Category
Network devices
11,278 known vulnerabilities.
4,487 results · Clear filters · Feed
-
Medium 5.2
A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.…
-
Medium 5.5
An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series firmware versions 4.32 throu…
-
Medium 6.5
DrayTek Vigor2960 mainfunction.cgi dumpSyslog 'option' directory traversal
** UNSUPPORTED WHEN ASSIGNED ** Draytek Vigor2960 v1.5.1.4 and v1.5.1.5 are vulnerable to directory traversal via the mainfunction.cgi dumpSyslog 'option' parameter allowing an authenticated attacker with access to the web management interface to delete arbit…
-
Medium 5.5
Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an au…
-
Medium 5.5
Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an au…
-
Medium 5.0
A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attac…
-
Medium 6.3
A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to …
-
Medium 6.7
A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, r…
-
Medium 4.8
A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to con…
-
Medium 5.5
A vulnerability in the web-based management interface of a small subset of Cisco IP Phones could allow an authenticated…
-
Medium 5.3
A logged in user can modify specific files that may lead to unauthorized changes in system-wide configuration settings.…
-
Medium 5.4
A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6…
-
Medium 4.1
A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 a…
-
Medium 6.2
Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC v…
-
Medium 5.3
An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 all…
-
Medium 4.4
A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an…
-
Medium 4.0
An improper access control vulnerability [CWE-284] in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007…
-
Medium 4.2
An exposure of sensitive information to an unauthorized actor [CWE-200] in FortiSIEM version 7.0.0 and before 6.7.5 may…
-
Medium 5.3
An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiMail webmail version 7.2.0…
-
Medium 5.8
An improper validation of integrity check value vulnerability [CWE-354] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7…
-
Medium 6.2
A numeric truncation error vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through …
-
Medium 6.4
Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute programs with elevated privileges if the attacker has shell access to the engine.
-
Medium 5.3
Vulnerability of input parameters being not strictly verified in the input. Successful exploitation of this vulnerabili…
-
Medium 5.5
The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could al…
-
Medium 4.0
A vulnerability in the IP geolocation rules of Snort 3 could allow an unauthenticated, remote attacker to potentially b…
-
Medium 5.0
A vulnerability in the remote access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Fire…
-
Medium 5.8
Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenti…
-
Medium 6.0
A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command inj…
-
Medium 6.8
A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepow…
-
Medium 6.1
A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 single sign-on (SSO) for remote …
-
Medium 4.0
A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unaut…
-
Medium 5.8
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticat…
-
Medium 4.0
A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat…
-
Medium 5.3
A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote atta…
-
Medium 4.7
Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected…
-
Medium 4.7
Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected…
-
Medium 4.3
A vulnerability in the CDP processing feature of Cisco ISE could allow an unauthenticated, adjacent attacker to cause a…
-
Medium 5.8
Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco…
-
Medium 5.0
Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco…
-
Medium 4.8
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software coul…