Category
Network devices
11,298 known vulnerabilities.
11,298 results · Feed
-
High 8.5
A condition for session fixation vulnerability [CWE-384] in the session management of FortiWeb versions 6.4 all version…
-
Medium 5.0
A path traversal vulnerability [CWE-23] in the API of FortiWeb 7.0.0 through 7.0.1, 6.3.0 through 6.3.19, 6.4 all versi…
-
Medium 4.1
An improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all versions, 6.3.16 and be…
-
Medium 6.2
A relative path traversal vulnerability [CWE-23] in FortiWeb 7.0.0 through 7.0.1, 6.3.6 through 6.3.18, 6.4 all version…
-
High 8.6
An improper neutralization of special elements used in an os command ('OS Command Injection') [CWE-78] in FortiWeb 7.0.…
-
Medium 4.1
An insertion of sensitive information into log file vulnerability [CWE-532] in the FortiPortal management interface 7.0…
-
High 8.6
A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 a…
-
Medium 6.1
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenti…
-
Medium 6.1
A vulnerability in the web-based management interface of Cisco Nexus Dashboard could allow an unauthenticated, remote a…
-
Medium 5.3
A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance, formerly known as Cis…
-
Medium 5.3CVE-2023-20052 Public exploit
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG f…
-
Medium 6.0CVE-2023-20075 Public exploit
Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitra…
-
Medium 6.5CVE-2023-20009 Public exploit
A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and…
-
High 7.5
A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attac…
-
Critical 9.8CVE-2023-20032 EPSS 30%
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ …
-
Medium 5.5
A malicious user can cause log files to be written to a directory that they do not have permission to write to.
A malicious user can cause log files to be written to a directory that they do not have permission to write to.
-
High 7.8
Privilege Escalation to NT AUTHORITY\SYSTEM on the vulnerable VDA
A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual Apps and Desktops Windows VDA.
-
High 7.8
Privilege Escalation on the system running a vulnerable version of Citrix Workspace app for Windows
Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace app.
-
Low 2.7
Netgear WNDR3700v2 Web Interface denial of service
A vulnerability was found in Netgear WNDR3700v2 1.0.1.14 and classified as problematic. This issue affects some unknown processing of the component Web Interface. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit h…
-
Medium 4.7
Netgear WNDR3700v2 Web Interface command injection
A vulnerability has been found in Netgear WNDR3700v2 1.0.1.14 and classified as critical. This vulnerability affects unknown code of the component Web Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit ha…
-
Medium 5.3
Netgear WNDR3700v2 Web Management Interface denial of service
A vulnerability was found in Netgear WNDR3700v2 1.0.1.14. It has been rated as problematic. This issue affects some unknown processing of the component Web Management Interface. The manipulation leads to denial of service. The attack may be initiated remotely…
-
High 7.5
Netgear ProSAFE 24 Port 10/100 FS726TP - CWE-522: Insufficiently Protected Credentials.
An uspecified endpoint in the web server of the switch does not properly authenticate the user identity, and may allow downloading a config page with the password to the switch in clear text.
-
Medium 5.3
SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access to an erro…
-
High 7.2
Cisco IOx Application Hosting Environment Command Injection Vulnerability
A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system. This vulnerability is due to incomplete sanitization of parameters th…
-
Medium 5.3CVE-2018-7935 Public exploit
There is a vulnerability in 21.328.01.00.00 version of the E5573Cs-322. Remote attackers could exploit this vulnerabili…
-
High 7.5
The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affec…
-
High 7.5
The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this …
-
High 7.5
The bundle management module lacks permission verification in some APIs. Successful exploitation of this vulnerability …
-
High 7.5
The geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation o…
-
High 7.5
The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability …
-
Critical 9.1
The phone-PC collaboration module has a logic bypass vulnerability. Successful exploitation of this vulnerability may a…
-
High 7.5
The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to…
-
High 7.5
The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this …
-
Medium 6.5
The Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this vulnerability may affect…
-
High 7.5
The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affec…
-
Medium 6.5
The Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may affect data confidenti…
-
High 7.5
The IHwAttestationService interface has a defect in authentication. Successful exploitation of this vulnerability may a…
-
High 7.5
The AMS module has a vulnerability of lacking permission verification in APIs.Successful exploitation of this vulnerabi…
-
High 7.5
The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data i…
-
High 7.5
The multi-screen collaboration module has a privilege escalation vulnerability. Successful exploitation of this vulnera…