Category
Network devices
11,275 known vulnerabilities.
4,487 results · Clear filters · Feed
-
Medium 6.3
D-Link DIR-619L formSysCmd command injection
A vulnerability was found in D-Link DIR-619L 2.04B04. It has been classified as critical. This affects the function formSysCmd. The manipulation of the argument sysCmd leads to command injection. It is possible to initiate the attack remotely. The vendor was …
-
Medium 6.3
D-Link DIR-605L wake_on_lan command injection
A vulnerability classified as critical has been found in D-Link DIR-605L 2.13B01. Affected is the function wake_on_lan. The manipulation of the argument mac leads to command injection. It is possible to launch the attack remotely. The vendor was contacted ear…
-
Medium 6.3CVE-2025-4443 EPSS 63%
D-Link DIR-605L sub_454F2C command injection
A vulnerability was found in D-Link DIR-605L 2.13B01. It has been rated as critical. This issue affects the function sub_454F2C. The manipulation of the argument sysCmd leads to command injection. The attack may be initiated remotely. The vendor was contacted…
-
Medium 6.5
On affected platforms running Arista EOS with a gNMI transport enabled, running the gNOI File TransferToRemote RPC with credentials for a remote server may cause these remote-server credentials to be logged or accounted on the local EOS device or possibly
On affected platforms running Arista EOS with a gNMI transport enabled, running the gNOI File TransferToRemote RPC with credentials for a remote server may cause these remote-server credentials to be logged or accounted on the local EOS device or possibly on …
-
Medium 6.0
F5OS-A/C CLI vulnerability
When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing system diagnostics tcpdump command utility on a F5OS-C/A system. Note: Software ve…
-
Medium 4.3
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote a…
-
Medium 5.4
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privil…
-
Medium 6.5
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privil…
-
Medium 6.7
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 1…
-
Medium 6.7
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 1…
-
Medium 4.6
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 1…
-
Medium 4.6
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 1…
-
Medium 6.7
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 1…
-
Medium 5.3
A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote…
-
Medium 5.3
A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could …
-
Medium 4.7
A vulnerability in Cisco Catalyst Center, formerly Cisco DNA Center, could allow an authenticated, remote attacker to r…
-
Medium 6.0
A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an authenticated, local attacker to write…
-
Medium 6.8
A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow …
-
Medium 6.5
A vulnerability in the lobby ambassador web interface of Cisco IOS XE Wireless Controller Software could allow an authe…
-
Medium 4.3
A vulnerability in the Network Configuration Access Control Module (NACM) of Cisco IOS XE Software could allow an authe…
-
Medium 4.7
A vulnerability in the access control list (ACL) programming of Cisco IOS Software that is running on Cisco Catalyst 10…
-
Medium 5.4
Cisco SD-WAN vManage Stored Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to conduct a stored cross-site scripting attack (XSS) on an affected system. This vulner…
-
Medium 4.7
Cisco Catalyst SD-WAN Manager Reflected HTML Injection Vulnerability
A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject HTML into the browser of an authenticated user. This vulnerability is due to improper sanitization …
-
Medium 4.3
Cisco IOS and IOS XE Software SNMPv3 Configuration Restriction Vulnerability
A vulnerability in the implementation of the Simple Network Management Protocol Version 3 (SNMPv3) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to poll an affected device using SNMP, even if the device …
-
Medium 6.5
Cisco SD-WAN Manager Software Arbitrary File Creation Vulnerability
A vulnerability in the application data endpoints of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to write arbitrary files to an affected system. This vulnerability is due to improper validation o…
-
Medium 5.5
Cisco Catalyst SDWAN Manager Arbitrary File Overwrite Vulnerability
A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. To exploit this vulnerability, the attacker m…
-
Medium 5.9
Cisco Catalyst vManage Certificate Validation Vulnerability
A vulnerability in certificate validation processing of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is due to improper validation of …
-
Medium 6.3CVE-2025-4341 EPSS 24%
D-Link DIR-880L Request Header ssdpcgi sub_16570 command injection
A vulnerability classified as critical was found in D-Link DIR-880L up to 104WWb01. Affected by this vulnerability is the function sub_16570 of the file /htdocs/ssdpcgi of the component Request Header Handler. The manipulation of the argument HTTP_ST/REMOTE_A…
-
Medium 6.3
D-Link DIR-890L/DIR-806A1 soap.cgi sub_175C8 command injection
A vulnerability classified as critical has been found in D-Link DIR-890L and DIR-806A1 up to 100CNb11/108B03. Affected is the function sub_175C8 of the file /htdocs/soap.cgi. The manipulation leads to command injection. It is possible to launch the attack rem…
-
Medium 5.1
Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulne…
-
Medium 4.4
Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation of this vulnerabili…
-
Medium 6.2
Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability…
-
Medium 6.3
Bypass vulnerability in the network search instruction authentication module Impact: Successful exploitation of this vu…
-
Medium 4.4
Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will …
-
Medium 4.4
Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will …
-
Medium 6.2
Vulnerability of insufficient information protection in the media library module Impact: Successful exploitation of thi…
-
Medium 6.2
Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may …
-
Medium 5.1
Permission control vulnerability in the contacts module Impact: Successful exploitation of this vulnerability may affec…
-
Medium 6.3
Netgear WG302v2 ui_get_input_value command injection
A vulnerability was found in Netgear WG302v2 up to 5.2.9 and classified as critical. Affected by this issue is the function ui_get_input_value. The manipulation of the argument host leads to command injection. The attack may be launched remotely. The vendor w…
-
Medium 6.3
Netgear JWNR2000v2 sub_435E04 command injection
A vulnerability was found in Netgear JWNR2000v2 1.0.0.11. It has been rated as critical. Affected by this issue is the function sub_435E04. The manipulation of the argument host leads to command injection. The attack may be launched remotely. The vendor was c…