Category
Network devices
11,278 known vulnerabilities.
11,278 results · Feed
-
High 7.5
Some Huawei wearables have a vulnerability of not verifying the actual data size when reading data. Successful exploita…
-
High 7.7
Some Huawei wearables have a permission management vulnerability.
-
Low 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (CO…
-
Low 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (CO…
-
Low 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (CO…
-
Low 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (CO…
-
Low 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (CO…
-
High 7.3
Netgear R6900P/R7000P HTTP Header sub_16C4C buffer overflow
A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub_16C4C of the component HTTP Header Handler. The manipulation of the argument Host leads to buffer overflow. Th…
-
High 7.3
DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection
A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component Web Management Interface. The manipulation of the argu…
KEV May 15, 2025 -
High 7.3
DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injection
A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and Vigor300B 1.5.1.3/1.5.1.4. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi/apmcfgupptim of the component Web Management Interface. The …
-
Low 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (CO…
-
Low 3.7
There are multiple out of bounds (OOB) read vulnerabilities in the implementation of the Common Open Policy Service (CO…
-
Medium 6.3
There is a stack overflow vulnerability in some Huawei smart phone. An attacker can craft specific packet to exploit th…
-
High 8.8
There is an improper interface design vulnerability in Huawei product. A module interface of the impated product does n…
-
High 7.0
There is a privilege escalation vulnerability in Huawei FusionCompute product. Due to insufficient verification on spec…
-
Medium 6.4
There is an out-of-bound read and write vulnerability in Huawei smartphone. A module dose not verify the input sufficie…
-
Medium 6.8
There is an insufficient integrity vulnerability in Huawei products. A module does not perform sufficient integrity che…
-
High 7.1
PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger th…
KEV Dec 30, 2024 -
Low 3.3
There is an information vulnerability in Huawei smartphones. A function in a module can be called without verifying the…
-
Medium 4.3
There is a buffer error vulnerability in some Huawei product. An unauthenticated attacker may send special UPNP message…
-
Medium 5.3
There is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send specially crafted POST …
-
Low 3.5
There is an information disclosure vulnerability in several smartphones. The system has a logic judging error under cer…
-
Low 3.5
There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of oper…
-
High 7.8
There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker …
-
High 8.0
Huawei Home Music System has a path traversal vulnerability. Successful exploitation of this vulnerability may cause th…
-
High 7.5
Huawei printers have an input verification vulnerability. Successful exploitation of this vulnerability may cause devic…
-
High 7.5
There is an improper input verification vulnerability in Huawei printer product. Successful exploitation of this vulner…
-
Critical 9.8
There is a command injection vulnerability in Huawei terminal printer product. Successful exploitation could result in …
-
High 8.6
There is an insufficient input verification vulnerability in Huawei product. Successful exploitation of this vulnerabil…
-
Low 3.3
There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker ca…
-
Medium 6.6
Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability
Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Arista NG Firewall. An attacker must first obtain the ability to execute low…
-
High 8.3
Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability
Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files and disclose sensitive information on affected installations of Arista NG Firewall. Authentication i…
-
High 8.1
Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability
Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is not required to exploit this vul…
-
High 7.2
Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability
Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is required to exploit this vulnerab…
-
High 8.8
A post-auth code injection vulnerability in the User Portal allows authenticated users to execute code remotely in Soph…
-
Critical 9.8
A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than vers…
-
Critical 9.8
A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 …
-
Critical 9.8
A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remo…
-
High 7.7
A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and belo…
-
High 7.6
An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a l…