| CVE-2024-53705 |
A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to…
|
7.5
Élevée
|
9 janv. 2025 |
| CVE-2024-53704 |
Exploitée
SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
|
8.2
Élevée
|
9 janv. 2025 |
| CVE-2024-40762 |
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generator…
|
9.8
Critique
|
9 janv. 2025 |
| CVE-2024-40766 |
Exploitée
SonicWall SonicOS Improper Access Control Vulnerability
|
9.3
Critique
|
23 août 2024 |
| CVE-2024-40764 |
Heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to cause…
|
7.5
Élevée
|
18 juil. 2024 |
| CVE-2024-29013 |
Heap-based buffer overflow vulnerability in the SonicOS SSL-VPN allows an authenticated remote attacker to cause…
|
5.3
Moyenne
|
20 juin 2024 |
| CVE-2024-29012 |
Stack-based buffer overflow vulnerability in the SonicOS HTTP server allows an authenticated remote attacker to cause…
|
4.9
Moyenne
|
20 juin 2024 |
| CVE-2024-22397 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the SonicOS SSLVPN portal allows…
|
8.3
Élevée
|
14 mars 2024 |
| CVE-2024-22396 |
An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific…
|
5.3
Moyenne
|
14 mars 2024 |
| CVE-2024-22394 |
An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific…
|
9.8
Critique
|
8 févr. 2024 |
| CVE-2023-41715 |
SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to…
|
8.8
Élevée
|
17 oct. 2023 |
| CVE-2023-41713 |
SonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo function
|
Non notée
|
17 oct. 2023 |
| CVE-2023-41712 |
SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads…
|
Non notée
|
17 oct. 2023 |
| CVE-2023-41711 |
SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lead…
|
Non notée
|
17 oct. 2023 |
| CVE-2023-39280 |
SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL…
|
Non notée
|
17 oct. 2023 |
| CVE-2023-39279 |
SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData.json URL endpoint leads…
|
Non notée
|
17 oct. 2023 |
| CVE-2023-39278 |
SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads…
|
Non notée
|
17 oct. 2023 |
| CVE-2023-39277 |
SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL…
|
Non notée
|
17 oct. 2023 |
| CVE-2023-39276 |
SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads…
|
Non notée
|
17 oct. 2023 |
| CVE-2023-1101 |
SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use…
|
8.8
Élevée
|
2 mars 2023 |
| CVE-2023-0656 |
A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of…
|
Non notée
|
2 mars 2023 |
| CVE-2022-22278 |
A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the…
|
Non notée
|
27 avr. 2022 |
| CVE-2022-22277 |
A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext
|
Non notée
|
27 avr. 2022 |
| CVE-2022-22276 |
A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthorized user
|
Non notée
|
27 avr. 2022 |
| CVE-2022-22275 |
Improper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ bypassing security policy…
|
Non notée
|
27 avr. 2022 |