Category
Network devices
11,276 known vulnerabilities.
4,487 results · Clear filters · Feed
-
Medium 6.3
D-Link DAR-7000-40 resmanage.php unrestricted upload
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000-40 V31R02B1413C. Affected by this issue is some unknown functionality of the file /useratte/resmanage.php. The manipulation of the argument fi…
-
Medium 6.3
D-Link DAR-7000-40 onlineuser.php unrestricted upload
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in D-Link DAR-7000-40 V31R02B1413C. Affected by this vulnerability is an unknown functionality of the file /user/onlineuser.php. The manipulation of the argument file_upload lead…
-
Medium 6.3
D-Link DAR-7000-40 licenseauthorization.php unrestricted upload
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in D-Link DAR-7000-40 V31R02B1413C. Affected is an unknown function of the file interface/sysmanage/licenseauthorization.php. The manipulation of the argument file_upload le…
-
Medium 4.8
Cisco Secure Email and Web Manager Stored Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager could allow an authenticated, remote attacker to conduct an XSS attack against a user of the interface. This vulnerability is due to insuffi…
-
Medium 4.8
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway could al…
-
Medium 4.8
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager …
-
Medium 6.1
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager …
-
Medium 6.8
A vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an unauthenticated attack…
-
Medium 4.7
A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allo…
-
Medium 6.1
A vulnerability in the web-based management API of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an…
-
Medium 5.5
A vulnerability in Cisco AppDynamics Network Visibility Agent could allow an unauthenticated, local attacker to cause a…
-
Medium 6.2
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, Fort…
-
Medium 6.2
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, Fort…
-
Medium 5.2
An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiADC versi…
-
Medium 6.8
A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.1 through 7.2.6 and version 7.4.0…
-
Medium 6.5
A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 6.4 all versions may allow a privileged attacke…
-
Medium 6.7
An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiVoiceEntreprise version 7.0.0 throu…
-
Medium 4.7
An insufficient verification of data authenticity vulnerability [CWE-345] in Fortinet FortiOS SSL-VPN tunnel mode versi…
-
Medium 6.1
An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 throug…
-
Medium 5.0
An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7.4.1 allow…
-
Medium 6.2
The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerabili…
-
Medium 6.4
Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect avai…
-
Medium 6.8
Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect avai…
-
Medium 5.9
NULL pointer access vulnerability in the clock module Impact: Successful exploitation of this vulnerability will affect…
-
Medium 4.1
Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affe…
-
Medium 6.2
Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vulnerability will aff…
-
Medium 6.2
Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affe…
-
Medium 5.6
Out-of-bounds access vulnerability in the memory module Impact: Successful exploitation of this vulnerability will affe…
-
Medium 4.7
Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availabi…
-
Medium 4.7
Double-free vulnerability in the RSMC module Impact: Successful exploitation of this vulnerability will affect availabi…
-
Medium 6.1
Permission verification vulnerability in the system sharing pop-up module Impact: Successful exploitation of this vulne…
-
Medium 6.3
D-Link DAR-8000-10 importhtml.php deserialization
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230922. This issue affects some unknown processing of the file /importhtml.php. The manipulation of the argument sql leads to deser…
-
Medium 6.5
BIG-IP TMM tenants on VELOS and rSeries vulnerability
Under certain conditions, a data leak may occur in the Traffic Management Microkernels (TMMs) of BIG-IP tenants running on VELOS and rSeries platforms. This leak occurs randomly and cannot be deliberately triggered. If it occurs, it may leak up to 64 bytes of…
-
Medium 6.8
BIG-IP Next Central Manager vulnerability
An improper certificate validation vulnerability exists in BIG-IP Next Central Manager and may allow an attacker to impersonate an Instance Provider system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
-
Medium 6.1
BIG-IP Configuration utility XSS vulnerability
A reflected cross-site scripting (XSS) vulnerability exist in undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Tec…
-
Medium 4.4
BIG-IP NEXT CNF vulnerability
Exposure of Sensitive Information vulnerability exists in the GSLB container, which may allow an authenticated attacker with local access to view sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evalua…
-
Medium 5.9
BIG-IP SSL vulnerability
When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software version…
-
Medium 4.7
BIG-IP TMUI XSS vulnerability
A DOM-based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of…
-
Medium 5.4
D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability
D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to make unauthorized changes to device configuration on affected installations of D-Link DAP-2622 routers. Authentication is not requi…
-
Medium 6.5
NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability
NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of multiple NETGEAR routers. Aut…