Category

Network devices

11,298 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

11,298 results · Feed

High 8.8

CVE-2020-8862 EPSS 13%

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2…

D-Link DAP-2610 Network devices

Feb 22, 2020
High 8.8

CVE-2020-8861

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1…

D-Link DAP-1330 Network devices

Feb 22, 2020
High 8.4

CVE-2019-1950

Cisco IOS XE SD-WAN Software Default Credentials Vulnerability

A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, local attacker to gain unauthorized access to an affected device. The vulnerability is due to the existence of default credentials within the default configuration of an affected …

Cisco Cisco IOS XE SD-WAN Software iOS Network devices

Feb 19, 2020
Medium 4.8

CVE-2020-3113

Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerabil…

Cisco Cisco Data Center Network Manager Network devices

Feb 19, 2020
High 8.8

CVE-2020-3112

Cisco Data Center Network Manager Privilege Escalation Vulnerability

A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to elevate privileges on the application. The vulnerability is due to insufficient access control validation. An attacker could …

Cisco Cisco Data Center Network Manager Network devices

Feb 19, 2020
High 8.8

CVE-2020-3114

Cisco Data Center Network Manager Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insuffic…

Cisco Cisco Data Center Network Manager Network devices

Feb 19, 2020
Medium 6.8

CVE-2020-3132

Cisco Email Security Appliance Shortened URL Denial of Service Vulnerability

A vulnerability in the email message scanning feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a temporary denial of service (DoS) condition on an affected device. The vulnerab…

Cisco Cisco Email Security Appliance (ESA) Network devices

Feb 19, 2020
Unscored —

CVE-2020-3138

Cisco Enterprise NFV Infrastructure Software Remote Code Execution Vulnerability

A vulnerability in the upgrade component of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to install a malicious file when upgrading. The vulnerability is due to insufficient signature validation. An attacke…

Cisco Network devices

Feb 19, 2020
Medium 6.5

CVE-2020-3153 Exploited · Ransomware Public exploit EPSS 29%

Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the…

Cisco Cisco AnyConnect Secure Mobility Client Network devices

Feb 19, 2020
KEV Oct 24, 2022
Medium 4.9

CVE-2020-3154

Cisco Cloud Web Security SQL Injection Vulnerability

A vulnerability in the web UI of Cisco Cloud Web Security (CWS) could allow an authenticated, remote attacker to execute arbitrary SQL queries. The vulnerability exists because the web-based management interface improperly validates SQL values. An authenticat…

Cisco Cisco Cloud Web Security Network devices

Feb 19, 2020
Medium 6.1

CVE-2020-3156

Cisco Identity Services Engine Cross-Site Scripting Vulnerability

A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated remote attacker to conduct cross-site scripting attacks. The vulnerability is due to the improper validation of endpoint data stored in logs used by the …

Cisco Cisco Identity Services Engine Software Network devices

Feb 19, 2020
Critical 9.8

CVE-2020-3158

Cisco Smart Software Manager On-Prem Static Default Credential Vulnerability

A vulnerability in the High Availability (HA) service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account…

Cisco Cisco Smart Software Manager On-Prem Network devices

Feb 19, 2020
Medium 6.1

CVE-2020-3159

Cisco Finesse Web-Based Management Interface Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerabil…

Cisco Cisco Finesse Network devices

Feb 19, 2020
Medium 5.3

CVE-2020-3160

Cisco Meeting Server Extensible Messaging and Presence Protocol Denial of Service Vulnerability

A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition for users of XMPP conferencing applications. Other a…

Cisco Cisco Meeting Server Network devices

Feb 19, 2020
Medium 6.8

CVE-2020-3163

Cisco Unified Contact Center Enterprise Denial of Service Vulnerability

A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the affected software impro…

Cisco Cisco Unified Contact Center Enterprise Network devices

Feb 19, 2020
Medium 4.3

CVE-2011-2054

Cisco ASA Secondary Authentication Bypass Vulnerability

A vulnerability in the Cisco ASA that could allow a remote attacker to successfully authenticate using the Cisco AnyConnect VPN client if the Secondary Authentication type is LDAP and the password is left blank, providing the primary credentials are correct. …

Cisco Cisco ASA Network devices

Feb 19, 2020
Medium 4.3

CVE-2015-0749

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on the affected software. The vulnerabilities is due to improper input validation of certain parameters pass…

Cisco Cisco Unified Communications Manager Network devices

Feb 19, 2020
Unscored —

CVE-2020-1842

Huawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA-550AX and OSCA-550X versi…

