Category
Network devices
11,298 known vulnerabilities.
3,920 results · Clear filters · Feed
-
High 7.5
Junos OS Evolved: A specific SNMP GET operation and a specific CLI commands cause resources to leak and eventually the evo-pfemand process will crash
An Uncontrolled Resource Consumption vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause an FPC crash leading to a Denial of Service (DoS). When a specific SN…
-
High 7.5
Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop
An Improper Check for Unusual or Exceptional Conditions vulnerability in BGP route processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause Routing Protocol Daemon (RPD) crash by sending a BGP route with invalid next-hop result…
-
High 7.5
Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash when specific H.323 packets are received
An Out-of-Bounds Write vulnerability in the H.323 ALG of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS). On all MX Series and SRX Series platform, when H.323 ALG is enabled and specific H.323 packe…
-
High 7.5
Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if the SIP ALG is enabled and specific SIP messages are processed
An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series with MS-MPC or MS-MIC card and SRX Series allows an unauthenticated, network-based attacker to cause a flow processing daemon (flowd) crash and thereby a Denial of Serv…
-
High 7.5
Junos OS: MX Series: The Multiservices PIC Management Daemon (mspmand) will crash when an IPsec6 tunnel processes specific IPv4 packets
An Improper Check or Handling of Exceptional Conditions vulnerability in the IPsec library of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause Denial of Service (DoS). On all MX platforms with MS-MPC or MS-MIC card, when spe…
-
High 7.5
Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if SIP ALG is enabled and a malformed SIP packet is received
A Buffer Overflow vulnerability in SIP ALG of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS). On all MX Series and SRX Series platform with SIP ALG enabled, when a malformed SIP packet is received…
-
High 7.5
Junos OS: MX Series with MPC10/MPC11: When Suspicious Control Flow Detection (scfd) is enabled and an attacker is sending specific traffic, this causes a memory leak.
A Missing Release of Memory after Effective Lifetime vulnerability in the Juniper Networks Junos OS on MX Series platforms with MPC10/MPC11 line cards, allows an unauthenticated adjacent attacker to cause a Denial of Service (DoS). Devices are only vulnerable…
-
High 7.5
The strcmp function in TP-Link routers, Archer C5 and WR710N-V1, used for checking credentials in httpd, is susceptible to a side-channel attack.
TP-Link routers, Archer C5 and WR710N-V1, using the latest software, the strcmp function used for checking credentials in httpd, is susceptible to a side-channel attack. By measuring the response time of the httpd process, an attacker could guess each byte of…
-
High 8.6
A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, whi…
-
High 8.2
An improper check for unusual or exceptional conditions in the HTTP request processing function of Zyxel GS1920-24v2 fi…
-
High 7.5
The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this…
-
High 7.5
The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect …
-
High 7.5
The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful…
-
High 7.5
The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system avail…
-
High 7.5
The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in o…
-
High 7.5
The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in o…
-
High 8.6
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC versi…
-
High 7.6
Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CW…
-
High 7.5
Huawei Aslan Children's Watch has an improper input validation vulnerability. Successful exploitation may cause the wat…
-
High 7.8
Huawei Aslan Children's Watch has a path traversal vulnerability. Successful exploitation may allow attackers to access…
-
High 7.5
Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute in version 22.3R1
An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). If a BGP update message is received over an …
-
High 7.5
Some smartphones have the input validation vulnerability. Successful exploitation of this vulnerability may affect data…
-
High 7.5
The power consumption module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may…
-
High 7.5
The contacts component has a free (undefined) provider vulnerability. Successful exploitation of this vulnerability may…
-
High 7.5
The TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may …
-
High 7.5
The ProfileSDK has defects introduced in the design process. Successful exploitation of this vulnerability may affect s…
-
High 7.5
Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause sy…
-
High 7.5
The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect s…
-
High 7.5
The Wi-Fi module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affe…
-
High 7.5
The system service has a vulnerability that causes incorrect return values. Successful exploitation of this vulnerabili…
-
High 7.5
The system tool has inconsistent serialization and deserialization. Successful exploitation of this vulnerability will …
-
High 7.5
The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized…
-
High 7.5
The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability…
-
High 8.1
A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware coul…
-
High 8.7
Appliance mode iControl REST vulnerability
In all versions of BIG-IP, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to…
-
High 8.8
iControl SOAP vulnerability
In all versions, BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
-
High 7.7
An authentication bypass by assumed-immutable data vulnerability [CWE-302] in the FortiOS SSH login component 7.2.0, 7.…
-
High 8.8
A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall rele…
-
High 7.2
A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older th…
-
High 7.2
An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewal…