Category
Network devices
11,283 known vulnerabilities.
11,283 results · Feed
-
Medium 5.3
PAN-OS: Predefined Decryption Exclusions Does Not Work as Intended
An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption Exclusions from functioning as intended. This can cause traffic destined for domains that are not specified in Predefined Decryption Exclusions t…
-
High 7.5
PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled
A packet processing mechanism in Palo Alto Networks PAN-OS software enables a remote attacker to reboot hardware-based firewalls. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewal…
-
High 7.5
PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets
A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receiving Windows New Technology LAN Manager (NTLM) packets from Windows servers. Repeated attacks eventually cause the firewall to enter maintenan…
-
High 7.4
PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)
A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine (CIE) agents enables modification of User-ID groups. This impacts user access to network resources where users may be inappropriately denied or allowe…
-
High 7.5
PAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets
A memory leak exists in Palo Alto Networks PAN-OS software that enables an attacker to send a burst of crafted packets through the firewall that eventually prevents the firewall from processing traffic. This issue applies only to PA-5400 Series devices that a…
-
High 7.8
An external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3 and below, version 7.0.…
-
High 8.6
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
Medium 6.1
A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.1 and below, version 7.2.7 …
-
Medium 6.3
A improper neutralization of special elements used in a template engine [CWE-1336] in FortiManager versions 7.4.1 and b…
-
High 8.6
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
Medium 6.5
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet…
-
High 7.5
A insufficiently protected credentials vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2…
-
Medium 5.8
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox…
-
Medium 6.5
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbo…
-
High 7.9
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox…
-
Critical 9.4
An improper control of generation of code ('code injection') in Fortinet FortiClientLinux version 7.2.0, 7.0.6 through …
-
Medium 5.0
An exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least version at least 7.4.0 throu…
-
High 7.4CVE-2023-49074 EPSS 13%
A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Po…
-
High 8.1
A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO…
-
High 7.5
A memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit …
-
High 8.1
A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO…
-
High 7.2
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC135…
-
High 7.2
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC135…
-
High 7.2
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC135…
-
High 7.2
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC135…
-
High 7.2
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC135…
-
High 7.2
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC135…
-
High 7.2
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC135…
-
High 7.2
A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC135…
-
High 7.5
Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect s…
-
High 7.5
Input verification vulnerability in the log module. Impact: Successful exploitation of this vulnerability can affect in…
-
High 7.5
Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect conf…
-
Medium 6.3
Vulnerability of input parameters being not strictly verified in the RSMC module. Impact: Successful exploitation of th…
-
High 7.5
Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect…
-
Medium 6.2
Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect…
-
Medium 6.5
Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may aff…
-
High 7.4
Race condition vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability will affect ava…
-
High 7.5
Input verification vulnerability in the power module. Impact: Successful exploitation of this vulnerability will affect…
-
Medium 5.3
Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability m…
-
High 7.5
Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability m…