Category
Network devices
11,275 known vulnerabilities.
4,487 results · Clear filters · Feed
-
Medium 4.6
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect avai…
-
Medium 4.8
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Pr…
-
Medium 6.1
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Pr…
-
Medium 4.5
A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiMail webmail and administrati…
-
Medium 5.0
An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiDDoS vers…
-
Medium 5.4
An Improper Neutralization of Input During Web Page Generation in FortiClientEMS version 6.2.0 may allow a remote attac…
-
Medium 5.5
Huawei PCs have a vulnerability that allows low-privilege users to bypass SDDL permission checks . Successful exploitat…
-
Medium 4.7
D-Link DIR-823X HTTP POST Request diag_nslookup sub_41710C os command injection
A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802. This issue affects the function sub_41710C of the file /goform/diag_nslookup of the component HTTP POST Request Handler. The manipulation of the argument targe…
-
Medium 6.9
A use of a cryptographically weak pseudo-random number generator vulnerability in the authenticator of the Identity Bas…
-
Medium 6.4
A stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox version 3.2.2 and below, ve…
-
Medium 4.7
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS 6.4.1 and below, 6.2.9…
-
Medium 4.3
D-Link DIR-618/DIR-605L formVirtualServ access control
A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been rated as problematic. This issue affects some unknown processing of the file /goform/formVirtualServ. The manipulation leads to improper access controls. The attack needs to be ap…
-
Medium 4.3
D-Link DIR-618/DIR-605L formTcpipSetup access control
A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/formTcpipSetup. The manipulation leads to improper access controls. Access to the local networ…
-
Medium 4.3
D-Link DIR-618/DIR-605L formSetPortTr access control
A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been classified as problematic. This affects an unknown part of the file /goform/formSetPortTr. The manipulation leads to improper access controls. Access to the local network is requi…
-
Medium 4.3
D-Link DIR-618/DIR-605L DDNS Service formSetDDNS access control
A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/formSetDDNS of the component DDNS Service. The manipulation leads to improper access con…
-
Medium 4.3
D-Link DIR-618/DIR-605L formSetPassword access control
A vulnerability has been found in D-Link DIR-618 and DIR-605L 2.02/3.02 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /goform/formSetPassword. The manipulation leads to improper access controls. The atta…
-
Medium 4.3
D-Link DIR-618/DIR-605L formSetDomainFilter access control
A vulnerability, which was classified as problematic, was found in D-Link DIR-618 and DIR-605L 2.02/3.02. Affected is an unknown function of the file /goform/formSetDomainFilter. The manipulation leads to improper access controls. The attack can only be initi…
-
Medium 4.3
D-Link DIR-618/DIR-605L formAdvNetwork access control
A vulnerability, which was classified as problematic, has been found in D-Link DIR-618 and DIR-605L 2.02/3.02. This issue affects some unknown processing of the file /goform/formAdvNetwork. The manipulation leads to improper access controls. The attack can on…
-
Medium 4.3CVE-2025-2546 EPSS 11%
D-Link DIR-618/DIR-605L Firewall Service formAdvFirewall access control
A vulnerability classified as problematic was found in D-Link DIR-618 and DIR-605L 2.02/3.02. This vulnerability affects unknown code of the file /goform/formAdvFirewall of the component Firewall Service. The manipulation leads to improper access controls. Th…
-
Medium 5.2
An Improper Neutralization of Input vulnerability affecting FortiGate version 6.2.0 through 6.2.1, 6.0.0 through 6.0.6 …
-
Medium 4.7
FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and Fo…
-
Medium 4.9
An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS version 6.2.4 and below, version…
-
Medium 6.5
A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 …
-
Medium 4.8
An improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 an…
-
Medium 4.2
An improper neutralization of input during web page generation in FortiWLC version 8.6.0, version 8.5.3 and below, vers…
-
Medium 4.0
An improper neutralization of input during web page generation in the SSL VPN portal of FortiProxy version 2.0.0, versi…
-
Medium 5.5
An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7.4.0 through 7.4.6 and …
-
Medium 4.4
An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and…
-
Medium 4.8CVE-2023-33300 EPSS 14%
A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and ea…
-
Medium 5.9
An insertion of sensitive information into log file vulnerabilities [CWE-532] in FortiManager version 7.4.0, version 7.…
-
Medium 6.0
An improper validation of integrity check value vulnerability [CWE-354] in FortiNDR version 7.4.2 and below, version 7.…
-
Medium 4.4
An improper certificate validation vulnerability [CWE-295] in FortiPortal version 7.4.0, version 7.2.4 and below, versi…
-
Medium 6.9
An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS version 7.4.3 and belo…
-
Medium 6.0
GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability
A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated Windows user. This enables the attacker to run commands as if they are a legitimate authenticated us…
-
Medium 6.8
PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP Frame
A Denial of Service (DoS) vulnerability in Palo Alto Networks PAN-OS software causes the firewall to unexpectedly reboot when processing a specially crafted LLDP frame sent by an unauthenticated adjacent attacker. Repeated attempts to initiate this condition …
-
Medium 5.6
PAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLI
A vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated admin on the PAN-OS CLI to read arbitrary files. The attacker must have network access to the management interface (web, SSH, console, or telnet) and successfully authenticate …
-
Medium 6.7
Cisco IOS XR Software Image Verification Bypass Vulnerability
A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass Cisco IOS XR image signature verification and load unverified software on an affected device. To exploit this vulnerability, the attacker must …
-
Medium 5.8
Cisco IOS XR Software Access Control List Bypass Vulnerability
A vulnerability in the access control list (ACL) processing in the egress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability exists because certain packets are handled incorrectly …
-
Medium 4.0
Cisco IOS XR Software Access Control List Bypass Vulnerability
A vulnerability in the hybrid access control list (ACL) processing of IPv4 packets in Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to incorrect handling of packets when a specific …
-
Medium 6.7
Cisco IOS XR Software Secure Boot Bypass Vulnerability
A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Secure Boot functionality and load unverified software on an affected device. To exploit this vulnerability, the attac…