Category
Network devices
11,298 known vulnerabilities.
11,298 results · Feed
-
High 7.5
The ProfileSDK has defects introduced in the design process. Successful exploitation of this vulnerability may affect s…
-
High 7.5
Some smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause sy…
-
Critical 9.8
Fingerprint calibration has a vulnerability of lacking boundary judgment. Successful exploitation of this vulnerability…
-
High 7.5
The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect s…
-
Medium 5.3
The HAware module has a function logic error. Successful exploitation of this vulnerability will affect the account rem…
-
Critical 9.8
Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause sys…
-
Critical 9.8
Some smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause sys…
-
High 7.5
The Wi-Fi module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affe…
-
High 7.5
The system service has a vulnerability that causes incorrect return values. Successful exploitation of this vulnerabili…
-
High 7.5
The system tool has inconsistent serialization and deserialization. Successful exploitation of this vulnerability will …
-
Medium 5.5
Some smartphones have authentication-related (including session management) vulnerabilities as the setup wizard is bypa…
-
High 7.5
The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized…
-
High 7.5
The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability…
-
Critical 9.8
Unauthenticated remote arbitrary code execution
Unauthenticated remote arbitrary code execution
KEV Dec 13, 2022 -
High 8.1
A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware coul…
-
Medium 5.3
A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmwa…
-
Medium 5.3
Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter…
-
Medium 5.3
Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter…
-
Medium 5.3
A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware…
-
Medium 5.3
Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Telep…
-
Medium 5.3
Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Telep…
-
High 8.7
Appliance mode iControl REST vulnerability
In all versions of BIG-IP, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to…
-
High 8.8
iControl SOAP vulnerability
In all versions, BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
-
Medium 5.5
tdpServer of TP-Link RE300 V1 improperly processes its input, which may allow an attacker to cause a denial-of-service …
-
Medium 5.1
An improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability in Fortinet Forti…
-
Medium 5.1
Multiple instances of improper input validation vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0 through…
-
Low 3.4
Improper neutralization of input during web page generation [CWE-79] in FortiSOAR 7.0.0 through 7.0.3 and 7.2.0 may all…
-
Low 3.6
An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.…
-
Low 3.8
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiOS 6.0.7 - 6.0.…
-
High 7.7
An authentication bypass by assumed-immutable data vulnerability [CWE-302] in the FortiOS SSH login component 7.2.0, 7.…
-
Medium 6.5
TP-Link TL-WR740N ARP resource consumption
A vulnerability classified as problematic has been found in TP-Link TL-WR740N. Affected is an unknown function of the component ARP Handler. The manipulation leads to resource consumption. The attack needs to be done within the local network. The exploit has …
-
Medium 4.7
A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through…
-
Medium 4.3
A post-auth read-only SQL injection vulnerability allows users to read non-sensitive configuration database contents in…
-
High 8.8
A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall rele…
-
High 7.2
A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older th…
-
High 7.2
An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewal…
-
Low 2.7
A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database conte…
-
Medium 6.8
A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin import group wizard of Soph…
-
Medium 4.1
An improper access control vulnerability [CWE-284] in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2…
-
Critical 9.8
A flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00(ABLG.6)C0 could allow a remote attacker to access the…