Category
Network devices
11,298 known vulnerabilities.
11,298 results · Feed
-
High 7.2
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWAN before 4.5.9 may allo…
-
High 7.1
An improper input validation vulnerability in FortiClient for Linux 6.4.x before 6.4.3, FortiClient for Linux 6.2.x bef…
-
Medium 6.5
A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attack…
-
High 7.8
Multiple OS command injection (CWE-78) vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6…
-
High 8.2
A improper initialization in Fortinet FortiClient (Windows) version 6.0.10 and below, version 6.2.9 and below, version …
-
High 7.8
A use of hard-coded cryptographic key vulnerability [CWE-321] in the registration mechanism of FortiEDR collectors vers…
-
Medium 4.3
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Linux version …
-
Medium 6.5
A use of a broken or risky cryptographic algorithm vulnerability [CWE-327] in the Dynamic Tunnel Protocol of FortiWAN b…
-
High 7.2
Multiple improper neutralization of special elements used in an OS command vulnerabilities (CWE-78) in the Web GUI of F…
-
Critical 9.8
Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 ma…
-
High 8.1
Multiple stack-based buffer overflow vulnerabilities [CWE-121] both in network daemons and in the command line interpre…
-
Critical 9.1
A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow…
-
Medium 5.4
An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authentic…
-
Medium 4.4
A improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and earlier allows attacker to…
-
High 7.5
On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol fi ...
On Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent rules ( rules declared after it in ACL ) do not match on IP protocol field as e…
-
Medium 5.3
An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial…
-
Critical 9.8
An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.7…
-
Unscored —
A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to…
-
Critical 9.8
An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Soph…
KEV Mar 31, 2022 -
Low 3.3
Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. T…
-
High 8.8
A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute cod…
-
Unscored —
Improper neutralization of Special Elements leading to OS Command Injection vulnerability impacting end-of-life Secure …
-
Medium 4.1
PAN-OS: Use of a Weak Cryptographic Algorithm for Stored Password Hashes
Usage of a weak cryptographic algorithm in Palo Alto Networks PAN-OS software where the password hashes of administrator and local user accounts are not created with a sufficient level of computational effort, which allows for password cracking attacks on acc…
-
Unscored —
Citrix Federated Authentication Service (FAS)
Citrix Federated Authentication Service (FAS) 7.17 - 10.6 causes deployments that have been configured to store a registration authority certificate's private key in a Trusted Platform Module (TPM) to incorrectly store that key in the Microsoft Software Key S…
-
Medium 6.1
A local attacker can overwrite arbitrary files on the system with VPN client logs using administrator privileges, poten…
-
Critical 9.8
TP-LINK Tapo C200 remote code execution vulnerability
TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control…
-
Unscored —
There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploit…
-
Unscored —
There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vul…
-
Unscored —
There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead t…
-
Unscored —
There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may caus…
-
Unscored —
There is an unauthorized access vulnerability in system components. Successful exploitation of this vulnerability will …
-
Unscored —
There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vuln…
-
Unscored —
There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of this vulnerability ma…
-
Unscored —
There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitati…
-
Unscored —
There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitat…
-
Unscored —
There is a heap-based and stack-based buffer overflow vulnerability in the video framework. Successful exploitation of …
-
Unscored —
There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerabili…
-
Unscored —
There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affe…
-
Unscored —
There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerabili…
-
Unscored —
There is a vulnerability of accessing resources using an incompatible type (type confusion) in the Bastet module. Succe…