nokia Vulnerability Advisory Catalog

Total 144 security vulnerabilities recorded for nokia software and firmware.

← Back to All Vendors
Component: netact

An issue was discovered in Nokia NetAct 18A. A malicious user can change a filename of an uploaded file to include JavaScript code, which is then stor...

📅 2021-03-25
CVSS 5.4 Dossier →
CVE-2014-3809 MEDIUM
Component: 1830_photonic_service_switch-4_firmware

Cross-site scripting (XSS) vulnerability in the management interface in Alcatel-Lucent 1830 Photonic Service Switch (PSS) 6.0 and earlier allows remot...

📅 2020-01-31
CVSS 6.1 Dossier →
Component: impact

Nokia IMPACT < 18A has path traversal that may lead to RCE if chained with CVE-2019-1743...

📅 2019-11-25
CVSS 5.3 Dossier →
Component: impact

Nokia IMPACT < 18A: allows full path disclosure...

📅 2019-11-25
CVSS 4.3 Dossier →
Component: impact

Nokia IMPACT < 18A: An unrestricted File Upload vulnerability was found that may lead to Remote Code Execution....

📅 2019-11-25
CVSS 8.8 Dossier →
CVE-2019-3922 CRITICAL
Component: i-240w-q_gpon_ont_firmware

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent...

📅 2019-03-05
CVSS 9.8 Dossier →
Component: i-240w-q_gpon_ont_firmware

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent...

📅 2019-03-05
CVSS 8.8 Dossier →
Component: i-240w-q_gpon_ont_firmware

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to authenticated command injection via crafted HTTP request s...

📅 2019-03-05
CVSS 8.8 Dossier →
Component: i-240w-q_gpon_ont_firmware

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to command injection via crafted HTTP request sent by a remot...

📅 2019-03-05
CVSS 8.8 Dossier →
CVE-2019-3918 CRITICAL
Component: i-240w-q_gpon_ont_firmware

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 contains multiple hard coded credentials for the Telnet and SSH interfaces....

📅 2019-03-05
CVSS 9.8 Dossier →
Component: i-240w-q_gpon_ont_firmware

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 allows a remote, unauthenticated attacker to enable telnetd on the router v...

📅 2019-03-05
CVSS 7.5 Dossier →
CVE-2015-6929 UNKNOWN
Component: \@vantage_commander

Multiple cross-site scripting (XSS) vulnerabilities in Nokia Networks (formerly Nokia Solutions and Networks and Nokia Siemens Networks) @vantage Comm...

📅 2015-09-16
CVSS 4.3 Dossier →
CVE-2012-2442 UNKNOWN
Component: pc_suite

Buffer overflow in the Video Manager in Nokia PC Suite 7.1.180.64 and earlier allows remote attackers to cause a denial of service via a crafted mp4 f...

📅 2012-07-25
CVSS 4.3 Dossier →
CVE-2011-1472 UNKNOWN
Component: e75_firmware

The Nokia E75 phone with firmware before 211.12.01 allows physically proximate attackers to bypass the Device Lock code by entering an unspecified but...

📅 2011-03-29
CVSS 7.2 Dossier →
CVE-2011-0498 UNKNOWN
Component: multimedia_player

Stack-based buffer overflow in Nokia Multimedia Player 1.00.55.5010, and possibly other versions, allows user-assisted remote attackers to cause a den...

📅 2011-01-20
CVSS 9.3 Dossier →
CVE-2010-3374 UNKNOWN
Component: qt_creator

Qt Creator before 2.0.1 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse sha...

📅 2010-10-04
CVSS 6.9 Dossier →
CVE-2009-4975 UNKNOWN
Component: qtdemobrowser

Cross-site scripting (XSS) vulnerability in webview.cpp in QtDemoBrowser allows remote attackers to inject arbitrary web script or HTML via a URL asso...

📅 2010-08-02
CVSS 4.3 Dossier →
CVE-2009-2538 UNKNOWN
Component: n95

The Nokia N95 running Symbian OS 9.2, N82, and N810 Internet Tablet allow remote attackers to cause a denial of service (memory consumption) via a lar...

📅 2009-07-20
CVSS 7.1 Dossier →
CVE-2009-0734 UNKNOWN
Component: nokia_pc_suite

Heap-based buffer overflow in MultimediaPlayer.exe 6.86.240.7 in Nokia PC Suite 6.86.9.3 allows remote attackers to execute arbitrary code via a long ...

📅 2009-02-25
CVSS 9.3 Dossier →
CVE-2009-0649 UNKNOWN
Component: n95

The web browser in Symbian OS on the Nokia N95 cell phone allows remote attackers to cause a denial of service (crash) via JavaScript code that calls ...

📅 2009-02-20
CVSS 7.8 Dossier →
CVE-2008-5827 UNKNOWN
Component: 6131_nfc

The Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware automatically installs software upon completing the download of a JAR file, wh...

📅 2009-01-02
CVSS 7.5 Dossier →
CVE-2008-5826 UNKNOWN
Component: 6131_nfc

The Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware allows remote attackers to cause a denial of service (device crash) via (1) a ...

📅 2009-01-02
CVSS 7.8 Dossier →
CVE-2008-5825 UNKNOWN
Component: 6131_nfc

The SmartPoster implementation on the Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware does not properly display the URI record whe...

📅 2009-01-02
CVSS 2.6 Dossier →
Page 5 of 6 (144 Total Records)