Category
Network devices
11,278 known vulnerabilities.
11,278 results · Feed
-
Medium 6.7
Race condition vulnerability in the kernel file system module. Impact: Successful exploitation of this vulnerability ma…
-
Medium 4.4
Pointer dangling vulnerability in the cjwindow module. Impact: Successful exploitation of this vulnerability may affect…
-
Medium 5.7
Unexpected injection event vulnerability in the multimodalinput module. Impact: Successful exploitation of this vulnera…
-
Medium 6.3
Out-of-bounds read vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may…
-
High 8.3
Binding authentication bypass vulnerability in the devicemanager module. Impact: Successful exploitation of this vulner…
-
Medium 5.3
Iterator failure issue in the WantAgent module. Impact: Successful exploitation of this vulnerability may cause memory …
-
Medium 5.5
Deserialization vulnerability of untrusted data in the ability module. Impact: Successful exploitation of this vulnerab…
-
Medium 5.3
Iterator failure issue in the multi-mode input module. Impact: Successful exploitation of this vulnerability may cause …
-
Medium 5.7
Permission control vulnerability in the distributed clipboard module. Impact: Successful exploitation of this vulnerabi…
-
Medium 6.8
Stack-based buffer overflow vulnerability in the dms_fwk module. Impact: Successful exploitation of this vulnerability …
-
Medium 4.0
Out-of-bounds array access vulnerability in the ArkUI framework. Impact: Successful exploitation of this vulnerability …
-
Medium 6.2
Vulnerability of insufficient information protection in the media library module. Impact: Successful exploitation of th…
-
Medium 6.2
Input verification vulnerability in the home screen module. Impact: Successful exploitation of this vulnerability may a…
-
Medium 5.9
Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may…
-
Medium 5.9
Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may…
-
High 7.3
EXTRA_REFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability…
-
Medium 5.4
Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may…
-
Medium 5.4
Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may…
-
Medium 6.2
Vulnerability that allows setting screen rotation direction without permission verification in the screen management mo…
-
High 7.7
Authentication management vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may…
-
High 7.3
Status verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will…
-
High 8.1
Race condition vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affec…
-
High 8.4
Path traversal vulnerability in the virtualization file module. Successful exploitation of this vulnerability may affec…
-
High 8.4
Path traversal vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affec…
-
Critical 10.0
D-Link Devices Unauthenticated RCE
The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection vulnerability in command.php, which improperly handles the cmd POST parameter. A remote attacker can e…
-
Critical 9.8
An Improper Input Validation in certain UniFi Access devices could allow a Command Injection by a malicious actor with …
-
High 7.5
An Improper Input Validation in EdgeMAX EdgeSwitch (Version 1.10.4 and earlier) could allow a Command Injection by a ma…
-
Medium 6.9CVE-2013-10063 Public exploit
Netgear SPH200D <= 1.0.4.80 Path Traversal via HTTP GET
A path traversal vulnerability exists in the Netgear SPH200D Skype phone firmware versions <= 1.0.4.80 in its embedded web server. Authenticated attackers can exploit crafted GET requests to access arbitrary files outside the web root by injecting traversal s…
-
Critical 9.4CVE-2013-10060 Public exploit
Netgear Routers pppoe.cgi RCE
An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN2200B model) firmware versions 1.0.0.36 and prior via the pppoe.cgi endpoint. A remote attacker with valid credentials can execute arbitrary commands via crafted i…
-
High 8.6CVE-2013-10061 Public exploit
Netgear Routers setup.cgi RCE
An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN1000B model firmware versions 1.1.00.24 and 1.1.00.45) via the TimeToLive parameter in the setup.cgi endpoint. The vulnerability arises from improper input neutral…
-
Critical 9.3
D-Link Devices command.php Unauthenticated RCE
An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 (firmware ≤ 2.13 and ≤ 2.14b01, respectively)—due to improper input handling in the unauthenticated command.php endpoint. By sending specially cr…
-
High 8.7
D-Link Devices tools_vct.xgi Authenticated RCE
An OS command injection vulnerability exists in multiple D-Link routers (confirmed on DIR-300 rev A v1.05 and DIR-615 rev D v4.13) via the authenticated tools_vct.xgi CGI endpoint. The web interface fails to properly sanitize user-supplied input in the pingIp…
-
High 8.6
D-Link Routers tools_vct.htm OS Command Injection
An authenticated OS command injection vulnerability exists in various D-Link routers (tested on DIR-615H1 running firmware version 8.04) via the tools_vct.htm endpoint. The web interface fails to sanitize input passed from the ping_ipaddr parameter to the too…
-
Critical 9.3CVE-2012-10021 Public exploit
D-Link DIR-605L Captcha Handling Buffer Overflow
A stack-based buffer overflow vulnerability exists in D-Link DIR-605L Wireless N300 Cloud Router firmware versions 1.12 and 1.13 via the getAuthCode() function. The flaw arises from unsafe usage of sprintf() when processing user-supplied CAPTCHA data via the …
-
Critical 9.8
Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticat…
-
Medium 6.9
TP-Link TL-WR841N Wan6to4TunnelCfgRpm.htm buffer overflow
A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/Wan6to4TunnelCfgRpm.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the web service and result in a…
-
Medium 6.9
TP-Link TL-WR841N WzdWlanSiteSurveyRpm_AP.htm buffer overflow
A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WzdWlanSiteSurveyRpm_AP.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the web service and result …
-
Medium 6.9
TP-Link TL-WR841N WlanNetworkRpm_APC.htm buffer overflow
A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WlanNetworkRpm_APC.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the web service and result in a …
-
Medium 6.9
TP-Link TL-WR841N WlanNetworkRpm_AP.htm buffer overflow
A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WlanNetworkRpm_AP.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the web service and result in a d…
-
Medium 6.9
TP-Link TL-WR841N, TL-WR842ND and TL-WR949N WlanNetworkRpm.htm buffer overflow
A vulnerability has been found in TP-Link TL-WR841N v11, TL-WR842ND v2 and TL-WR494N v3. The vulnerability exists in the /userRpm/WlanNetworkRpm.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the …