Category
Network devices
11,275 known vulnerabilities.
296 results · Clear filters · Feed
-
Low 3.4
Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Privilege Escalation Vulnerability
A vulnerability in the implementation of the remote access functionality of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco Secure Web Appliance could allow an authenticated, local attacker to elevate privi…
-
Low 3.7
TP-Link TL-SG108E HTTP GET Request usr_account_set.cgi get request method with sensitive query strings
A vulnerability classified as problematic has been found in TP-Link TL-SG108E 1.0.0 Build 20201208 Rel. 40304. Affected is an unknown function of the file /usr_account_set.cgi of the component HTTP GET Request Handler. The manipulation of the argument usernam…
-
Low 3.9
An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6.0.0, FortiDeceptor 5.3 all…
-
Low 3.5
An improper verification of source of a communication channel vulnerability [CWE-940] in FortiClientEMS 7.4.0, 7.2.0 th…
-
Low 3.2
A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versi…
-
Low 3.3
An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiPortal 6.0.0 through …
-
Low 3.7
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in Forti…
-
Low 3.2
An Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below; FortiSA…
-
Low 2.6
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWeb versions 6.…
-
Low 3.5
A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.…
-
Low 3.5
An insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7.4.0 through 7.4.4 may …
-
Low 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (CO…
-
Low 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (CO…
-
Low 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (CO…
-
Low 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (CO…
-
Low 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (CO…
-
Low 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (CO…
-
Low 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (CO…
-
Low 3.3
There is an information vulnerability in Huawei smartphones. A function in a module can be called without verifying the…
-
Low 3.5
There is an information disclosure vulnerability in several smartphones. The system has a logic judging error under cer…
-
Low 3.5
There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of oper…
-
Low 3.3
There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker ca…
-
Low 2.1
PAN-OS: Server-Side Request Forgery in WildFire
A server-side request forgery in PAN-OS software enables an authenticated attacker with administrative privileges to use the administrative web interface as a proxy, which enables the attacker to view internal network resources not otherwise accessible.
-
Low 3.8
An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiWeb versi…
-
Low 2.2
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet Fo…
-
Low 3.9
An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAna…
-
Low 3.6
An improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability [CW…
-
Low 3.8
Cisco Identity Services Engine Path Traversal Vulnerability
A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to upload files to arbitrary locations on the underlying operating system of an affected device. To exploit this vulnerability, an attacker would need valid Super Admin…
-
Low 2.4
D-Link DSL-2750U Port Forwarding Page cross site scripting
A vulnerability classified as problematic has been found in D-Link DSL-2750U R5B017. This affects an unknown part of the component Port Forwarding Page. The manipulation of the argument PortMappingDescription leads to cross site scripting. It is possible to i…
-
Low 3.1
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiManager 7.4.2 and below, …
-
Low 3.4
An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF…
-
Low 3.9
A cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting FortiClient VPN iOS 7.2 all ve…
-
Low 3.7
D-Link DNS-320 Web Management Interface widget_api.cgi information disclosure
A vulnerability, which was classified as problematic, has been found in D-Link DNS-320 2.02b01. Affected by this issue is some unknown functionality of the file /cgi-bin/widget_api.cgi of the component Web Management Interface. The manipulation of the argumen…
-
Low 3.5
An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and below, 7.0 all versions, …
-
Low 2.5
Access permission verification vulnerability in the Notepad module Impact: Successful exploitation of this vulnerabilit…
-
Low 3.9
An authorization bypass through user-controlled key in Fortinet FortiPortal version 7.2.0, and versions 7.0.0 through 7…
-
Low 3.1
An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below, …
-
Low 2.7
D-Link DAR-7000 decodmail.php deserialization
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20230922. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to …
-
Low 2.0
Cortex XDR Agent: Local Windows User Can Disrupt Functionality of the Agent
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local low privileged Windows user to disrupt some functionality of the agent. However, they are not able to disrupt Cortex XDR agent protection mechan…
-
Low 1.7CVE-2024-21754 Public exploit
A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3 a…