Firewalls, VPNs & network gear
28 flaws exploited in the last 90 days, 6 of them new or urgent. Each links to a plain-English page: who's affected and exactly what to update.
See it on the live board RSS feed Deadline calendar
- Ivanti Connect SecureAn Ivanti VPN flaw lets attackers in without a password
- Cisco Secure Firewall Management CenterRansomware groups are exploiting a perfect-10 Cisco firewall flaw
- Citrix NetScalerA Citrix NetScaler login bypass has no workaround
- Fortinet FortiGateAttackers are hijacking unpatched FortiGate firewalls at scale
- Arista VeloCloud OrchestratorArista VeloCloud Orchestrator SQL Injection Vulnerability
- Fortinet Multiple ProductsFortinet Multiple Products Path Traversal Vulnerability
- Cisco Secure Email GatewayCisco Secure Email Gateway Relative Path Traversal Vulnerability
- Palo Alto Networks PAN-OSPalo Alto Networks PAN-OS Code Injection Vulnerability
- Citrix NetScalerCitrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- Fortinet FortiMailFortinet FortiMail Path Traversal Vulnerability
- Cisco Catalyst SD-WAN ManagerCisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
- Citrix NetScalerCitrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- Citrix NetScalerCitrix NetScaler Improper Input Validation Vulnerability
- MikroTik RouterOSMikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
- F5 BIG-IP APMF5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
- Arista VeloCloud OrchestratorArista VeloCloud Orchestrator Improper Input Validation Vulnerability
- Check Point Multiple ProductsCheck Point Multiple Products Path Traversal Vulnerability
- Check Point Multiple ProductsCheck Point Multiple Products Improper Certificate Validation Vulnerability
- Zyxel GS1900 Series SwitchesZyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
- Cisco Identity Services EngineCisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
- Cisco Secure Email GatewayCisco Secure Email Gateway SQL Injection Vulnerability
- MikroTik RouterOSMikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
- MikroTik RouterOSMikroTik RouterOS Missing Authentication for Critical Function Vulnerability
- SonicWall SMA1000 AppliancesSonicWall SMA1000 Appliances OS Command Injection Vulnerability
- SonicWall SMA1000 AppliancesSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
- Citrix NetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability
- Progress LoadMasterProgress LoadMaster Command Injection Vulnerability