Category
Network devices
11,298 known vulnerabilities.
11,298 results · Feed
-
Unscored —
There is a Credentials Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerabili…
-
Unscored —
There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to …
-
Unscored —
There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to …
-
Unscored —
There is an Identity spoofing and authentication bypass vulnerability in Huawei Smartphone.Successful exploitation of t…
-
Unscored —
There is a Service logic vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause WLA…
-
Unscored —
There is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause ad…
-
Unscored —
There is an Out-of-bounds read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cau…
-
Unscored —
There is a Missing sensitive data encryption vulnerability in Huawei Smartphone.Successful exploitation of this vulnera…
-
Unscored —
There is a Heap-based buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability …
-
Unscored —
There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device t…
-
Unscored —
There is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affe…
-
Unscored —
There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cau…
-
Unscored —
There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cau…
-
Unscored —
There is an Invalid address access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may…
-
Medium 5.3
An improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the Rep…
-
Medium 6.1
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4…
-
Medium 6.1
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4…
-
Medium 5.5
A unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below a…
-
High 7.5
A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenti…
-
Medium 4.1
A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below al…
-
High 7.3
A stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an authenticated attacker to execute…
-
Medium 6.1
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4…
-
Medium 4.3
A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and …
-
High 8.1
An integer overflow or wraparound vulnerability in the memory allocator of SSLVPN in FortiOS before 7.0.1 may allow an …
-
High 7.5
A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retr…
-
High 7.5
A relative path traversal [CWE-23] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and FortiProxy verison 7.0.0 may a…
-
Medium 6.3
An insufficient verification of data authenticity vulnerability (CWE-345) in the user interface of FortiProxy verison 2…
-
Medium 5.3
A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in FortiSa…
-
Medium 5.4
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6…
-
High 8.8
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6…
-
Medium 6.4
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6…
-
High 8.3
A exposure of sensitive information to an unauthorized actor in Fortinet FortiAuthenticator version 6.4.0, version 6.3.…
-
Medium 6.3
A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may all…
-
High 8.8
An improper access control vulnerability [CWE-284] in FortiWLC 8.6.1 and below may allow an authenticated and remote at…
-
High 8.1
Multiple improper neutralization of special elements used in a command vulnerabilities [CWE-77] in FortiWeb management …
-
High 7.8
An improper access control vulnerability [CWE-284] in FortiOS autod daemon 7.0.0, 6.4.6 and below, 6.2.9 and below, 6.0…
-
Unscored —
SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerabil…
-
Unscored —CVE-2021-20045 EPSS 25%
A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated …
-
Unscored —CVE-2021-20044 EPSS 40%
A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker…
-
Unscored —CVE-2021-20043 EPSS 23%
A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attack…