Category
Network devices
11,283 known vulnerabilities.
11,283 results · Feed
-
High 7.5
Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability m…
-
High 7.5
Vulnerability of package name verification being bypassed in the Calendar app. Impact: Successful exploitation of this …
-
High 7.5
Vulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of this vulnerability will …
-
Medium 4.3
Vulnerability of file path verification being bypassed in the email module. Impact: Successful exploitation of this vul…
-
High 7.5
Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module. Impact: Successful expl…
-
Medium 6.2
Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will …
-
Medium 6.5
Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will …
-
High 7.5
Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may …
-
High 7.5
Vulnerability of improper authentication in the Iaware module. Impact: Successful exploitation of this vulnerability wi…
-
High 7.5
Permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may…
-
Critical 9.1
Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this …
-
High 7.5
Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this …
-
High 7.5
Permission control vulnerability in the clock module. Impact: Successful exploitation of this vulnerability will affect…
-
Medium 5.3
Permission verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability …
-
High 7.5
Vulnerability of starting activities in the background in the ActivityManagerService (AMS) module. Impact: Successful e…
-
High 7.5
The SystemUI module has a vulnerability in permission management. Impact: Successful exploitation of this vulnerability…
-
High 7.5
Vulnerability of defects introduced in the design process in the hwnff module. Impact: Successful exploitation of this …
-
High 7.7
Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this v…
-
High 7.5
Vulnerability of insufficient permission verification in the app management module. Impact: Successful exploitation of …
-
High 7.5
Path traversal vulnerability in the Bluetooth-based sharing module. Impact: Successful exploitation of this vulnerabili…
-
High 7.5
Use After Free (UAF) vulnerability in the underlying driver module. Impact: Successful exploitation of this vulnerabili…
-
Critical 9.1
Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this v…
-
High 7.5
Command injection vulnerability in the AccountManager module. Impact: Successful exploitation of this vulnerability may…
-
High 7.5
Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this v…
-
Critical 9.8
A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (…
-
High 8.2CVE-2024-21894 EPSS 19%
A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows a…
-
High 8.2
A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti Policy Secure allows an…
-
Medium 5.3
An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy S…
-
High 7.5
A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secu…
-
Medium 5.3
D-Link DNS-320L/DNS-320LW/DNS-327L HTTP GET Request info.cgi information disclosure
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DNS-320L, DNS-320LW and DNS-327L up to 20240403 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/info.cgi of the component H…
-
High 7.3
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Requ…
KEV Apr 11, 2024 -
Critical 9.8
D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nas_sharing.cgi of the co…
KEV Apr 11, 2024 -
Medium 6.8
TP-Link Omada ER605 Access Control Command Injection Remote Code Execution Vulnerability
TP-Link Omada ER605 Access Control Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605. Authentication is required to exploit th…
-
Medium 4.9
A vulnerability in Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a directory trave…
-
Medium 4.3
A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a CSRF attack, …
-
Medium 6.1
A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and R…
-
High 7.5
A vulnerability in the Out-of-Band (OOB) Plug and Play (PnP) feature of Cisco Nexus Dashboard Fabric Controller (NDFC) …
-
Medium 4.3
A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to learn cluster deployment info…
-
Medium 5.5
A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow a low-pr…
-
Medium 6.5
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenti…