Skip to contentSonicwall vulnerabilities
Products
Show 64 moreShow less
Newest
- sonicwall email securityAn improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in...CVE-2024-223984.9 Medium
- sonicwall sonicosImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the...CVE-2024-223978.3 High
- sonicwall sonicosAn Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker...CVE-2024-223965.3 Medium
- sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreImproper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office...CVE-2024-223956.3 Medium
- sonicwall sonicosAn improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature...CVE-2024-223949.8 Critical
- sonicwall capture client, netextender +1 moreSonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions...CVE-2023-63405.5 Medium
- sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreImproper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated...CVE-2023-59708.8 High
- sonicwall sma100, sma100 appliances, sma 200 firmware +4 more +6 moreImproper neutralization of special elements in the SMA100 SSL-VPN management interface allows a...CVE-2023-44221In KEVEPSS 76.2%7.2 High
- sonicwall netextenderSonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL...CVE-2023-442207.3 High
- sonicwall directory services connectorA local privilege escalation vulnerability in SonicWall Directory Services Connector Windows MSI...CVE-2023-442197.8 High
- sonicwall sonicosSonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN...CVE-2023-417158.8 High
- sonicwall sonicosSonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo function.CVE-2023-417137.5 High
- sonicwall sonicosSonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs...CVE-2023-417126.5 Medium
- sonicwall sonicosSonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs...CVE-2023-417116.5 Medium
- sonicwall sonicosSonicOS p
ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml,...CVE-2023-392806.5 Medium
- sonicwall sonicosSonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData...CVE-2023-392796.5 Medium
- sonicwall sonicosSonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow...CVE-2023-392786.5 Medium
- sonicwall sonicosSonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and...CVE-2023-392776.5 Medium
- sonicwall sonicosSonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList...CVE-2023-392766.5 Medium
- sonicwall netextenderA flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain...CVE-2023-442188.8 High
- sonicwall netextenderA local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2...CVE-2023-442177.8 High
- sonicwall analytics, gms, global management system +2 moreSonicWall GMS and Analytics CAS Web Services application use static values for authentication...CVE-2023-341379.8 Critical
- sonicwall analytics, gms, global management system +2 moreVulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a...CVE-2023-341369.8 Critical
- sonicwall analytics, gms, global management system +2 morePath Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated...CVE-2023-341356.5 Medium
- sonicwall analytics, gms, global management system +2 moreExposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and...CVE-2023-341346.5 Medium
- sonicwall analytics, gms, global management system +2 moreImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...CVE-2023-34133Public exploitEPSS 72.8%7.5 High
- sonicwall analytics, gms, global management system +2 moreUse of password hash instead of password for authentication vulnerability in SonicWall GMS and...CVE-2023-34132Public exploit9.8 Critical
- sonicwall analytics, gms, global management system +2 moreExposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and...CVE-2023-341315.3 Medium
- sonicwall analytics, gms, global management system +2 moreSonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to...CVE-2023-341309.8 Critical
- sonicwall analytics, gms, global management system +2 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...CVE-2023-34129EPSS 41.4%8.8 High
- sonicwall analytics, gms, global management system +2 moreTomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file....CVE-2023-341289.8 Critical
- sonicwall analytics, gms, global management system +2 moreImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')...CVE-2023-34127Public exploitEPSS 85.8%8.8 High
- sonicwall analytics, gms, global management system +2 moreVulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on...CVE-2023-341268.8 High
- sonicwall analytics, gms, global management system +2 morePath Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read...CVE-2023-34125EPSS 23.6%6.5 Medium
- sonicwall analytics, gms, global management system +2 moreThe authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks,...CVE-2023-34124Public exploitEPSS 50.5%9.8 Critical
- sonicwall analytics, gms, global management system +2 moreUse of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This...CVE-2023-341237.5 High
- ieee 802.11, sonicwall soho 250 firmware, soho 250w firmware +27 more +29 moreThe IEEE 802.11 specifications through 802.11ax allow physically proximate attackers to intercept...CVE-2022-47522Public exploit7.5 High
- sonicwall sonicosSonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an...CVE-2023-11018.8 High
- sonicwall sonicosA Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated...CVE-2023-0656Public exploitEPSS 41.3%7.5 High
- sonicwall email securitySonicWall Email Security contains a vulnerability that could permit a remote unauthenticated...CVE-2023-06555.3 Medium
- sonicwall sma1000 firmware, sma1000 +1 morePre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows...CVE-2023-0126EPSS 72.7%7.5 High
- sonicwall gms, global management system +1 moreSonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker...CVE-2021-200307.5 High
- sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreA Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote...CVE-2022-29158.8 High
- sonicwall hosted email security, email security +1 moreImproperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads...CVE-2022-23247.5 High
- sonicwall analytics, analytics on-prem, gms +1 more +3 moreImproper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL...CVE-2022-222809.8 Critical
- sonicwall switch, sws12-10fpoe firmware, sws12-8 firmware +5 more +7 moreImproper neutralization of special elements used in a user input allows an authenticated...CVE-2022-23238.8 High
- sonicwall sma100, sma 210 firmware, sma 410 firmware +1 more +3 moreImproper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management...CVE-2022-1703EPSS 13.0%8.8 High
- sonicwall sma1000, sma 6200 firmware, sma 6210 firmware +3 more +5 moreSonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts...CVE-2022-222829.8 Critical
- sonicwall netextender, netextender windows (32 and 64 bit) client +1 moreA buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64...CVE-2022-222817.8 High
- sonicwall sma1000, sma 6200 firmware, sma 6210 firmware +3 more +5 moreSonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions accept a user...CVE-2022-17026.1 Medium
- Show moreLoading…