| CVE-2025-40603 |
A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote,…
|
4.5
Moyenne
|
31 oct. 2025 |
| CVE-2025-32821 |
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin…
|
7.1
Élevée
|
7 mai 2025 |
| CVE-2025-32820 |
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal…
|
8.3
Élevée
|
7 mai 2025 |
| CVE-2025-32819 |
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path…
|
8.8
Élevée
|
7 mai 2025 |
| CVE-2024-53703 |
A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by…
|
8.1
Élevée
|
5 déc. 2024 |
| CVE-2024-53702 |
Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN…
|
5.3
Moyenne
|
5 déc. 2024 |
| CVE-2024-45319 |
A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote…
|
6.3
Moyenne
|
5 déc. 2024 |
| CVE-2024-45318 |
A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based…
|
8.1
Élevée
|
5 déc. 2024 |
| CVE-2024-40763 |
Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy
|
7.5
Élevée
|
5 déc. 2024 |
| CVE-2024-22395 |
Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific…
|
6.3
Moyenne
|
23 févr. 2024 |
| CVE-2023-5970 |
Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create…
|
Non notée
|
5 déc. 2023 |
| CVE-2023-44221 |
Exploitée
SonicWall SMA100 Appliances OS Command Injection Vulnerability
|
7.2
Élevée
|
5 déc. 2023 |
| CVE-2022-2915 |
A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to…
|
Non notée
|
26 août 2022 |
| CVE-2022-1703 |
Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a…
|
Non notée
|
3 juin 2022 |
| CVE-2021-20035 |
Exploitée
SonicWall SMA100 Appliances OS Command Injection Vulnerability
|
6.5
Moyenne
|
27 sept. 2021 |
| CVE-2021-20034 |
An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal…
|
Non notée
|
27 sept. 2021 |
| CVE-2021-20018 |
A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the…
|
Non notée
|
13 mars 2021 |
| CVE-2021-20017 |
A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute…
|
Non notée
|
13 mars 2021 |
| CVE-2020-5146 |
A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command injection…
|
Non notée
|
9 janv. 2021 |
| CVE-2020-5132 |
SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as…
|
Non notée
|
30 sept. 2020 |
| CVE-2019-7484 |
Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using…
|
Non notée
|
19 déc. 2019 |
| CVE-2019-7486 |
Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script
|
Non notée
|
19 déc. 2019 |
| CVE-2019-7485 |
Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script
|
Non notée
|
19 déc. 2019 |
| CVE-2019-7483 |
Exploitée
SonicWall SMA100 Directory Traversal Vulnerability
|
7.5
Élevée
|
19 déc. 2019 |
| CVE-2019-7482 |
Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function…
|
Non notée
|
19 déc. 2019 |