Category
Network devices
11,283 known vulnerabilities.
11,283 results · Feed
-
Low 3.4
An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet Forti…
-
High 7.5
A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 th…
-
High 8.6
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versi…
-
Medium 4.1
A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepow…
-
Medium 6.4
A Huawei data communication product has a command injection vulnerability. Successful exploitation of this vulnerabilit…
-
Medium 4.8
An improper access control vulnerability exists in a Huawei datacom product. Attackers can exploit this vulnerability t…
-
Medium 5.5
D-Link DAR-7000 workidajax.php sql injection
A vulnerability has been found in D-Link DAR-7000 up to 20231126 and classified as critical. This vulnerability affects unknown code of the file /user/inc/workidajax.php. The manipulation of the argument id leads to sql injection. The exploit has been disclos…
-
High 8.8
D-Link DIR-846 QoS POST deserialization
A vulnerability, which was classified as critical, was found in D-Link DIR-846 FW100A53DBR. This affects an unknown part of the file /HNAP1/ of the component QoS POST Handler. The manipulation of the argument smartqos_express_devices/smartqos_normal_devices l…
-
Medium 5.3
Permission management vulnerability in the module for disabling Sound Booster. Successful exploitation of this vulnerab…
-
Unscored —
Unauthorized access vulnerability in the launcher module. Successful exploitation of this vulnerability may affect serv…
-
Unscored —
Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affe…
-
High 7.5
Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affe…
-
Unscored —
Unauthorized access vulnerability in the Huawei Share module. Successful exploitation of this vulnerability may affect …
-
Unscored —
Permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect …
-
Unscored —
Vulnerability of unauthorized access to email attachments in the email module. Successful exploitation of this vulnerab…
-
Unscored —
Free broadcast vulnerability in the running management module. Successful exploitation of this vulnerability may affect…
-
Unscored —
API permission control vulnerability in the network management module. Successful exploitation of this vulnerability ma…
-
High 7.5
Vulnerability of missing permission verification for APIs in the Designed for Reliability (DFR) module. Successful expl…
-
Unscored —
Vulnerability of data verification errors in the kernel module. Successful exploitation of this vulnerability may cause…
-
Unscored —
Vulnerability of unauthorized file access in the Settings app. Successful exploitation of this vulnerability may cause …
-
Unscored —
Permission verification vulnerability in distributed scenarios. Successful exploitation of this vulnerability may affec…
-
Unscored —
Permission management vulnerability in the PMS module. Successful exploitation of this vulnerability may cause privileg…
-
High 8.8
The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass vulnerability. Successf…
-
Medium 5.9
On Arista MOS configuration of a BGP password will cause the password to be logged in clear text.
On affected platforms running Arista MOS, the configuration of a BGP password will cause the password to be logged in clear text that can be revealed in local logs or remote logging servers by authenticated users, as well as appear in clear text in the device…
-
Unscored —
Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an…
-
High 7.2
Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated at…
KEV May 1, 2025 -
Medium 4.7
A reflected XSS vulnerability allows an open redirect when the victim clicks a malicious link to an error page on Sopho…
-
Critical 9.8CVE-2023-4474 EPSS 30%
The improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C…
-
Critical 9.8CVE-2023-4473 EPSS 41%
A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 fi…
-
High 8.8CVE-2023-37928 EPSS 60%
A post-authentication command injection vulnerability in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZ…
-
High 8.8
The improper neutralization of special elements in the CGI program of the Zyxel NAS326 firmware version V5.21(AAZF.14)C…
-
Critical 9.8CVE-2023-35138 EPSS 40%
A command injection vulnerability in the “show_zysync_server_contents” function of the Zyxel NAS326 firmware version V5…
-
High 7.5
An improper authentication vulnerability in the authentication module of the Zyxel NAS326 firmware version V5.21(AAZF.1…
-
High 7.8
NETGEAR ProSAFE Network Management System Privilege Escalation Via MySQL Server
A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory. The user can then execute the JSP files under the security context of SYS…
-
Critical 9.8
NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol
NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.
-
Medium 5.5
An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.…
-
Medium 5.5
An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 …
-
Medium 5.5
An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37,…
-
High 7.5
An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel…
-
Medium 4.4
A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, U…