Category

Network devices

11,283 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

11,283 results · Feed

High 7.2

CVE-2023-46263 EPSS 82%

An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that coul…

ivanti Avalanche Network devices

Dec 19, 2023
High 7.5

CVE-2023-46803

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …

ivanti Avalanche Network devices

Dec 19, 2023
Critical 9.8

CVE-2023-46217 EPSS 36%

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …

ivanti Wavelink Network devices

Dec 19, 2023
Critical 9.8

CVE-2023-46259 EPSS 11%

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …

ivanti Avalanche Network devices

Dec 19, 2023
High 7.5

CVE-2023-46262 EPSS 83%

An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery (SSRF) …

ivanti Avalanche Network devices

Dec 19, 2023
Critical 9.8

CVE-2023-46257 EPSS 11%

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …

ivanti Avalanche Network devices

Dec 19, 2023
Medium 6.5

CVE-2023-46265

An unauthenticated could abuse a XXE vulnerability in the Smart Device Server to leak data or perform a Server-Side Req…

ivanti Avalanche Network devices

Dec 19, 2023
Critical 9.8

CVE-2023-46261 EPSS 11%

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …

ivanti Avalanche Network devices

Dec 19, 2023
Critical 9.8

CVE-2023-46216 EPSS 36%

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …

ivanti Wavelink Network devices

Dec 19, 2023
Critical 9.8

CVE-2023-46222

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …

ivanti Avalanche Network devices

Dec 19, 2023
Critical 9.8

CVE-2023-46258

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …

ivanti Avalanche Network devices

Dec 19, 2023
Critical 9.8

CVE-2023-46224

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …

ivanti Avalanche Network devices

Dec 19, 2023
High 7.2

CVE-2023-46264 EPSS 90%

An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that coul…

ivanti Avalanche Network devices

Dec 19, 2023
High 7.3

CVE-2023-46266

An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resourc…

ivanti Avalanche Network devices

Dec 19, 2023
High 7.5

CVE-2023-46260

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …

ivanti Avalanche Network devices

Dec 19, 2023
High 7.5

CVE-2023-46804

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …

ivanti Avalanche Network devices

Dec 19, 2023
Critical 9.8

CVE-2023-46225 EPSS 11%

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …

ivanti Avalanche Network devices

Dec 19, 2023
Critical 9.8

CVE-2023-41727 EPSS 36%

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …

ivanti Wavelink Network devices

Dec 19, 2023
High 7.3

CVE-2021-22962 EPSS 91%

An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resourc…

ivanti Avalanche Network devices

Dec 19, 2023
Medium 5.3

CVE-2023-44983

WordPress Aruba HiSpeed Cache Plugin <= 2.0.6 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Aruba.It Aruba HiSpeed Cache.This issue affects Aruba HiSpeed Cache: from n/a through 2.0.6.

Aruba.it Aruba HiSpeed Cache Network devices

Dec 19, 2023
High 7.5

CVE-2023-39340

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific requ…

ivanti Connect Secure Network devices

Dec 16, 2023
High 7.2

CVE-2023-41719

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker impersonating an adminis…

ivanti Connect Secure Network devices

Dec 14, 2023
High 7.0

CVE-2023-41720

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker with a foothold on an Iv…

ivanti Connect Secure Network devices

Dec 14, 2023
Low 2.7

CVE-2023-6793

PAN-OS: XML API Keys Revoked by Read-Only PAN-OS Administrator

An improper privilege management vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to revoke active XML API keys from the firewall and disrupt XML API usage.

Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices

Dec 13, 2023
Medium 4.9

CVE-2023-6791

PAN-OS: Plaintext Disclosure of External System Integration Credentials

A credential disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to obtain the plaintext credentials of stored external system integrations such as LDAP, SCP, RADIUS, TACACS+, and SNMP from the web i…

Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices

Dec 13, 2023
Medium 4.3

CVE-2023-6789

PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated read-write administrator to store a JavaScript payload using the web interface. Then, when viewed by a properly authenticated administrator, the…

Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices

Dec 13, 2023
Medium 5.5

CVE-2023-6795

PAN-OS: OS Command Injection Vulnerability in the Web Interface

An OS command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall.

Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices

Dec 13, 2023
Medium 5.5

CVE-2023-6794

PAN-OS: File Upload Vulnerability in the Web Interface

An arbitrary file upload vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and potentially execute arbitrary code with limited privileges on the f…

Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices

Dec 13, 2023
Medium 5.5

CVE-2023-6792

PAN-OS: OS Command Injection Vulnerability in the XML API

An OS command injection vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an authenticated API user to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall.

Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices

Dec 13, 2023
High 8.8

CVE-2023-6790

PAN-OS: DOM-Based Cross-Site Scripting (XSS) Vulnerability in the Web Interface

A DOM-Based cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to execute a JavaScript payload in the context of an administrator’s browser when they view a specifically crafted link to the PAN-OS web inte…

Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices

Dec 13, 2023
High 8.6

CVE-2023-44252

** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0 th…

Fortinet FortiWAN Network devices

Dec 13, 2023
High 8.1

CVE-2023-44251

** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory ('path traversal') vulnera…

Fortinet FortiWAN Network devices

Dec 13, 2023
Low 2.8

CVE-2023-47536

An improper access control vulnerability [CWE-284] in FortiOS version 7.2.0, version 7.0.13 and below, version 6.4.14 a…

Fortinet FortiOS FortiProxy Network devices

Dec 13, 2023
High 7.9

CVE-2023-48791

An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in FortiP…

Fortinet FortiPortal Network devices

Dec 13, 2023
High 8.3

CVE-2023-41678

A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1…

Fortinet FortiOS FortiPAM Network devices

Dec 13, 2023
Medium 6.5

CVE-2023-40716

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line interp…

Fortinet FortiTester Network devices

Dec 13, 2023
Medium 6.9

CVE-2023-41673

An improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low p…

Fortinet FortiADC Network devices

Dec 13, 2023
High 7.0

CVE-2023-36639

A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10,…

Fortinet FortiOS FortiProxy FortiPAM Network devices

Dec 13, 2023
Low 3.4

CVE-2023-41844

A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiS…

Fortinet FortiSandbox Network devices

Dec 13, 2023
Medium 4.9

CVE-2023-46713

An improper output neutralization for logs in Fortinet FortiWeb 6.2.0 - 6.2.8, 6.3.0 - 6.3.23, 7.0.0 - 7.0.9, 7.2.0 - 7…

Fortinet FortiWeb Network devices

Dec 13, 2023