Sonicwall

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-5130 1Sonicwall 1Sonicos Jun 17, 2026 Jul 17, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper validation of the request. This vulnerability impact SonicOS version 6.5.4.4-44n and earlier.
CVE-2020-5129 1Sonicwall 1Sma1000 Firmware Jun 17, 2026 Mar 26, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote attacker to cause HTTP server crash which leads to Denial of Service. This vulnerability affected SMA1000 Version 12.1.0-0641...Show more A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote attacker to cause HTTP server crash which leads to Denial of Service. This vulnerability affected SMA1000 Version 12.1.0-06411 and earlier.Show less
CVE-2013-1359 1Sonicwall 4Analyzer Global Management SystemUniversal Management Appliance+1 more Nov 21, 2024 Feb 11, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1...Show more An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, 5.1, and 6.0 via the skipSessionCheck parameter to the UMA interface (/appliance/), which could let a remote malicious user obtain access to the root account.Show less
CVE-2013-1360 1Sonicwall 4Analyzer Global Management SystemUniversal Management Appliance+1 more Nov 21, 2024 Feb 11, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and...Show more An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0, and 6.0 via a crafted request to the SGMS interface, which could let a remote malicious user obtain administrative access.Show less
CVE-2019-7479 1Sonicwall 2Sonicos Sonicosv Jun 17, 2026 Dec 31, 2019 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode. This vulnerability affected SonicOS Gen 5 version 5.9.1.12-4o and earlier, Gen 6 version 6.2.7.4-32n, 6.5.1.4-...Show more A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode. This vulnerability affected SonicOS Gen 5 version 5.9.1.12-4o and earlier, Gen 6 version 6.2.7.4-32n, 6.5.1.4-4n, 6.5.2.3-4n, 6.5.3.3-3n, 6.2.7.10-3n, 6.4.1.0-3n, 6.5.3.3-3n, 6.5.1.9-4n and SonicOSv 6.5.0.2-8v_RC363 (VMWARE), 6.5.0.2.8v_RC367 (AZURE), SonicOSv 6.5.0.2.8v_RC368 (AWS), SonicOSv 6.5.0.2.8v_RC366 (HYPER_V).Show less
CVE-2019-7478 1Sonicwall 1Global Management System Jun 17, 2026 Dec 31, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability in GMS allow unauthenticated user to SQL injection in Webservice module. This vulnerability affected GMS versions GMS 8.4, 8.5, 8.6, 8.7, 9.0 and 9.1.
CVE-2019-7489 1Sonicwall 1Email Security Appliance Jun 17, 2026 Dec 23, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A vulnerability in SonicWall Email Security appliance allow an unauthenticated user to perform remote code execution. This vulnerability affected Email Security Appliance version 10.0.2 and earlier.
CVE-2019-7488 1Sonicwall 1Email Security Appliance Jun 17, 2026 Dec 23, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier.
CVE-2019-7487 1Sonicwall 2Sonicos Sonicos Sslvpn Nacagent Jun 17, 2026 Dec 19, 2019 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow cod...Show more Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not put the path in quotes, so if a malicious binary by an attacker within the parent path could allow code execution.Show less
CVE-2019-7486 1Sonicwall 1Sma 100 Firmware Jun 17, 2026 Dec 19, 2019 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.4 and earlier.
CVE-2019-7485 1Sonicwall 1Sma 100 Firmware Jun 17, 2026 Dec 19, 2019 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Buffer overflow in SonicWall SMA100 allows an authenticated user to execute arbitrary code in DEARegister CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.
CVE-2019-7484 1Sonicwall 1Sma 100 Firmware Jun 17, 2026 Dec 19, 2019 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Authenticated SQL Injection in SonicWall SMA100 allow user to gain read-only access to unauthorized resources using viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.
CVE-2019-7483 1Sonicwall 1Sma 100 Firmware Jun 17, 2026 Dec 19, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.
CVE-2019-7482 1Sonicwall 1Sma 100 Firmware Jun 17, 2026 Dec 19, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Stack-based buffer overflow in SonicWall SMA100 allows an unauthenticated user to execute arbitrary code in function libSys.so. This vulnerability impacted SMA100 version 9.0.0.3 and earlier.
CVE-2019-7481 1Sonicwall 1Sma 100 Firmware Aug 12, 2026 Dec 17, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier.
CVE-2019-12261 6Belden NetappOracle+3 more 13Communications Eagle E Series Santricity Os ControllerGarrettcom Magnum Dx940e Firmware+10 more Jun 17, 2026 Aug 9, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect() to a remote host.
CVE-2019-12260 6Belden NetappOracle+3 more 13Communications Eagle E Series Santricity Os ControllerGarrettcom Magnum Dx940e Firmware+10 more Jun 17, 2026 Aug 9, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion caused by a malformed TCP AO option.
CVE-2019-12258 5Belden NetappSiemens+2 more 12E Series Santricity Os Controller Garrettcom Magnum Dx940e FirmwareHirschmann Hios+9 more Jun 17, 2026 Aug 9, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options.
CVE-2019-12255 5Belden NetappSiemens+2 more 12E Series Santricity Os Controller Garrettcom Magnum Dx940e FirmwareHirschmann Hios+9 more Jun 17, 2026 Aug 9, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.
CVE-2019-12265 5Belden NetappSiemens+2 more 12E Series Santricity Os Controller Garrettcom Magnum Dx940e FirmwareHirschmann Hios+9 more Jun 17, 2026 Aug 9, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report.

Previous 1...8910 11 12 Next