Category
Network devices
11,298 known vulnerabilities.
11,298 results · Feed
-
Critical 9.0
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiOS versio…
-
High 7.4
Cisco Catalyst 9100 Series Access Points Association Request Denial of Service Vulnerability
A vulnerability in the 802.11 association frame validation of Cisco Catalyst 9100 Series Access Points (APs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to ins…
-
Medium 6.7
Cisco SD-WAN Software Arbitrary File Corruption Vulnerability
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite and possibly corrupt files on an affected system. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerab…
-
High 8.6
Cisco IOS and IOS XE Software Common Industrial Protocol Request Denial of Service Vulnerability
A vulnerability in the processing of malformed Common Industrial Protocol (CIP) packets that are sent to Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to unexpectedly reload, resulting…
-
High 8.6
Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Mobility Denial of Service Vulnerability
A vulnerability in the processing of Control and Provisioning of Wireless Access Points (CAPWAP) Mobility messages in Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of s…
-
High 7.9
Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points Privilege Escalation Vulnerability
A vulnerability in the self-healing functionality of Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points could allow an authenticated, local attacker to escape the restricted controller shell and execute arbitrary commands on the…
-
Medium 5.5
Cisco IOS XE Software Web UI Command Injection Vulnerability
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this …
-
Medium 5.5
Cisco SD-WAN Arbitrary File Deletion Vulnerability
A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete arbitrary files from the file system of an affected device. This vulnerability is due to insufficient input…
-
High 8.6
Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points UDP Processing Denial of Service Vulnerability
A vulnerability in the UDP processing functionality of Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerabili…
-
High 8.6
Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family DHCP Processing Denial of Service Vulnerability
A vulnerability in the DHCP processing functionality of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to the impro…
-
Medium 5.3
Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability
A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an unauthenticated, remote attacker to access the GUI of Cisco SD-AVC using a default static username and password c…
-
High 7.8CVE-2022-20818 Public exploit
Cisco SD-WAN Software Privilege Escalation Vulnerabilities
Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit …
-
Medium 6.5
Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Information Disclosure Vulnerability
A vulnerability in the Simple Network Management Protocol (SNMP) of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an authenticated, remote attacker to access sensitive information. This vulnerability is due to insufficient…
-
High 7.8
Cisco SD-WAN Software Privilege Escalation Vulnerability
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerab…
KEV Feb 25, 2026 -
High 7.4
Cisco Wireless LAN Controller AireOS Software FIPS Mode Denial of Service Vulnerability
A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insuf…
-
Medium 4.7
Cisco Access Points VLAN Bypass from Native VLAN Vulnerability
A vulnerability in the client forwarding code of multiple Cisco Access Points (APs) could allow an unauthenticated, adjacent attacker to inject packets from the native VLAN to clients within nonnative VLANs on an affected device. This vulnerability is due to …
-
Medium 6.1
Cisco Duo for macOS Authentication Bypass Vulnerability
A vulnerability in the smart card login authentication of Cisco Duo for macOS could allow an unauthenticated attacker with physical access to bypass authentication. This vulnerability exists because the assigned user of a smart card is not properly matched wi…
-
Critical 9.8
A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firew…
KEV Sep 23, 2022 -
Medium 5.9
An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pai…
-
Unscored —
Out-of-bounds write vulnerability in the kernel modules. Successful exploitation of this vulnerability may cause a pani…
-
Unscored —
Out-of-bounds write vulnerability in the power consumption module. Successful exploitation of this vulnerability may ca…
-
Unscored —
Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the con…
-
Unscored —
Out-of-bounds heap read vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cau…
-
Unscored —
Configuration defects in the secure OS module. Successful exploitation of this vulnerability will affect confidentialit…
-
Unscored —
The HwChrService module has a vulnerability in permission control. Successful exploitation of this vulnerability may ca…
-
Critical 9.8
The WLAN module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause…
-
High 7.5
The number identification module has a path traversal vulnerability. Successful exploitation of this vulnerability may …
-
Critical 9.8
The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerabil…
-
Unscored —
The AOD module has the improper update of reference count vulnerability. Successful exploitation of this vulnerability …
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confident…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availab…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availab…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confident…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confident…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confident…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confident…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confident…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availab…
-
Unscored —
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confident…
-
Unscored —
The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leak…