Category
Network devices
11,278 known vulnerabilities.
4,487 results · Clear filters · Feed
-
Medium 5.5
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authentica…
-
Medium 5.4
A vulnerability in the tenant security implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an authen…
-
Medium 6.0
A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credential…
-
Medium 6.1
A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM…
-
Medium 6.8
A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthen…
-
Medium 5.9
A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attack…
-
Medium 5.6
A vulnerability in auxiliary asynchronous port (AUX) functions of Cisco IOS XE Software could allow an authenticated, l…
-
Medium 6.5
A vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an authenticated, remote attacker to elevat…
-
Medium 6.0
A vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE Software could allow an authentic…
-
Medium 5.5
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to acc…
-
Medium 5.8
A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, rem…
-
Medium 4.7
A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an…
-
Medium 4.3
A vulnerability in the web-based management interface of Cisco Catalyst Center, formerly Cisco DNA Center, could allow …
-
Medium 4.9
An improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in SonicWall Email Securi…
-
Medium 5.3
An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions…
-
Medium 4.3
PAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability Loss
An improper authorization vulnerability in Palo Alto Networks Panorama software enables an authenticated read-only administrator to upload files using the web interface and completely fill one of the disk partitions with those uploaded files, which prevents t…
-
Medium 4.5CVE-2024-2432 Public exploit
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges. However, execution requires that the local user is able to successfully exploit a race …
-
Medium 5.5
GlobalProtect App: Local User Can Disable GlobalProtect
An issue in the Palo Alto Networks GlobalProtect app enables a non-privileged user to disable the GlobalProtect app in configurations that allow a user to disable GlobalProtect with a passcode.
-
Medium 4.3
A vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker t…
-
Medium 6.5
A vulnerability in the Secure Copy Protocol (SCP) and SFTP feature of Cisco IOS XR Software could allow an authenticate…
-
Medium 5.8
A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR…
-
Medium 5.8
A vulnerability in the access control list (ACL) processing on Pseudowire interfaces in the ingress direction of Cisco …
-
Medium 5.3
A vulnerability in the DHCP version 4 (DHCPv4) server feature of Cisco IOS XR Software could allow an unauthenticated, …
-
Medium 6.7
An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and below, and v…
-
Medium 6.3
A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged atta…
-
Medium 6.5
Server-Side Request Forgery (SSRF)
Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP.
-
Medium 6.5
A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote a…
-
Medium 5.4
A vulnerability in the web-based management interface of Cisco AppDynamics Controller could allow an authenticated, rem…
-
Medium 4.4
A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authentic…
-
Medium 6.5
A vulnerability in the web-based user interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could all…
-
Medium 6.5
A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless APs cou…
-
Medium 6.2
A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker t…
-
Medium 6.1
Cross-Site Scripting vulnerability in TP-Link Archer AX50
Cross-Site Scripting (XSS) vulnerability stored in TP-Link Archer AX50 affecting firmware version 1.0.11 build 2022052. This vulnerability could allow an unauthenticated attacker to create a port mapping rule via a SOAP request and store a malicious JavaScrip…
-
Medium 5.3CVE-2024-20328 EPSS 85%
ClamAV VirusEvent File Processing Command Injection Vulnerability
A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file names. A local attacker could exploit this…
-
Medium 6.6
A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software cou…
-
Medium 5.8
A vulnerability in the access control list (ACL) programming for port channel subinterfaces of Cisco Nexus 3000 and 900…
-
Medium 5.3
A vulnerability in system resource management in Cisco UCS 6400 and 6500 Series Fabric Interconnects that are in Inters…
-
Medium 6.3
Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specifi…
-
Medium 6.4
A null pointer dereference in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12,…
-
Medium 5.1
A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local atta…