Category
Network devices
11,283 known vulnerabilities.
11,283 results · Feed
-
High 7.2
A post-authentication command injection vulnerability in the file upload binary in Zyxel ATP series firmware versions f…
-
Medium 6.5
A null pointer dereference vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1 and USG F…
-
Medium 6.3
Vulnerability of missing authentication for critical functions in the Wi-Fi module.Successful exploitation of this vuln…
-
Critical 9.8
Script injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service con…
-
Medium 4.3
Vulnerability of improper access control in the email module.Successful exploitation of this vulnerability may affect s…
-
High 7.5
Permission control vulnerability in the calendarProvider module.Successful exploitation of this vulnerability may affec…
-
Critical 9.8
Vulnerability of incorrect service logic in the WindowManagerServices module.Successful exploitation of this vulnerabil…
-
High 7.4
Vulnerability of input data not being verified in the cellular data module.Successful exploitation of this vulnerabilit…
-
High 7.5
Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect ser…
-
Medium 5.5
Permission control vulnerability in the WindowManagerServices module.Successful exploitation of this vulnerability may …
-
High 7.5
Permission control vulnerability in the package management module.Successful exploitation of this vulnerability may aff…
-
High 7.5
Vulnerability of permission verification in the content sharing pop-up module.Successful exploitation of this vulnerabi…
-
High 7.5
Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may aff…
-
Low 3.5
Vulnerability of null references in the motor module.Successful exploitation of this vulnerability may affect availabil…
-
Critical 9.8
Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause…
-
Critical 9.1
Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availab…
-
Medium 5.3
Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features…
-
High 7.7
Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may …
-
High 7.5
Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability…
-
High 7.7
Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability…
-
Medium 6.3
Vulnerability of defects introduced in the design process in the Control Panel module.Successful exploitation of this v…
-
High 7.5
Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect …
-
High 7.5
The VerifiedBoot module has a vulnerability that may cause authentication errors.Successful exploitation of this vulner…
-
High 7.5
Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity.
-
Medium 6.2
Vulnerability of configuration defects in some APIs of the audio module.Successful exploitation of this vulnerability m…
-
Medium 6.2
Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vuln…
-
High 7.5
Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulne…
-
High 7.5
Resource reuse vulnerability in the GPU module. Successful exploitation of this vulnerability may affect service confid…
-
Critical 9.8
A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0…
KEV Oct 9, 2024 -
Medium 4.7
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiManager version …
-
Medium 4.4
An improper certificate validation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, …
-
High 7.9
An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, …
-
Medium 6.8
An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 - 9.…
-
Medium 4.3
PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication
A reflected cross-site scripting (XSS) vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript (in the context of an authenticated Captive Portal user’s browser) if a user clicks on a malicio…
-
Medium 4.3
PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect Portal
A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS software enables execution of malicious JavaScript (in the context of a user’s browser) if a user clicks on a malicious link, allowing phishi…
-
Medium 6.3
PAN-OS: Improper IP Address Verification in GlobalProtect Gateway
An improper verification vulnerability in the GlobalProtect gateway feature of Palo Alto Networks PAN-OS software enables a malicious user with stolen credentials to establish a VPN connection from an unauthorized IP address.
-
Medium 6.6
PAN-OS: Insufficient Session Expiration Vulnerability in the Web Interface
Web sessions in the management interface in Palo Alto Networks PAN-OS software do not expire in certain situations, making it susceptible to unauthorized access.
-
Medium 6.8
PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated read-write administrator to store a JavaScript payload using the web interface on Panorama appliances. This enables the impersonation of another…
-
High 7.5
BIG-IP PEM vulnerability
When a BIG-IP PEM classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. This issue affects classification engines using signatures released between 09-08-2022 and 02…
-
High 7.5
NGINX HTTP/3 QUIC vulnerability
When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker processes to terminate. Note: The HTTP/3 QUIC module is not enabled by default and is considered experimental. For more information, refer t…