Category
Network devices
11,278 known vulnerabilities.
11,278 results · Feed
-
Medium 6.2
Access permission verification vulnerability in the content sharing pop-up module Impact: Successful exploitation of th…
-
Medium 4.0
Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability m…
-
High 7.5
Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisc…
-
Critical 9.8
Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisc…
-
Critical 9.8
Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisc…
-
Medium 4.8
A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to con…
-
Medium 5.4
A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to con…
-
Critical 9.8
An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker …
-
Medium 5.3
An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to a…
-
High 8.8
An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote att…
-
High 8.2
Insufficient verification of authentication controls in EPMM prior to 12.1.0.1 allows a remote attacker to bypass authe…
-
Medium 5.0
Ivanti Docs@Work for Android, before 2.26.0 is affected by the 'Dirty Stream' vulnerability. The application fails to p…
-
Medium 6.3
D-Link DI-8100 msp_info.htm msp_info_htm command injection
A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07. This issue affects the function msp_info_htm of the file msp_info.htm. The manipulation of the argument cmd leads to command injection. The attack may be initiated remo…
-
Medium 6.3
D-Link DIR-600 soap.cgi soapcgi_main os command injection
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-600 up to 2.18. It has been rated as critical. This issue affects the function soapcgi_main of the file /soap.cgi. The manipulation of the argument service leads to os command injection. …
-
High 8.4
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an authenticated attacker with…
-
Medium 5.3
Netgear WN604 siteSurvey.php direct request
A vulnerability classified as problematic has been found in Netgear WN604 up to 20240719. Affected is an unknown function of the file siteSurvey.php. The manipulation leads to direct request. It is possible to launch the attack remotely. The exploit has been …
-
High 8.4
Memory request logic vulnerability in the memory module. Impact: Successful exploitation of this vulnerability will aff…
-
Critical 9.3
Access control vulnerability in the security verification module. Impact: Successful exploitation of this vulnerability…
-
Medium 5.5
Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnerability will affect …
-
Medium 6.2
Privilege escalation vulnerability in the account synchronisation module. Impact: Successful exploitation of this vulne…
-
Medium 6.2
Plaintext vulnerability in the Gallery search module. Impact: Successful exploitation of this vulnerability will affect…
-
Medium 6.8
Vulnerability of serialisation/deserialisation mismatch in the iAware module. Impact: Successful exploitation of this v…
-
Medium 6.5
The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70(ACGG.3) and earlier versions…
-
Medium 5.3
A misconfiguration on UniFi U6+ Access Point could cause an incorrect VLAN traffic forwarding to APs meshed to UniFi U6…
-
Critical 9.8
D-Link - CWE-294: Authentication Bypass by Capture-replay
D-Link - CWE-294: Authentication Bypass by Capture-replay
-
Critical 9.8
D-Link - CWE-288: Authentication Bypass Using an Alternate Path or Channel
D-Link - CWE-288:Authentication Bypass Using an Alternate Path or Channel
-
High 7.5
Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause De…
-
High 7.1
Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an at…
-
Medium 5.3
A vulnerability in the protocol handlers of Cisco Webex App could allow an unauthenticated, remote attacker to gain acc…
-
Medium 6.4
A vulnerability in the media retrieval functionality of Cisco Webex App could allow an unauthenticated, adjacent attack…
-
Medium 4.7
A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote…
-
Medium 6.5
A vulnerability in the web-based management interface of Cisco AsyncOS for Secure Email Gateway could allow an authenti…
-
Medium 6.5
A vulnerability in the upload module of Cisco RV340 and RV345 Dual WAN Gigabit VPN Routers could allow an authenticated…
-
High 7.5
A vulnerability in Cisco Intelligent Node (iNode) Software could allow an unauthenticated, remote attacker to hijack th…
-
Medium 4.7
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authentica…
-
High 8.8
A vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated, local attacker to ex…
-
Critical 10.0
A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unaut…
-
Critical 9.8
A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an una…
-
Medium 5.4
TP-Link TL-SG1016DE XSS
An authenticated stored cross-site scripting (XSS) exists in the TP-Link TL-SG1016DE affecting version TL-SG1016DE(UN) V7.6_1.0.0 Build 20230616, which could allow an adversary to run JavaScript in an administrator's browser. This issue was fixed in TL-SG1016…
-
High 7.3