Category
Network devices
11,298 known vulnerabilities.
3,920 results · Clear filters · Feed
-
High 7.5
D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass.
D-Link – G integrated Access Device4 Information Disclosure & Authorization Bypass. *Information Disclosure – file contains a URL with private IP at line 15 "login.asp" A. The window.location.href = http://192.168.1.1/setupWizard.asp" http://192.168.1.1/setup…
-
High 7.5
A vulnerability in the processing of SSH connections of Cisco Firepower Management Center (FMC) and Cisco Firepower Thr…
-
High 7.7
A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Sof…
-
High 7.7
A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat De…
-
High 7.5
A vulnerability in the Simple Network Management Protocol (SNMP) access controls for Cisco FirePOWER Software for Adapt…
-
High 8.6
A vulnerability in dynamic access policies (DAP) functionality of Cisco Adaptive Security Appliance (ASA) Software and …
-
High 8.6
A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defen…
-
High 7.5
The LBS module has a vulnerability in geofencing API access. Successful exploitation of this vulnerability may cause th…
-
High 7.5
The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services…
-
High 7.5
The lock screen module has defects introduced in the design process. Successful exploitation of this vulnerability may …
-
High 7.5
The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability m…
-
High 7.5
The power module has a vulnerability in permission verification. Successful exploitation of this vulnerability may caus…
-
High 7.5
The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released. Suc…
-
High 7.5
The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system fi…
-
High 7.5
The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vul…
-
High 7.5
The Display Service module has a UAF vulnerability. Successful exploitation of this vulnerability may affect the displa…
-
High 7.5
The memory management module has the logic bypass vulnerability. Successful exploitation of this vulnerability may affe…
-
High 8.3
Remote desktop takeover via phishing
Remote desktop takeover via phishing
-
High 7.5
A vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated remot…
-
High 7.1
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authentica…
-
High 8.3
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an unauthen…
-
High 7.7
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an authenti…
-
High 8.8
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenti…
-
High 7.8
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line interpr…
-
High 8.0
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC management interface …
-
High 8.0
An improper neutralization of input during web page generation vulnerability [CWE-79] exists in FortiManager and FortiA…
-
High 8.8CVE-2022-38374 Public exploit
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiADC 7.0.0 - 7.0…
-
High 8.0
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiDeceptor management inter…
-
High 7.8
A improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local attacker with CLI access to p…
-
High 8.6
Cisco Meraki MX and Z3 Teleworker Gateway VPN Denial of Service Vulnerability
A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due …
-
High 7.1
Cisco Identity Services Engine Unauthorized File Access Vulnerability
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to read and delete files on an affected device. This vulnerability is due to insufficient validation of user-supplied i…
-
High 7.5
BIG-IP Advanced WAF and ASM bd vulnerability CVE-2022-41836
When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.
-
High 7.3
F5OS vulnerability CVE-2022-41835
In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.5.0, excessive file permissions in F5OS allows an authenticated local attacker to execute limited set of commands in a container and impact the F5OS controller.
-
High 7.5
BIG-IP iRule vulnerability CVE-2022-41833
In all BIG-IP 13.1.x versions, when an iRule containing the HTTP::collect command is configured on a virtual server, undisclosed requests can cause Traffic Management Microkernel (TMM) to terminate.
-
High 7.5
BIG-IP SIP vulnerability CVE-2022-41832
In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when a SIP profile is configured on a virtual server, undisclosed messages can cause an increase in memory resource …
-
High 7.5
BIG-IP AFM NAT64 Policy Vulnerability CVE-2022-41806
In versions 16.1.x before 16.1.3.2 and 15.1.x before 15.1.5.1, when BIG-IP AFM Network Address Translation policy with IPv6/IPv4 translation rules is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.
-
High 7.5
BIG-IP DNS Express vulnerability CVE-2022-41787
In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when DNS profile is configured on a virtual server with DNS Express enabled, undisclosed DNS queries with DNSSEC can…
-
High 7.0
NGINX ngx_http_hls_module vulnerability CVE-2022-41743
NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_hls_module that might allow a local attacker to corrupt NGINX worker memory, resulting in its crash or potential other impact using a specially crafted audio or video fil…
-
High 7.1
NGINX ngx_http_mp4_module vulnerability CVE-2022-41742
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to c…
-
High 7.0CVE-2022-41741 Public exploit
NGINX ngx_http_mp4_module vulnerability CVE-2022-41741
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to c…