Category
Network devices
11,275 known vulnerabilities.
11,275 results · Feed
-
Medium 5.4
Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information …
-
Medium 5.7
Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker …
-
Critical 9.8
A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access …
-
Critical 9.8
A malicious actor with access to the UniFi Play network could exploit a Path Traversal vulnerability found in the devic…
-
High 7.5
An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause…
-
Critical 9.8
An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to enable …
-
High 7.5
An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to obtain …
-
Medium 4.0
Cortex XDR Agent: Local Administrator can disable the agent on Windows
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent. This issue may be leveraged by malware to perform malicious activity without detection.
-
Low 2.0
Autonomous Digital Experience Manager: Improper validation of ADEM certificate
A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges.
-
High 7.2
Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration
An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources.
-
Medium 5.1
Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect a…
-
Critical 10.0
Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect a…
-
Medium 6.8
Boundary-unlimited vulnerability in the application read module. Impact: Successful exploitation of this vulnerability …
-
Medium 6.7
Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect …
-
Medium 6.3
Race condition vulnerability in the power consumption statistics module. Impact: Successful exploitation of this vulner…
-
Medium 6.3
Race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability ma…
-
Medium 5.9
UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability …
-
Medium 4.1
UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availab…
-
Medium 4.7
UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availab…
-
Medium 5.7
Out-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affe…
-
Medium 5.7
UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability …
-
Low 2.5
UAF vulnerability in the screen management module. Impact: Successful exploitation of this vulnerability may affect ava…
-
High 7.3
UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availab…
-
High 7.7
Permission bypass vulnerability in the LBS module. Impact: Successful exploitation of this vulnerability may affect ava…
-
Medium 6.9
Vulnerability of improper permission control in the theme setting module. Impact: Successful exploitation of this vulne…
-
Medium 5.6
Double free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vulnerability may aff…
-
Medium 4.1
Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect avai…
-
Medium 6.1
Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect av…
-
Low 2.2
Race condition vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability ma…
-
Low 1.9
Race condition vulnerability in the notification service. Impact: Successful exploitation of this vulnerability may aff…
-
High 8.8
D-Link DIR-513 POST Request formAdvanceSetup buffer overflow
A flaw has been found in D-Link DIR-513 1.10. This issue affects the function formAdvanceSetup of the file /goform/formAdvanceSetup of the component POST Request Handler. This manipulation of the argument webpage causes buffer overflow. It is possible to init…
-
High 8.8
D-Link DIR-513 POST Request formSetRoute buffer overflow
A vulnerability was detected in D-Link DIR-513 1.10. This vulnerability affects the function formSetRoute of the file /goform/formSetRoute of the component POST Request Handler. The manipulation of the argument curTime results in buffer overflow. The attack m…
-
High 8.8
D-Link DIR-513 POST Request formSetPassword buffer overflow
A security vulnerability has been detected in D-Link DIR-513 1.10. This affects the function formSetPassword of the file /goform/formSetPassword of the component POST Request Handler. The manipulation of the argument curTime leads to buffer overflow. The atta…
-
High 8.8
D-Link DIR-605L POST Request formSetLog buffer overflow
A vulnerability was identified in D-Link DIR-605L 2.13B01. Impacted is the function formSetLog of the file /goform/formSetLog of the component POST Request Handler. The manipulation of the argument curTime leads to buffer overflow. The attack is possible to b…
-
High 8.8
D-Link DIR-605L POST Request formSetDDNS buffer overflow
A vulnerability was determined in D-Link DIR-605L 2.13B01. This issue affects the function formSetDDNS of the file /goform/formSetDDNS of the component POST Request Handler. Executing a manipulation of the argument curTime can lead to buffer overflow. The att…
-
Medium 6.7
Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root
An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker executing specific, crafted CLI commands to inject arbitrary shell commands as root, leading to a complete c…
-
High 7.5
Junos OS: SRX Series: In a NAT64 configuration, receipt of a specific, malformed ICMPv6 packet will cause the srxpfe process to crash and restart.
An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow daemon (flowd) of Juniper Networks Junos OS on SRX Series allows an attacker sending a specific, malformed ICMPv6 packet to cause the srxpfe process to crash and restart. Contin…
-
Medium 5.5
Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specific show command is executed chassisd crashes
An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis control daemon (chassisd) of Juniper Networks Junos OS on SRX1500, SRX4100, SRX4200 and SRX4600 allows a local attacker with low privileges to cause a complete Denial of Serv…
-
High 8.8
Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands in a JDM/CSDS scenario
A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific commands which will lead to a complete compromise of managed devices. Any user logged in, wit…
-
Critical 9.8
JSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privileged access
A Use of Default Password vulnerability in the Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows an unauthenticated, network-based attacker to take full control of the device. vLWC software images ship with an initial passwor…