Category
Network devices
11,278 known vulnerabilities.
4,487 results · Clear filters · Feed
-
Medium 5.7
A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series fir…
-
Medium 6.5
A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG F…
-
Medium 6.3
Vulnerability of missing authentication for critical functions in the Wi-Fi module.Successful exploitation of this vuln…
-
Medium 4.3
Vulnerability of improper access control in the email module.Successful exploitation of this vulnerability may affect s…
-
Medium 5.5
Permission control vulnerability in the WindowManagerServices module.Successful exploitation of this vulnerability may …
-
Medium 5.3
Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features…
-
Medium 6.3
Vulnerability of defects introduced in the design process in the Control Panel module.Successful exploitation of this v…
-
Medium 6.2
Vulnerability of configuration defects in some APIs of the audio module.Successful exploitation of this vulnerability m…
-
Medium 6.2
Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vuln…
-
Medium 4.7
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiManager version …
-
Medium 4.4
An improper certificate validation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, …
-
Medium 6.8
An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 - 9.…
-
Medium 4.3
PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication
A reflected cross-site scripting (XSS) vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript (in the context of an authenticated Captive Portal user’s browser) if a user clicks on a malicio…
-
Medium 4.3
PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Portal
A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript (in the context of a user’s browser) if a user clicks on a malicious link, allowing phishi…
-
Medium 6.3
PAN-OS: Improper IP Address Verification in GlobalProtect Gateway
An improper verification vulnerability in the GlobalProtect gateway feature of Palo Alto Networks PAN-OS software enables a malicious user with stolen credentials to establish a VPN connection from an unauthorized IP address.
-
Medium 6.6
PAN-OS: Insufficient Session Expiration Vulnerability in the Web Interface
Web sessions in the management interface in Palo Alto Networks PAN-OS software do not expire in certain situations, making it susceptible to unauthorized access.
-
Medium 6.8
PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated read-write administrator to store a JavaScript payload using the web interface on Panorama appliances. This enables the impersonation of another…
-
Medium 6.2
F5OS vulnerability
When LDAP remote authentication is configured on F5OS, a remote user without an assigned role will be incorrectly authorized. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
-
Medium 5.5
F5OS QKView utility vulnerability
A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read files outside the QKView directory. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
-
Medium 6.0
BIG-IP Appliance mode iAppsLX vulnerability
When running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Appliance mode restrictions utilizing iAppsLX templates on a BIG-IP system. Note: Software versions which have reached End of Technical Support (E…
-
Medium 6.7
BIG-IP and BIG-IQ secure copy vulnerability
BIG-IP or BIG-IQ Resource Administrators and Certificate Managers who have access to the secure copy (scp) utility but do not have access to Advanced shell (bash) can execute arbitrary commands with a specially crafted command string. This vulnerability is du…
-
Medium 4.3
Netgear R7000 Web Management Interface debuginfo.htm information disclosure
A vulnerability was found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic. Affected by this issue is some unknown functionality of the file /debuginfo.htm of the component Web Management Interface. The manipulation leads to information disc…
-
Medium 4.3
Netgear R7000 Web Management Interface currentsetting.htm information disclosure
A vulnerability has been found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /currentsetting.htm of the component Web Management Interface. The manipulation leads to …
-
Medium 5.8
A vulnerability with the access control list (ACL) management within a stacked switch configuration of Cisco Business 2…
-
Medium 4.8
A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote at…
-
Medium 4.7CVE-2024-0921 EPSS 38%
D-Link DIR-816 A2 Web Interface setDeviceSettings os command injection
A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setDeviceSettings of the component Web Interface. The manipulation of the argument statusc…
-
Medium 5.3
Junos OS: SRX Series and EX Series: J-Web - unauthenticated access to temporary files containing sensitive information
A Missing Authentication for Critical Function vulnerability combined with a Generation of Error Message Containing Sensitive Information vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an unauthenticated, network-based …
-
Medium 5.3
D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of th…
KEV Jun 25, 2025 -
Medium 5.3CVE-2024-0717 EPSS 18%
D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure
A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, D…
-
Medium 5.5
SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sf…
-
Medium 6.8
A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance install…
-
Medium 6.5
A vulnerability in the web-based management interface of the Cisco WAP371 Wireless-AC/N Dual Radio Access Point (AP) wi…
-
Medium 6.0
A vulnerability in the application CLI of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager cou…
-
Medium 6.5
A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remot…
-
Medium 6.5
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Netw…
-
Medium 4.8
A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remot…
-
Medium 4.8
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authentica…
-
Medium 4.8
A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform and Cisco Broad…
-
Medium 4.4
Vulnerability of permission verification for APIs in the DownloadProviderMain module. Impact: Successful exploitation o…
-
Medium 5.3
Unauthorized file access vulnerability in the wallpaper service module. Successful exploitation of this vulnerability m…