Category
Network devices
11,275 known vulnerabilities.
4,487 results · Clear filters · Feed
-
Medium 4.4
Improper input validation in NETGEAR Nighthawk routers
A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques (MiTM) to manipulate DNS responses and execute commands …
-
Medium 5.0
Denial of Service Vulnerability in NETGEAR C6220 and C6230
Denial of Service Vulnerability in NETGEAR C6220 and C6230 (DOCSIS® 3.0 Two-in-one Cable Modem + WiFi Router) allows authenticated local WiFi users reboot the router.
-
Medium 6.3
D-Link DCS-930L alphapd setSystemAdmin command injection
A vulnerability was determined in D-Link DCS-930L 1.15.04. This affects an unknown part of the file /setSystemAdmin of the component alphapd. Executing manipulation of the argument AdminID can lead to command injection. The attack can be executed remotely. Th…
-
Medium 4.9
App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerab…
-
Medium 4.0
Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability…
-
Medium 6.2
Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerabilit…
-
Medium 4.4
Permission control vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may…
-
Medium 6.7
Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect avai…
-
Medium 5.3
Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerab…
-
Medium 5.1
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulne…
-
Medium 5.1
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulne…
-
Medium 5.1
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulne…
-
Medium 6.3
D-Link DIR-823X set_wan_settings sub_415028 command injection
A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub_415028 of the file /goform/set_wan_settings. The manipulation of the argument ppp_username results in command injection. It is possible to launch the attack r…
-
Medium 4.9
Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability m…
-
Medium 5.8
UAF vulnerability in the USB driver module. Impact: Successful exploitation of this vulnerability will affect availabil…
-
Medium 6.2
Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of this vulnerability …
-
Medium 4.9
Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability m…
-
Medium 6.2
Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect …
-
Medium 5.3
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may …
-
Medium 5.1
Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affec…
-
Medium 5.5
Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect …
-
Medium 6.6
Vulnerability of accessing invalid memory in the component driver module. Impact: Successful exploitation of this vulne…
-
Medium 5.1
Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affe…
-
Medium 6.8
Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability …
-
Medium 6.4
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may a…
-
Medium 4.4
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability…
-
Medium 5.3
A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate fil…
-
Medium 6.5
Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem …
-
Medium 4.2
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiADC 8.0.…
-
Medium 6.9
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, Forti…
-
Medium 6.3
An Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all ver…
-
Medium 6.9
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, Forti…
-
Medium 5.0
An Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5.0.0 through 5.0.1, For…
-
Medium 4.8
A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions, FortiWeb 7.2 all v…
-
Medium 4.9
An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through…
-
Medium 5.2
A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiEx…
-
Medium 6.3
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiExtender 7.6.0 …
-
Medium 6.7
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vu…
KEV Nov 18, 2025 -
Medium 5.3
An uncontrolled resource consumption vulnerability in the web server of Zyxel DX3301-T0 firmware version 5.50(ABVY.6.3)…
-
Medium 6.3
D-Link DWR-M920/DWR-M921/DIR-822K/DIR-825M formDebugDiagnosticRun system command injection
A security vulnerability has been detected in D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M 1.1.5. Impacted is the function system of the file /boafrm/formDebugDiagnosticRun. The manipulation of the argument host leads to command injection. Remote exploita…