Category
Network devices
11,278 known vulnerabilities.
11,278 results · Feed
-
Medium 4.9
XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before…
-
High 7.5
A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, …
-
High 7.5
A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1…
-
High 8.1
Exposed SFTP server
Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties.
-
Medium 6.5
Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before version 22.9 allows…
-
High 7.2
Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated att…
-
High 7.2
SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privilege…
-
Medium 5.0
EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary co…
-
Medium 5.7
EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary co…
-
Medium 4.5
EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary co…
-
Medium 5.4
Cisco Webex Meeting Client Join Certificate Validation Vulnerability
A vulnerability in the meeting-join functionality of Cisco Webex Meetings could have allowed an unauthenticated, network-proximate attacker to complete a meeting-join process in place of an intended targeted user, provided the requisite conditions were satisf…
-
Medium 4.3
Cisco Identity Services Engine Authorization Bypass Vulnerability
A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-side validation of Administrator permi…
-
Medium 5.4
Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabiliy
A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-sup…
-
Medium 5.0
Path Traversal
The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to at least one File Share application) to list the file names of 'nobody'-accessible directories on the…
-
Medium 6.5
Lack of TLS validation
Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country flags in logs
-
Medium 4.8
Race condition vulnerability in the kernel hufs module. Impact: Successful exploitation of this vulnerability may affec…
-
Medium 4.2
Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vuln…
-
Medium 4.5
Vulnerability of using incompatible types to access resources in the location service. Impact: Successful exploitation …
-
Medium 5.4
Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of …
-
Medium 5.4
Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of …
-
Medium 5.1
Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerabilit…
-
Medium 5.0
Out-of-bounds array access issue due to insufficient data verification in the location service module. Impact: Successf…
-
Medium 6.6
Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Succ…
-
Medium 6.6
Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Succ…
-
Medium 6.7
Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Impact: Successful ex…
-
Medium 6.7
Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful…
-
Medium 5.5
ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may ca…
-
Medium 5.5
ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may ca…
-
Medium 5.5
Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of this vulnerability …
-
Medium 4.4
Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Succ…
-
Medium 4.4
Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successf…
-
Medium 5.9
Vulnerability of returning released pointers in the distributed notification service. Impact: Successful exploitation o…
-
High 8.0
Vulnerability of improper processing of abnormal conditions in huge page separation. Impact: Successful exploitation of…
-
Medium 6.7
Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful exploitation of th…
-
Medium 6.8
Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploitation of this vulne…
-
Medium 6.7
Vulnerability of insufficient data length verification in the partition module. Impact: Successful exploitation of this…
-
Medium 6.8
:Vulnerability of insufficient data length verification in the DFA module. Impact: Successful exploitation of this vuln…
-
Medium 6.7
Race condition issue occurring in the physical page import process of the memory management module. Impact: Successful …
-
Medium 5.3
Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of th…
-
High 8.8
Out-of-bounds write vulnerability in the skia module. Impact: Successful exploitation of this vulnerability may affect …