Category
Network devices
11,298 known vulnerabilities.
11,298 results · Feed
-
Unscored —
There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitat…
-
Unscored —
There is an improper access control vulnerability in the video module. Successful exploitation of this vulnerability ma…
-
Unscored —
There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability…
-
Medium 5.4
Multiple relative path traversal vulnerabilities [CWE-23] in FortiWLM management interface 8.6.2 and below, 8.5.2 and b…
-
Medium 4.1
An improper access control vulnerability [CWE-284 ] in FortiToken Mobile (Android) external push notification 5.1.0 and…
-
High 7.8
An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in FortiAP-C console 5.4.0 …
-
Low 2.8
An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiManager v…
-
High 8.8
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6…
-
Low 2.6
A improper input validation in Fortinet FortiGate version 6.4.3 and below, version 6.2.5 and below, version 6.0.11 and …
-
Medium 4.3
A improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5.6.0 through 5.6.11, F…
-
High 8.8
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versi…
-
High 7.7
An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unau…
-
Critical 9.8
An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess one…
-
High 8.1
The use of a cryptographically weak pseudo-random number generator in the password reset feature of FortiPortal before …
-
Critical 9.8
A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to exe…
-
Medium 6.5CVE-2021-35036 Public exploit
A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allo…
-
Unscored —
There is an improper permission management vulnerability in the Wallet apps. Successful exploitation of this vulnerabil…
-
Unscored —
There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicio…
-
Unscored —
There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerab…
-
Unscored —
There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicio…
-
Unscored —
There is a logic bypass vulnerability in smartphones. Successful exploitation of this vulnerability may cause code inje…
-
Unscored —
There is a vulnerability when configuring permission isolation in smartphones. Successful exploitation of this vulnerab…
-
Unscored —
There is a memory address out of bounds in smartphones. Successful exploitation of this vulnerability may cause malicio…
-
Unscored —
There is a memory address out of bounds vulnerability in smartphones. Successful exploitation of this vulnerability may…
-
Unscored —
There is a buffer overflow vulnerability in smartphones. Successful exploitation of this vulnerability may cause DoS of…
-
Unscored —
There is a code injection vulnerability in smartphones. Successful exploitation of this vulnerability may affect servic…
-
Unscored —
There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause…
-
Unscored —
There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service integrity.
-
Unscored —
There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service availabil…
-
Unscored —
There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause…
-
Unscored —
The interface of a certain HarmonyOS module has an integer overflow vulnerability. Successful exploitation of this vuln…
-
Unscored —
There is a software integer overflow leading to a TOCTOU condition in smartphones. Successful exploitation of this vuln…
-
Unscored —
The interface of a certain HarmonyOS module has an invalid address access vulnerability. Successful exploitation of thi…
-
Unscored —
The interface of a certain HarmonyOS module has a UAF vulnerability. Successful exploitation of this vulnerability may …
-
Unscored —
Some Huawei products have an integer overflow vulnerability. Successful exploitation of this vulnerability may lead to …
-
Medium 4.7
Failure to sanitize input in the SSL VPN web portal of FortiOS 5.2.10 through 5.2.15, 5.4.0 through 5.4.13, 5.6.0 throu…
-
High 8.6CVE-2022-20623 EPSS 12%
Cisco Nexus 9000 Series Switches Bidirectional Forwarding Detection Denial of Service Vulnerability
A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause BFD traffic to be dropped on an affected device. Thi…
-
High 8.6CVE-2022-20624 EPSS 12%
Cisco NX-OS Software Cisco Fabric Services Over IP Denial of Service Vulnerability
A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validat…
-
Medium 4.3
Cisco FXOS and NX-OS Software Cisco Discovery Protocol Service Denial of Service Vulnerability
A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the service to restart, resulting in a denial of service (DoS) condition. This vulnerability is …
-
High 8.8CVE-2022-20650 EPSS 15%
Cisco NX-OS Software NX-API Command Injection Vulnerability
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation of user supplied data that is sent to the…