Category
Network devices
11,290 known vulnerabilities.
11,290 results · Feed
-
Unscored —
Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio dev…
-
Unscored —
Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability …
-
Unscored —
Deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect availabilit…
-
Unscored —
Vulnerability of insecure signatures in the ServiceWifiResources module. Successful exploitation of this vulnerability …
-
Unscored —
Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause Os…
-
Unscored —
Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulner…
-
Unscored —
Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulner…
-
Unscored —
DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM…
-
High 8.8
An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disru…
-
High 7.1
A previously generated artifact by an administrator could be accessed by an attacker. The contents of this artifact cou…
-
Medium 6.8CVE-2023-32562 EPSS 46%
An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that coul…
-
High 8.8
An unauthenticated attacker could achieve the code execution through a RemoteControl server.
-
Medium 6.8CVE-2023-32564 EPSS 44%
An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that coul…
-
Medium 6.3
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resourc…
-
Medium 6.3
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resourc…
-
Medium 6.5
Ivanti Avalanche decodeToMap XML External Entity Processing. Fixed in version 6.4.1.236
-
Critical 9.0CVE-2023-35085 Public exploit
An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Mo…
-
High 8.3
A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Sw…
-
Medium 6.5
A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain re…
-
Medium 6.5
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, re…
-
Medium 5.8
A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) coul…
-
Critical 9.1
A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow …
-
Medium 6.1
A vulnerability in the web-based management interface of Cisco Small Business SPA500 Series IP Phones could allow an un…
-
Medium 5.8
A vulnerability in web-based management interface of Cisco SPA500 Series Analog Telephone Adapters (ATAs) could allow a…
-
Medium 4.4
A vulnerability in the privilege management functionality of all Cisco BroadWorks server types could allow an authentic…
-
Medium 5.8
A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthe…
-
Medium 5.4
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an…
-
High 7.2
A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) a…
KEV Jul 31, 2023 -
Medium 5.4
BIG-IP Configuration utility vulnerability
A cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical…
-
Medium 4.3
BIG-IP and BIG-IQ iControl SOAP vulnerability
An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending undisclosed requests. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
-
High 7.8
BIG-IP Edge Client for macOS vulnerability
The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
-
High 7.5
BIG-IP Configuration utility vulnerability
A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End o…
-
High 7.1
BIG-IP Edge Client for Windows and macOS vulnerability
An insufficient verification of data vulnerability exists in BIG-IP Edge Client for Windows and macOS that may allow an attacker to modify its configured server list. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluate…
-
Medium 4.4
F5OS-A vulnerability
Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
-
Medium 6.0
BIG-IP FIPS HSM password vulnerability CVE-2023-3470
Specific F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards generate a deterministic password for the Crypto User account. The predictable nature of the password allows an authenticated user with TMSH access to the BIG-IP system, or anyone with physical a…
-
Critical 9.8
A stack-based overflow vulnerability [CWE-124] in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3…
-
Critical 10.0
An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or r…
KEV Jul 25, 2023 -
High 8.1
An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash. Update …
-
High 8.0
Privilege Escalation to root administrator (nsroot)
-
High 8.3
Reflected Cross-Site Scripting (XSS)