Category
Network devices
11,298 known vulnerabilities.
11,298 results · Feed
-
Unscored —
The InputMethod module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this v…
-
Unscored —
The SystemUI module has a vulnerability of repeated app restart due to improper parameters. Successful exploitation of …
-
Unscored —
The pgmng module has a vulnerability in serialization/deserialization. Successful exploitation of this vulnerability ma…
-
Unscored —
The Bluetooth module has a heap out-of-bounds write vulnerability. Successful exploitation of this vulnerability can ca…
-
Unscored —
The Always On Display (AOD) has a path traversal vulnerability in theme files. Successful exploitation of this vulnerab…
-
High 7.5
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability.
-
High 7.5
Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system pani…
-
Unscored —
The facial recognition module has a vulnerability in input parameter verification. Successful exploitation of this vuln…
-
Unscored —
The Bluetooth module has an authentication bypass vulnerability in the pairing process. Successful exploitation of this…
-
Unscored —
The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect confid…
-
Unscored —
The BatteryHealthActivity has a redirection vulnerability. Successful exploitation of this vulnerability by a malicious…
-
High 7.5
The HUAWEI Messaging app has a vulnerability of unauthorized file access. Successful exploitation of this vulnerability…
-
Unscored —
Some products have the double fetch vulnerability. Successful exploitation of this vulnerability may cause denial of se…
-
Unscored —
The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of t…
-
Unscored —
The facial recognition module has a vulnerability in file permission control. Successful exploitation of this vulnerabi…
-
Critical 9.8
Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause kernel privilege es…
-
Critical 9.1
The control component has a spoofing vulnerability. Successful exploitation of this vulnerability may affect confidenti…
-
Unscored —
The MediaProvider module has a vulnerability in permission verification. Successful exploitation of this vulnerability …
-
Unscored —
The Bluetooth module has a heap out-of-bounds read vulnerability. Successful exploitation of this vulnerability can cau…
-
Critical 9.1
The MediaProvider module has a vulnerability of unauthorized data read. Successful exploitation of this vulnerability m…
-
High 7.2
A vulnerability, which was classified as critical, was found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. Affected is an un…
-
High 7.2
A vulnerability, which was classified as critical, has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. This issue a…
-
High 7.2
A vulnerability has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 and classified as critical. Affected by this vul…
-
High 7.8
Cisco IOS XE SD-WAN Software Command Injection Vulnerability
A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges. This vulnerability is due to insufficient input validation by the system CLI. An attacker with priv…
-
Medium 6.1
Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability
A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time an…
-
High 8.6
Cisco IOS XE Software Virtual Fragmentation Reassembly Denial of Service Vulnerability
A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly (VFR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is…
-
Medium 6.5
Cisco IOS XE Software Web UI Path Traversal Vulnerability
A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform a directory traversal and access resources that are outside the filesystem mountpoint of the web UI. This vulnerability is due to an insufficient s…
-
Medium 5.3
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability
A vulnerability in the deterministic random bit generator (DRBG), also known as pseudorandom number generator (PRNG), in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco ASA 5506-X, ASA 5508-X, and A…
-
High 8.0
Cisco DNA Center Privilege Escalation Vulnerability
A vulnerability in the management API of Cisco DNA Center could allow an authenticated, remote attacker to elevate privileges in the context of the web-based management interface on an affected device. This vulnerability is due to the unintended exposure of s…
-
Medium 6.8
Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IPv6 DHCP (DHCPv6) Client Denial of Service Vulnerability
A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause …
-
Medium 6.5
Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF …
-
High 7.8
A vulnerability in the Cisco IOx application hosting subsystem of Cisco IOS XE Software could allow an authenticated, l…
-
Medium 6.8
Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerability
A vulnerability in the access point (AP) joining process of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, remote attacker to cause a denial…
-
High 7.4
Cisco IOS XE Software for Wireless LAN Controllers HTTP Client Profiling Denial of Service Vulnerability
A vulnerability in the HTTP-based client profiling feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is…
-
Medium 4.6
Cisco Access Point Software Command Injection Vulnerability
A vulnerability in Cisco access points (AP) software could allow an authenticated, local attacker to inject arbitrary commands and execute them with root privileges. This vulnerability is due to improper input validation of commands that are issued from a wir…
-
Medium 6.5
Cisco Access Point Software Denial of Service Vulnerability
A vulnerability in the management CLI of Cisco access point (AP) software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of commands s…
-
High 8.6
Cisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server Denial of Service Vulnerability
A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to insufficient validation…
-
Medium 4.3
Cisco DNA Center Information Disclosure Vulnerability
A vulnerability in the implementation of the Cisco Network Plug-and-Play (PnP) agent of Cisco DNA Center could allow an authenticated, remote attacker to view sensitive information in clear text. The attacker must have valid low-privileged user credentials. T…
-
Medium 4.4
Cisco IOS XE Software Privilege Escalation Vulnerability
A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker to gain root level privileges on an affected device. This vulnerability is due to insufficient memory protection in the Meraki onboarding fe…
-
High 7.4
Cisco Access Point Software Association Request Denial of Service Vulnerability
A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 …