Category
Network devices
11,275 known vulnerabilities.
4,487 results · Clear filters · Feed
-
Medium 4.8
Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative write privileges to conduct a stored cross-site scripting (XSS) attack or a reflected…
-
Medium 6.7
An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 t…
-
Medium 5.4CVE-2025-61624 Exploited
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet Fo…
KEV Oct 16, 2026 -
Medium 5.4
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyz…
-
Medium 6.5
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet Forti…
-
Medium 6.2
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR P…
-
Medium 4.9
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerab…
-
Medium 5.2
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.…
-
Medium 4.4
A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, …
-
Medium 5.4
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 …
-
Medium 4.3
A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiS…
-
Medium 6.7
A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.…
-
Medium 6.2
Multiple Relative Path Traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, Forti…
-
Medium 6.2
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox…
-
Medium 4.1
A server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR …
-
Medium 5.4
A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSO…
-
Medium 6.2
A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSO…
-
Medium 4.1
A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR Paa…
-
Medium 4.4
An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet Forti…
-
Medium 6.2
A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 thr…
-
Medium 4.1
A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR Paa…
-
Medium 6.2
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiC…
-
Medium 5.4
Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information …
-
Medium 5.7
Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker …
-
Medium 4.0
Cortex XDR Agent: Local Administrator can disable the agent on Windows
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent. This issue may be leveraged by malware to perform malicious activity without detection.
-
Medium 5.1
Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect a…
-
Medium 6.8
Boundary-unlimited vulnerability in the application read module. Impact: Successful exploitation of this vulnerability …
-
Medium 6.7
Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect …
-
Medium 6.3
Race condition vulnerability in the power consumption statistics module. Impact: Successful exploitation of this vulner…
-
Medium 6.3
Race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability ma…
-
Medium 5.9
UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability …
-
Medium 4.1
UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availab…
-
Medium 4.7
UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availab…
-
Medium 5.7
Out-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affe…
-
Medium 5.7
UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability …
-
Medium 6.9
Vulnerability of improper permission control in the theme setting module. Impact: Successful exploitation of this vulne…
-
Medium 5.6
Double free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vulnerability may aff…
-
Medium 4.1
Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect avai…
-
Medium 6.1
Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect av…
-
Medium 6.7
Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root
An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker executing specific, crafted CLI commands to inject arbitrary shell commands as root, leading to a complete c…