Category
Network devices
11,291 known vulnerabilities.
11,291 results · Feed
-
Medium 6.3
A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions 7.0,…
-
High 8.1
An Improper Restriction of Excessive Authentication Attempts [CWE-307] in FortiSIEM below 7.0.0 may allow a non-privile…
-
Medium 6.2
A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through…
-
High 7.2
An access control vulnerability [CWE-284] in FortiNAC version 9.4.2 and below, version 9.2.7 and below, 9.1 all version…
-
High 7.6
A cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS version 7.2.0 through 7.2…
-
Medium 6.8
An incorrect default permission [CWE-276] vulnerability in FortiClient (Windows) versions 7.0.0 through 7.0.6 and 6.4.0…
-
Medium 6.5
A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could…
-
High 7.5
On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.
On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.
-
Medium 6.7
The privilege escalation vulnerability in the Zyxel GS1900-8 firmware version V2.70(AAHH.3) and the GS1900-8HP firmware…
-
High 7.2
The post-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.13)C0…
-
Medium 5.3
The online authentication provided by the hwKitAssistant lacks strict identity verification of applications. Successful…
-
High 7.5
The reminder module lacks an authentication mechanism for broadcasts received. Successful exploitation of this vulnerab…
-
Low 3.3
The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download fai…
-
High 7.5
The hwPartsDFR module has a vulnerability in API calling verification. Successful exploitation of this vulnerability ma…
-
High 7.5
The SDK for the MediaPlaybackController module has improper permission verification. Successful exploitation of this vu…
-
High 7.5
Integer overflow vulnerability in some phones. Successful exploitation of this vulnerability may affect service confide…
-
Critical 9.8
The facial recognition TA of some products has the out-of-bounds memory read vulnerability. Successful exploitation of …
-
Critical 9.8
The facial recognition TA of some products lacks memory length verification. Successful exploitation of this vulnerabil…
-
Critical 9.8
Lack of length check vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause …
-
High 7.5
The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability m…
-
High 7.5
The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability m…
-
High 7.5
The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability m…
-
High 7.5
The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability m…
-
High 7.5
The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability m…
-
High 7.5
The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability m…
-
Critical 9.8
A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Pa…
KEV Jun 5, 2023 -
Critical 9.8
A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 P…
KEV Jun 5, 2023 -
High 7.5
The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may af…
-
High 7.5
The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may a…
-
High 7.5
The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may a…
-
High 7.5
The window management module lacks permission verification.Successful exploitation of this vulnerability may affect con…
-
High 8.6CVE-2023-20160 EPSS 11%
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected…
-
Medium 5.4
Cisco DNA Center Software API Vulnerabilities
Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands in a restricted container as the root use…
-
Medium 6.0
Cisco Identity Services Engine Path Traversal Vulnerabilities
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform path traversal attacks on the underlying operating system to either elevate privileges to root or read arbitrary files. To exploit these vulnerab…
-
Medium 5.4
Cisco DNA Center Software API Vulnerabilities
Multiple vulnerabilities in the API of Cisco DNA Center Software could allow an authenticated, remote attacker to read information from a restricted container, enumerate user information, or execute arbitrary commands in a restricted container as the root use…
-
Medium 4.9
Cisco Identity Services Engine Arbitrary File Download Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device. These vulnerabilities are due to insuff…
-
Medium 6.0
Cisco Identity Services Engine Path Traversal Vulnerabilities
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform path traversal attacks on the underlying operating system to either elevate privileges to root or read arbitrary files. To exploit these vulnerab…
-
Medium 6.5CVE-2023-20110 Public exploit
Cisco Smart Software Manager On-Prem SQL Injection Vulnerability
A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability exists because the web-based m…
-
Medium 4.7
Cisco Business Wireless Access Points Social Login Guest User Authentication Bypass Vulnerability
A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points (APs) could allow an unauthenticated, adjacent attacker to bypass social login authentication. This vulnerability is due to a logic error wit…
-
High 8.6
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected…