sonicwall Vulnerability Advisory Catalog

Total 208 security vulnerabilities recorded for sonicwall software and firmware.

← Back to All Vendors
CVE-2010-2583 UNKNOWN
Component: ssl-vpn_end-point_interrogator\/installer_activex_control

Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control (Aventail.EPInstaller) before 10.5.2 and 10.0.5 hotf...

📅 2010-11-03
CVSS 9.3 Dossier →
CVE-2008-4918 UNKNOWN
Component: sonicos_enhanced

Cross-site scripting (XSS) vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, allows remote...

📅 2008-11-04
CVSS 4.3 Dossier →
CVE-2008-2162 UNKNOWN
Component: e-mail_security

Cross-site scripting (XSS) vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host...

📅 2008-05-12
CVSS 4.3 Dossier →
CVE-2007-6273 UNKNOWN
Component: global_vpn_client

Multiple format string vulnerabilities in the configuration file in SonicWALL GLobal VPN Client 3.1.556 and 4.0.0.810 allow user-assisted remote attac...

📅 2007-12-07
CVSS 9.3 Dossier →
CVE-2007-5815 UNKNOWN
Component: ssl_vpn_200

Absolute path traversal vulnerability in the WebCacheCleaner ActiveX control 1.3.0.3 in SonicWall SSL-VPN 200 before 2.1, and SSL-VPN 2000/4000 before...

📅 2007-11-05
CVSS 10.0 Dossier →
CVE-2007-5814 UNKNOWN
Component: ssl_vpn

Multiple buffer overflows in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allow remote a...

📅 2007-11-05
CVSS 9.3 Dossier →
CVE-2007-5603 UNKNOWN
Component: ssl_vpn

Stack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allows remot...

📅 2007-11-05
CVSS 9.3 Dossier →
CVE-2005-1006 UNKNOWN
Component: soho_firmware

Multiple cross-site scripting (XSS) vulnerabilities in SonicWALL SOHO 5.1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) th...

📅 2005-05-02
CVSS 4.3 Dossier →
CVE-2003-1490 UNKNOWN
Component: pro100

SonicWall Pro running firmware 6.4.0.1 allows remote attackers to cause a denial of service (device reset) via a long HTTP POST to the internal interf...

📅 2003-12-31
CVSS 7.8 Dossier →
CVE-2003-1320 UNKNOWN
Component: firmware

SonicWALL firmware before 6.4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Ex...

📅 2003-12-31
CVSS 5.1 Dossier →
CVE-2002-2341 UNKNOWN
Component: soho3

Cross-site scripting (XSS) vulnerability in content blocking in SonicWALL SOHO3 6.3.0.0 allows remote attackers to inject arbitrary web script or HTML...

📅 2002-12-31
CVSS 4.3 Dossier →
CVE-2002-2181 UNKNOWN
Component: content_filtering

SonicWall Content Filtering allows local users to access prohibited web sites via requests to the web site's IP address instead of the domain name....

📅 2002-12-31
CVSS 5.0 Dossier →
CVE-2001-1104 UNKNOWN
Component: soho_firmware

SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions....

📅 2001-07-25
CVSS 7.5 Dossier →
CVE-2001-0376 UNKNOWN
Component: soho2

SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use of full 128 byte IKE pre-shared...

📅 2001-06-18
CVSS 7.5 Dossier →
CVE-2000-1098 UNKNOWN
Component: soho_firewall

The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request....

📅 2001-01-09
CVSS 5.0 Dossier →
CVE-2000-1097 UNKNOWN
Component: soho_firewall

The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authentication page....

📅 2001-01-09
CVSS 5.0 Dossier →
Page 9 of 9 (208 Total Records)