filters · Feed
-
High 8.6
Cisco IOS XE Software Fragmented Tunnel Protocol Packet Denial of Service Vulnerability
A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability …
-
High 7.2
A command execution vulnerability exists in the hidden telnet service functionality of Netgear Orbi Router RBR750 4.6.8…
-
High 7.2
A command execution vulnerability exists in the ubus backend communications functionality of Netgear Orbi Satellite RBS…
-
High 8.6
Cisco IOS XR Software for ASR 9000 Series Routers Bidirectional Forwarding Detection Denial of Service Vulnerability
A vulnerability in the bidirectional forwarding detection (BFD) hardware offload feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Performance Routers …
-
High 7.8
A vulnerability in the upgrade signature verification of Cisco Enterprise NFV Infrastructure Software (NFVIS) could all…
-
High 7.8
A relative path traversal vulnerability [CWE-23] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 t…
-
High 7.1
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC versions 9.…
-
High 7.8
A improper privilege management in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.6,…
-
High 7.2
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb versi…
-
High 7.5
A improper access control vulnerability in Fortinet FortiSOAR 7.3.0 - 7.3.1 allows an attacker authenticated on the adm…
-
High 7.2CVE-2023-1162 EPSS 26%
DrayTek Vigor 2960 Web Management Interface mainfunction.cgi command injection
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is an unknown function of the file mainfunction.cgi of the component Web Management Interface. The manipulation of the…
-
High 8.8
SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use exc…
-
High 8.8
Cisco Application Policy Infrastructure Controller and Cisco Cloud Network Controller Cross-Site Request Forgery Vulnerability
A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Network Controller, formerly Cisco Cloud APIC, could allow an unauthenticated, remote attacker to conduct a cross-site request f…
-
High 7.4
Cisco Nexus 9000 Series Fabric Switches in ACI Mode Link Layer Discovery Protocol Memory Leak Denial of Service Vulnerability
A vulnerability in the Link Layer Discovery Protocol (LLDP) feature for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow an unauthenticated, adjacent attacker to cause a memory leak, which could result in an…
-
High 8.6
ClamAV Double-free Vulnerability in the OLE2 File Parser
A vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnerability is due to incorrect use of the r…
-
High 7.5
Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)
node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for web browsers and node.js-based servers. Prior to version 2.2.0, when using the non-default "fallback" crypto back-end, ECC operations in `node-jose` can trigger a De…
-
High 8.0
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface…
-
High 7.1
A double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or comm…
-
High 7.2
A improper neutralization of argument delimiters in a command ('argument injection') in Fortinet FortiNAC versions 9.4.…
-
High 7.4
An insufficiently protected credentials in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, …
-
High 7.4
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC versi…
-
High 7.0
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender …
-
High 8.6
An improper neutralization of input during web page generation [CWE-79] vulnerability in FortiOS versions 7.0.0 to 7.0.…
-
High 8.6
An improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 al…
-
High 7.1
A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, F…
-
High 7.6
A stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb version 6.3.6 through…
-
High 7.4
A stack-based buffer overflow in Fortinet FortiWeb 6.4 all versions, FortiWeb versions 6.3.17 and earlier, FortiWeb ver…
-
High 8.5
A condition for session fixation vulnerability [CWE-384] in the session management of FortiWeb versions 6.4 all version…
-
High 8.6
An improper neutralization of special elements used in an os command ('OS Command Injection') [CWE-78] in FortiWeb 7.0.…
-
High 8.6
A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 a…
-
High 7.5
A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attac…
-
High 7.8
Privilege Escalation to NT AUTHORITY\SYSTEM on the vulnerable VDA
A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual Apps and Desktops Windows VDA.
-
High 7.8
Privilege Escalation on the system running a vulnerable version of Citrix Workspace app for Windows
Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app.
-
High 7.5
Netgear ProSAFE 24 Port 10/100 FS726TP - CWE-522: Insufficiently Protected Credentials.
An uspecified endpoint in the web server of the switch does not properly authenticate the user identity, and may allow downloading a config page with the password to the switch in clear text.
-
High 7.2
Cisco IOx Application Hosting Environment Command Injection Vulnerability
A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system. This vulnerability is due to incomplete sanitization of parameters th…
-
High 7.5
The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affec…
-
High 7.5
The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this …
-
High 7.5
The bundle management module lacks permission verification in some APIs. Successful exploitation of this vulnerability …
-
High 7.5
The geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation o…
-
High 7.5
The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability …