watchguard Vulnerability Advisory Catalog

Total 103 security vulnerabilities recorded for watchguard software and firmware.

← Back to All Vendors
CVE-2022-31789 CRITICAL
Component: fireware

An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and potentially ex...

📅 2022-09-06
CVSS 9.8 Dossier →
Component: fireware

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malic...

📅 2022-09-06
CVSS 7.5 Dossier →
CVE-2022-25361 CRITICAL
Component: fireware

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the syst...

📅 2022-06-07
CVSS 9.1 Dossier →
CVE-2022-26318 CRITICAL
Component: fireware

On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS be...

📅 2022-03-04
CVSS 9.8 Dossier →
Component: fireware

WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to modify privileged management user creden...

📅 2022-02-24
CVSS 6.5 Dossier →
Component: fireware

WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to upload files to arbitrary locations. Thi...

📅 2022-02-24
CVSS 8.8 Dossier →
Component: fireware

A systemd stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrar...

📅 2022-02-24
CVSS 8.8 Dossier →
Component: fireware

A wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrar...

📅 2022-02-24
CVSS 8.8 Dossier →
Component: fireware

An integer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to trigger a heap-based buffer overflow and poten...

📅 2022-02-24
CVSS 8.8 Dossier →
Component: fireware

WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to retrieve certificate private keys. This ...

📅 2022-02-24
CVSS 6.5 Dossier →
Component: fireware

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session ...

📅 2022-02-24
CVSS 8.8 Dossier →
Component: panda_antivirus

This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Free Antivirus 20.2.0.0. An attacker must...

📅 2022-01-13
CVSS 7.8 Dossier →
Component: ad_helper_firmware

The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI....

📅 2020-03-12
CVSS 7.5 Dossier →
CVE-2014-6413 MEDIUM
Component: fireware_xtm

A Cross-site Scripting (XSS) vulnerability exists in WatchGuard XTM 11.8.3 via the poll_name parameter in the firewall/policy script....

📅 2020-02-07
CVSS 6.1 Dossier →
Component: xmt515_firmware

A DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3, allowing a remote attacker to execute JavaScript in the vic...

📅 2020-01-07
CVSS 6.1 Dossier →
CVE-2016-6154 MEDIUM
Component: fireware

The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS (this can also cause an open redirect)....

📅 2019-08-23
CVSS 6.1 Dossier →
CVE-2018-10578 CRITICAL
Component: ap200_firmware

An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. ...

📅 2018-05-02
CVSS 9.8 Dossier →
Component: ap200_firmware

An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. ...

📅 2018-05-02
CVSS 8.8 Dossier →
Component: ap200_firmware

An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Improper authentication handling by the native Ac...

📅 2018-04-30
CVSS 7.8 Dossier →
CVE-2018-10575 CRITICAL
Component: ap200_firmware

An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Hardcoded credentials exist for an unprivileged S...

📅 2018-04-30
CVSS 9.8 Dossier →
Component: hawkeye_g

Multiple cross-site request forgery (CSRF) vulnerabilities in Hexis HawkEye G 3.0.1.4912 allow remote attackers to hijack the authentication of admini...

📅 2017-10-23
CVSS 8.8 Dossier →
Component: fireware

An FBX-5312 issue was discovered in WatchGuard Fireware before 12.0. If a login attempt is made in the XML-RPC interface with an XML message containin...

📅 2017-09-20
CVSS 7.5 Dossier →
Component: fireware

An FBX-5313 issue was discovered in WatchGuard Fireware before 12.0. When a failed login attempt is made to the login endpoint of the XML-RPC interfac...

📅 2017-09-20
CVSS 6.1 Dossier →
CVE-2017-8060 MEDIUM
Component: panda_mobile_security

Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attac...

📅 2017-05-05
CVSS 5.9 Dossier →
Page 3 of 5 (103 Total Records)