Category
Network devices
11,283 known vulnerabilities.
11,283 results · Feed
-
Unscored —
Vulnerability of improper permission management in the displayengine module. Successful exploitation of this vulnerabil…
-
Unscored —
The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super…
-
Unscored —
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
-
Unscored —
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
-
Unscored —
The Watchkit has a risk of unauthorized file access.Successful exploitation of this vulnerability may affect confidenti…
-
Medium 6.3CVE-2023-5154 EPSS 15%
D-Link DAR-8000 changelogo.php unrestricted upload
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument file_upload leads to u…
-
Medium 6.3
D-Link DAR-8000 querysql.php sql injection
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-8000 up to 20151231. This affects an unknown part of the file /Tool/querysql.php. The manipulation leads to sql injection. It is possible to initiate th…
-
Medium 6.3
D-Link DAR-7000/DAR-8000 importexport.php sql injection
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected by this issue is some unknown functionality of the file /importexport.php. The manipulation of the argum…
-
Medium 6.3CVE-2023-5151 EPSS 81%
D-Link DAR-8000 autheditpwd.php sql injection
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in D-Link DAR-8000 up to 20151231. Affected by this vulnerability is an unknown functionality of the file /autheditpwd.php. The manipulation of the argument hid_id leads to sql i…
-
Medium 6.3CVE-2023-5150 EPSS 23%
D-Link DAR-7000/DAR-8000 web.php unrestricted upload
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /useratte/web.php. The manipulation of the argument file_upload leads to unrestri…
-
Medium 6.3CVE-2023-5149 EPSS 21%
D-Link DAR-7000 userattestation.php unrestricted upload
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. This issue affects some unknown processing of the file /useratte/userattestation.php. The manipulation of the argument web_img leads to…
-
Medium 6.3CVE-2023-5148 EPSS 31%
D-Link DAR-7000/DAR-8000 uploadfile.php unrestricted upload
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231. It has been declared as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument file_upload …
-
Medium 6.3CVE-2023-5147 EPSS 26%
D-Link DAR-7000 updateos.php unrestricted upload
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been classified as critical. This affects an unknown part of the file /sysmanage/updateos.php. The manipulation of the argument 1_file_upload leads to unrestri…
-
Medium 6.3CVE-2023-5146 EPSS 32%
D-Link DAR-7000/DAR-8000 updatelib.php unrestricted upload
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231 and classified as critical. Affected by this issue is some unknown functionality of the file /sysmanage/updatelib.php. The manipulation of the argument fi…
-
Medium 6.3CVE-2023-5145 EPSS 34%
D-Link DAR-7000 licence.php unrestricted upload
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-7000 up to 20151231 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation of the argument file_u…
-
Medium 6.3
D-Link DAR-7000/DAR-8000 updateos.php unrestricted upload
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /sysmanage/updateos.php. The manipulation of the argument file_upload lead…
-
Medium 6.3
D-Link DAR-7000 webmailattach.php Privilege Escalation
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. The manipulation of the argument table_name lea…
-
Critical 9.8
Authentication Bypass in D-Link D-View 8
Use of a static key to protect a JWT token used in user authentication can allow an for an authentication bypass in D-Link D-View 8 v2.0.1.28
-
Medium 4.3
A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) message processing feature of Cisco Jabber cou…
-
Medium 5.8
A vulnerability in the classic access control list (ACL) compression feature of Cisco IOS XR Software could allow an un…
-
Medium 5.8
A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR…
-
Medium 4.3
A vulnerability in the Connectivity Fault Management (CFM) feature of Cisco IOS XR Software could allow an unauthentica…
-
Medium 6.7
A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to inst…
-
Medium 5.7
A vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated, local attacker to exec…
-
Medium 5.5CVE-2023-3280 Public exploit
Cortex XDR Agent: Local Windows User Can Disable the Agent
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent.
-
Low 3.6
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClientEMS versions 7.0.0 …
-
High 7.4
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface…
-
High 7.3
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in Forti…
-
Medium 5.2
A cleartext storage of sensitive information vulnerability [CWE-312] in FortiTester 2.3.0 through 7.2.3 may allow an at…
-
Medium 5.0
A use of hard-coded credentials vulnerability [CWE-798] in FortiTester 2.3.0 through 7.2.3 may allow an attacker who ma…
-
Medium 4.2
An improper privilege management vulnerability [CWE-269] in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.…
-
Medium 6.5
An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interp…
-
Medium 6.5
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface…
-
High 7.1
A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.…
-
Medium 5.3
A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of …
-
Medium 4.2
A exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.5 allows a…
-
Medium 5.2
An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interp…
-
Medium 4.9
A vulnerability in the ERS API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on th…
-
Medium 6.0
A vulnerability in the Embedded Service Router (ESR) of Cisco ISE could allow an authenticated, local attacker to read,…
-
High 7.5CVE-2023-30800 Public exploit
MikroTik RouterOS Web Interface Heap Corruption
The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result, the web interface crashes and is immed…