Skip to content
OpenAdvisories

Category

Network devices

11,278 known vulnerabilities.

297 results · Clear filters · Feed

  • Low 1.7
    CVE-2024-21754 Public exploit

    A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3 a…

  • Low 3.9

    A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiPortal versions…

  • Low 3.3

    Insufficient verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vul…

  • Low 2.2

    An Unverified Password Change could allow a malicious actor with API access to the device to change the system password…

  • Low 2.2

    An Improper Access Control could allow a malicious actor authenticated in the API to enable Android Debug Bridge (ADB) …

  • Low 2.7

    Netgear DG834Gv5 Web Management Interface cleartext storage

    A vulnerability classified as problematic was found in Netgear DG834Gv5 1.6.01.34. This vulnerability affects unknown code of the component Web Management Interface. The manipulation leads to cleartext storage of sensitive information. The attack can be initi…

  • Low 3.9

    An improper authorization vulnerability [CWE-285] in FortiPortal version 7.2.0, and versions 7.0.6 and below reports ma…

  • Low 3.1

    On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the configured ACL for a port resulting in some packets that should be denied being permitted and some

    On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the configured ACL for a port resulting in some packets that should be denied being permitted and some

  • Low 3.5

    Vulnerability of null references in the motor module.Successful exploitation of this vulnerability may affect availabil…

  • Low 3.8

    BIG-IP Advanced WAF and ASM Configuration utility vulnerability

    An SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

  • Low 2.7

    PAN-OS: XML API Keys Revoked by Read-Only PAN-OS Administrator

    An improper privilege management vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to revoke active XML API keys from the firewall and disrupt XML API usage.

  • Low 2.8

    An improper access control vulnerability [CWE-284] in FortiOS version 7.2.0, version 7.0.13 and below, version 6.4.14 a…

  • Low 3.4

    A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiS…

  • Low 3.4

    An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet Forti…

  • Low 2.1

    An insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version 7.0.0, version 6.7.6 a…

  • Low 3.4

    An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet Forti…

  • Low 3.4

    An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiMail version 7.2.0 throug…

  • Low 3.0

    An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0,…

  • Low 3.9

    An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiOS 7.2.0 - 7.2.4 allo…

  • Low 3.6

    An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClientEMS versions 7.0.0 …

  • Low 3.9

    A access of uninitialized pointer vulnerability [CWE-824] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiO…

  • Low 3.6

    A plaintext storage of a password vulnerability [CWE-256] in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all vers…

  • Low 3.3

    An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProx…

  • Low 3.3

    The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download fai…

  • Low 3.8

    A use of a weak cryptographic algorithm vulnerability [CWE-327] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.0 all…

  • Low 3.9

    A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC ver…

  • Low 3.9

    An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 an…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Web Management Interface. The manipulation of the argument wanName leads to cross site scriptin…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file scgi-bin/platform.cgi?page=dmz_setup.htm of the component Web Management Interface. The man…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. Affected is an unknown function of the file scgi-bin/platform.cgi?page=time_zone.htm of the component Web Management Interface. The manipulation of the argument…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=time_zone.htm of the component Web Management Interface. The manipulation of the argume…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability has been found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This vulnerability affects unknown code of the file scgi-bin/platform.cgi?page=time_zone.htm of the component Web Management Interface. The manipulation of the argu…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability, which was classified as problematic, was found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the component Web Management Interface. The manipulation of the ar…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability, which was classified as problematic, has been found in Netgear SRX5308 up to 4.3.5-3. Affected by this issue is some unknown functionality of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the component Web Management Interfac…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. Affected by this vulnerability is an unknown functionality of the file scgi-bin/platform.cgi?page=dmz_setup.htm of the component Web Management Interface. The manipulation o…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3. Affected is an unknown function of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the component Web Management Interface. The manipulation of the argume…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been rated as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=ike_policies.htm of the component Web Management Interface. The manipulation of the…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been declared as problematic. This vulnerability affects unknown code of the file scgi-bin/platform.cgi?page=dmz_setup.htm of the component Web Management Interface. The manipulation of the ar…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. This affects an unknown part of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the component Web Management Interface. The manipulation of the a…

  • Low 2.4

    Netgear SRX5308 Web Management Interface cross site scripting

    A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. Affected by this issue is some unknown functionality of the file scgi-bin/platform.cgi?page=firewall_logs_email.htm of the component Web Management Interface. The manipu…