Category
Network devices
11,278 known vulnerabilities.
11,278 results · Feed
-
High 8.2
Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version 20…
-
High 8.8
An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Iv…
-
High 8.8
DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local au…
-
High 7.8
An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 (10.1…
-
High 7.2
An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a rem…
KEV Sep 13, 2024 -
Medium 4.6
An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7,…
-
Medium 6.4
AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.…
-
Medium 5.5
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiClientE…
-
Low 3.4
An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF…
-
Low 3.9
A cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting FortiClient VPN iOS 7.2 all ve…
-
Medium 4.7
An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer version 7.4.1 and before 7…
-
Medium 6.9
An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortin…
-
Medium 4.2
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.…
-
Medium 4.6
An improper access control vulnerability [CWE-284] in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may al…
-
Critical 9.8
**UNSUPPORTED WHEN ASSIGNED** A command injection vulnerability in the export-cgi program of Zyxel NAS326 firmware vers…
-
Medium 5.3
An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web auth…
-
Medium 5.3
D-Link DNS-320 Web Management Interface discovery.cgi information disclosure
A vulnerability, which was classified as problematic, was found in D-Link DNS-320 2.02b01. This affects an unknown part of the file /cgi-bin/discovery.cgi of the component Web Management Interface. The manipulation leads to information disclosure. It is possi…
-
Low 3.7
D-Link DNS-320 Web Management Interface widget_api.cgi information disclosure
A vulnerability, which was classified as problematic, has been found in D-Link DNS-320 2.02b01. Affected by this issue is some unknown functionality of the file /cgi-bin/widget_api.cgi of the component Web Management Interface. The manipulation of the argumen…
-
Medium 6.1
ClamAV Privilege Handling Escalation Vulnerability
A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an authe…
-
Medium 4.0
ClamAV Memory Handling DoS
A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an unauthe…
-
Medium 4.3
Cisco Expressway Edge Improper Authorization Vulnerability
A vulnerability in Cisco Expressway Edge (Expressway-E) could allow an authenticated, remote attacker to masquerade as another user on an affected system. This vulnerability is due to inadequate authorization checks for Mobile and Remote Access (MRA) users. A…
-
Medium 5.5
Cisco Duo Epic for Hyperdrive Information Disclosure Vulnerability
A vulnerability in Cisco Duo Epic for Hyperdrive could allow an authenticated, local attacker to view sensitive information in cleartext on an affected system. This vulnerability is due to improper storage of an unencrypted registry key. A low-privileged atta…
-
Medium 6.0
Cisco Identity Services Engine Command Injection Vulnerability
A vulnerability in specific CLI commands in Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability…
-
High 7.5
A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive in…
-
Critical 9.8
A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an …
KEV Mar 31, 2025 -
Medium 6.2
Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may …
-
Medium 5.1
Access permission verification vulnerability in the ringtone setting module Impact: Successful exploitation of this vul…
-
Medium 4.1
Page table protection configuration vulnerability in the trusted firmware module Impact: Successful exploitation of thi…
-
Medium 4.4
Access control vulnerability in the camera framework module Impact: Successful exploitation of this vulnerability may a…
-
Medium 5.5
Access permission verification vulnerability in the camera driver module Impact: Successful exploitation of this vulner…
-
Medium 4.0
Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this …
-
Medium 5.5
Access permission verification vulnerability in the WMS module Impact: Successful exploitation of this vulnerability ma…
-
Medium 6.1
Directory traversal vulnerability in the cust module Impact: Successful exploitation of this vulnerability will affect …
-
Medium 5.1
Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of…
-
Medium 6.2
Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability wil…
-
Medium 4.3
Access control vulnerability in the SystemUI module Impact: Successful exploitation of this vulnerability may affect se…
-
Medium 4.0
Permission control vulnerability in the software update module. Impact: Successful exploitation of this vulnerability m…
-
Critical 9.8CVE-2024-7261 EPSS 11%
The improper neutralization of special elements in the parameter "host" in the CGI program of Zyxel NWA1123ACv3 firmwar…
-
Medium 6.1
A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmwa…
-
High 7.2
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, U…