Category
Network devices
11,298 known vulnerabilities.
11,298 results · Feed
-
Medium 6.5
Junos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processed
A Missing Release of Memory after Effective Lifetime vulnerability in Flexible PIC Concentrator (FPC) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker from the same shared physical or logical network, to cause a heap memory leak and l…
-
Medium 5.9
Junos OS Evolved: The kernel might restart in a BGP scenario where "bgp auto-discovery" is enabled and such a neighbor flaps
A Use After Free vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). In a Non Stop Routing (NSR) scenario, an unexpected kernel restart might be observed if "bg…
-
Critical 9.8
A vulnerable HTTP Basic Authentication process in TP-Link routers, Archer C5 and WR710N-V1, is susceptible to either a DoS or an arbitrary code execution via any interface.
In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service can be sent a crafted packet that causes a heap overflow. This can result in either a DoS (by crashing the httpd process…
-
High 7.5
The strcmp function in TP-Link routers, Archer C5 and WR710N-V1, used for checking credentials in httpd, is susceptible to a side-channel attack.
TP-Link routers, Archer C5 and WR710N-V1, using the latest software, the strcmp function used for checking credentials in httpd, is susceptible to a side-channel attack. By measuring the response time of the httpd process, an attacker could guess each byte of…
-
Medium 5.4
A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could all…
-
High 8.6
A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, whi…
-
Medium 6.5
A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which…
-
Medium 6.5
A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, …
-
High 8.2
An improper check for unusual or exceptional conditions in the HTTP request processing function of Zyxel GS1920-24v2 fi…
-
High 7.5
The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this…
-
High 7.5
The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect …
-
High 7.5
The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful…
-
High 7.5
The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system avail…
-
Medium 6.5
The Bluetooth AVRCP module has a vulnerability that can lead to DoS attacks.Successful exploitation of this vulnerabili…
-
High 7.5
The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in o…
-
High 7.5
The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in o…
-
Medium 6.0
An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below VDOM creation componen…
-
High 8.6
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC versi…
-
Medium 5.3
An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability [CWE-113] In For…
-
Medium 6.6
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiPortal versions 6.0.0 thr…
-
High 7.6
Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CW…
-
Critical 9.3
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0…
KEV Dec 13, 2022 -
High 7.5
Huawei Aslan Children's Watch has an improper input validation vulnerability. Successful exploitation may cause the wat…
-
Medium 6.5
There is a denial of service vulnerability in the Wi-Fi module of the HUAWEI WS7100-20 Smart WiFi Router.Successful exp…
-
Medium 5.5
Huawei Aslan Children's Watch has an improper authorization vulnerability. Successful exploit could allow the attacker …
-
High 7.8
Huawei Aslan Children's Watch has a path traversal vulnerability. Successful exploitation may allow attackers to access…
-
Medium 6.5
There is an insufficient authentication vulnerability in some Huawei band products. Successful exploit could allow the …
-
High 7.5
Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute in version 22.3R1
An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service (DoS). If a BGP update message is received over an …
-
Medium 5.3
A DNS misconfiguration was found in Zyxel NBG7510 firmware versions prior to V1.00(ABZY.3)C0, which could allow an unau…
-
High 7.5
Some smartphones have the input validation vulnerability. Successful exploitation of this vulnerability may affect data…
-
Critical 9.8
A thread security vulnerability exists in the authentication process. Successful exploitation of this vulnerability may…
-
Critical 9.8
The kernel module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may cause memo…
-
Critical 9.8
Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause privilege escalatio…
-
Unscored —
The application management module has a vulnerability in permission verification. Successful exploitation of this vulne…
-
High 7.5
The power consumption module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may…
-
Critical 9.8
Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause sy…
-
Medium 5.3
The sensor privacy module has an authentication vulnerability. Successful exploitation of this vulnerability may cause …
-
High 7.5
The contacts component has a free (undefined) provider vulnerability. Successful exploitation of this vulnerability may…
-
Critical 9.8
Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause sy…
-
High 7.5
The TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may …