Huawei HEGE-560 OSCA-550AX, OSCA-550X OSCA-550, OSCA-550A Network devices

Feb 18, 2020
Unscored —

CVE-2020-1789

Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X products with version 1.0.1.21(SP3) have an insufficient authenti…

Huawei OSCA-550, OSCA-550A, OSCA-550AX, OSCA-550X Network devices

Feb 18, 2020
Unscored —

CVE-2020-1812

HUAWEI P30 smartphones with versions earlier than 10.0.0.173(C00E73R1P11) have an improper authentication vulnerability…

Huawei HUAWEI P30 Network devices

Feb 18, 2020
Unscored —

CVE-2020-1855

Huawei HEGE-570 version 1.0.1.22(SP3); and HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X version 1.0.1.21(SP…

Huawei HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, OSCA-550X HEGE-570 Network devices

Feb 18, 2020
Unscored —

CVE-2020-1843

Huawei HEGE-560 version 1.0.1.20(SP2), OSCA-550 version 1.0.0.71(SP1), OSCA-550A version 1.0.0.71(SP1), OSCA-550AX vers…

Huawei HEGE-560 OSCA-550A OSCA-550X Network devices

Feb 18, 2020
Unscored —

CVE-2020-1790

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command usi…

Huawei GaussDB 200 Network devices

Feb 18, 2020
Unscored —

CVE-2020-1791

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerabili…

Huawei HUAWEI Mate 20 Network devices

Feb 18, 2020
Unscored —

CVE-2020-1814

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R00…

Huawei NIP6800 Secospace USG6600, USG9500 Network devices

Feb 18, 2020
Unscored —

CVE-2020-1872

Huawei smart phones P10 Plus with versions earlier than 9.1.0.201(C01E75R1P12T8), earlier than 9.1.0.252(C185E2R1P9T8),…

Huawei HUAWEI P10 Plus Network devices

Feb 18, 2020
Unscored —

CVE-2020-1882

Huawei mobile phones Ever-L29B versions earlier than 10.0.0.180(C185E6R3P3), earlier than 10.0.0.180(C432E6R1P7), earli…

Huawei HUAWEI Mate 20 X Honor Magic2 Ever-L29B Network devices

Feb 17, 2020
Unscored —

CVE-2020-1830

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R00…

Huawei NIP6800 Secospace USG6600, USG9500 Network devices

Feb 17, 2020
Unscored —

CVE-2020-1811

GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote …

Huawei GaussDB 200 Network devices

Feb 17, 2020
Unscored —

CVE-2020-1816

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R00…

Huawei NIP6800 Secospace USG6600, USG9500 Network devices

Feb 17, 2020
Unscored —

CVE-2020-1815

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R00…

Huawei NIP6800 Secospace USG6600, USG9500 Network devices

Feb 17, 2020
Unscored —

CVE-2020-1853

GaussDB 200 with version of 6.5.1 have a path traversal vulnerability. Due to insufficient input path validation, an au…

Huawei GaussDB 200 Network devices

Feb 17, 2020
Unscored —

CVE-2020-1841

Huawei CloudLink Board version 20.0.0; DP300 version V500R002C00; RSE6500 versions V100R001C00, V500R002C00, and V500R0…

Huawei DP300 TE60 RSE6500 Network devices

Feb 17, 2020
Unscored —

CVE-2020-1827

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versio…

Huawei NIP6800 Secospace USG6600, USG9500 Network devices

Feb 17, 2020
Unscored —

CVE-2020-1856

Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C…

Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, USG9500 Network devices

Feb 17, 2020
Unscored —

CVE-2020-1829

Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500; and Secospace USG6600 and USG9500 versions V500R001C30SPC200…

Huawei NIP6800 Secospace USG6600 USG9500 Network devices

Feb 17, 2020
Unscored —

CVE-2020-1857

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versio…

Huawei NIP6800 Secospace USG6600 USG9500 Network devices

Feb 17, 2020
Unscored —

CVE-2020-1828

Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V50…

Huawei NIP6800 Secospace USG6600 USG9500 Network devices

Feb 17, 2020
Unscored —

CVE-2020-1858

Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500…

Huawei NIP6800 Secospace USG6600 USG9500 Network devices

Feb 17, 2020
High 7.5

CVE-2020-1977

Expedition Migration Tool: Insufficient Cross Site Request Forgery protection.

Insufficient Cross-Site Request Forgery (XSRF) protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expeditio…

Palo Alto Networks Expedition Network devices

Feb 12, 2020