Skip to contentSonicwall vulnerabilities
Products
Show 64 moreShow less
Newest
- sonicwall sma1000, sma 6200 firmware, sma 6210 firmware +3 more +5 moreSonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and...CVE-2022-17017.5 High
- sonicwall global vpn clientSonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a...CVE-2021-200517.8 High
- sonicwall sonicos, nsa 2650 firmware, nsa 2700 firmware +47 more +49 moreA vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP...CVE-2022-222787.5 High
- sonicwall sonicos, nsa 2650 firmware, nsa 2700 firmware +47 more +49 moreA vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive...CVE-2022-222775.3 Medium
- sonicwall sonicos, nsa 2650 firmware, nsa 2700 firmware +47 more +49 moreA vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an...CVE-2022-222765.3 Medium
- sonicwall sonicosImproper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ...CVE-2022-222757.5 High
- sonicwall sma 210 firmware, sma 410 firmware, sma 500v firmware +3 more +5 more** UNSUPPORTED WHEN ASSIGNED ** A post-authentication arbitrary file read vulnerability impacting...CVE-2022-222794.9 Medium
- sonicwall sonicos, sonicosv +1 moreA Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote...CVE-2022-22274Public exploitEPSS 75.5%9.8 Critical
- sonicwall sra, sma 100, sma 200 firmware +9 more +11 more** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of Special Elements leading to OS Command...CVE-2022-222739.8 Critical
- linux kernel, fedoraproject fedora, netapp h300e firmware +26 more +28 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-0847In KEVPublic exploitFix availableEPSS 92.8%7.8 High
- sonicwall sonicosA Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote...CVE-2021-200488.8 High
- sonicwall sonicosA Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote...CVE-2021-200468.8 High
- sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 moreAn Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted...CVE-2021-200507.5 High
- sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 moreA vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker...CVE-2021-200497.5 High
- apache log4j, apache software foundation log4j2, debian linux +114 more +116 moreApache Log4j2 does not always protect from infinite recursion in lookup evaluationCVE-2021-45105Public exploitFix availableEPSS 100.0%5.9 Medium
- apache log4j, log4j2, cvat computer vision annotation tool +53 more +55 moreApache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attackCVE-2021-45046In KEVPublic exploitFix availableEPSS 100.0%9.0 Critical
- apache log4j, log4j2, apple xcode +141 more +143 moreApache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpointsCVE-2021-44228In KEVPublic exploitFix availableEPSS 100.0%10.0 Critical
- sonicwall global vpn clientSonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search...CVE-2021-200477.8 High
- sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreA buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a...CVE-2021-20045EPSS 25.2%9.8 Critical
- sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreA post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote...CVE-2021-20044EPSS 40.1%8.8 High
- sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreA Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a...CVE-2021-20043EPSS 23.3%8.8 High
- sonicwall sma 200 firmware, sma 210 firmware, sma 400 firmware +3 more +5 moreAn unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary...CVE-2021-200429.8 Critical
- sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreAn unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP...CVE-2021-20041EPSS 21.2%7.5 High
- sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreA relative path traversal vulnerability in the SMA100 upload funtion allows a remote...CVE-2021-20040EPSS 25.1%7.5 High
- sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreImproper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert...CVE-2021-20039Public exploitEPSS 78.7%8.8 High
- sonicwall sma100, sma 100 appliances, sma 200 firmware +4 more +6 moreA Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module...CVE-2021-20038In KEVPublic exploitEPSS 99.9%9.8 Critical
- sonicwall sonicosA Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to...CVE-2021-20031Public exploitEPSS 13.0%6.1 Medium
- sonicwall sma100, sma100 appliances, sma 200 firmware +4 more +6 moreImproper neutralization of special elements in the SMA100 management interface allows a remote...CVE-2021-20035In KEV6.5 Medium
- sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreAn improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to...CVE-2021-20034Public exploitEPSS 81.8%9.1 Critical
- sonicwall global vpn clientSonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file...CVE-2021-200377.8 High
- sonicwall analytics, analytics on-prem +1 moreSonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol (JDWP) interface...CVE-2021-200329.8 Critical
- sonicwall secure remote access (sra), sma 210 firmware, sma 410 firmware +5 more +7 more** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of a SQL Command leading to SQL Injection...CVE-2021-20028In KEVEPSS 30.1%9.8 Critical
- debian linux, linux kernel, fedoraproject fedora +4 more +6 morefs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict...CVE-2021-33909Public exploitFix available7.8 High
- sonicwall switchMultiple Out-of-Bound read vulnerability in SonicWall Switch when handling LLDP Protocol allows...CVE-2021-200248.1 High
- sonicwall sonicos, sonicosv +1 moreA vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a...CVE-2021-200197.5 High
- sonicwall sonicosA buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service ...CVE-2021-200277.5 High
- sonicwall nsm on-prem, network security manager +1 moreA vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform...CVE-2021-20026EPSS 11.6%8.8 High
- sonicwall email security virtual applianceSonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default...CVE-2021-200257.8 High
- sonicwall email security, email security appliance 3300 firmware, email security appliance 4300 firmware +8 more +10 moreSonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post...CVE-2021-20023In KEVEPSS 51.7%4.9 Medium
- sonicwall global management system (gms), global management system +1 moreA command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker...CVE-2021-200209.8 Critical
- sonicwall email security, email security appliance 3300 firmware, email security appliance 4300 firmware +8 more +10 moreSonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post...CVE-2021-20022In KEVEPSS 16.6%7.2 High
- sonicwall email security, email security appliance 3300 firmware, email security appliance 4300 firmware +8 more +10 moreA vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an...CVE-2021-20021In KEVPublic exploitEPSS 88.8%9.8 Critical
- openssl, fedoraproject fedora, freebsd +30 more +32 moreCA certificate check bypass with X509_V_FLAG_X509_STRICTCVE-2021-3450Public exploitFix availableEPSS 18.3%7.4 High
- openssl, checkpoint multi-domain management firmware, quantum security gateway firmware +103 more +105 moreNULL pointer deref in signature_algorithms processingCVE-2021-3449Public exploitFix availableEPSS 63.5%5.9 Medium
- sonicwall sma100, sma100 firmware +1 moreA post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the...CVE-2021-200184.9 Medium
- sonicwall sma100, sma100 firmware +1 moreA post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated...CVE-2021-200178.8 High
- sonicwall directory services connectorSonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network...CVE-2020-5148Public exploit8.2 High
- sonicwall sma100, sslvpn sma100, sma 100 firmware +5 more +7 moreA SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote...CVE-2021-20016In KEVEPSS 40.0%9.8 Critical
- sonicwall netextenderSonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this...CVE-2020-5147Public exploit5.3 Medium
- sonicwall sma100, sma 100 firmware +1 moreA vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform...CVE-2020-51467.2 High
- Show moreLoading…