Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- UnknownCisco unified_ip_interactive_voice_response Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVJul 31, 2025
- Critical10.0Cisco Identity Services Engine Injection VulnerabilityKEVEPSS 68.0%Jul 16, 2025
- UnknownCisco Identity Services Engine Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVJul 16, 2025
- Critical9.8Fortinet FortiWeb SQL Injection VulnerabilityKEVEPSS 99.8%Jul 11, 2025
- Critical10.0Cisco Identity Services Engine Injection VulnerabilityKEVEPSS 97.6%Jun 25, 2025
- UnknownCisco wvc54gca Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVJun 16, 2025
- UnknownCisco ios_xe Use of Hard-coded CredentialsKEVJun 10, 2025
- UnknownCisco Unified IP Conference Station 7937G Crafted Packets Remote Denial of ServiceKEVJun 8, 2025
- UnknownCisco Smart Licensing Utility Insertion of Sensitive Information into Log FileKEVJun 7, 2025
- UnknownCisco secure_firewall_threat_defense Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVMay 22, 2025
- UnknownCisco IOS HTTP Server '?/' String VulnerabilityKEVMay 22, 2025
- UnknownCisco ios_xe Double FreeKEVMay 16, 2025
- UnknownCisco ios_xe Use of Hard-coded CredentialsKEVMay 16, 2025
- Medium5.4A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack againstEPSS 33.0%May 7, 2025
- Medium6.7A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sEPSS 17.0%May 7, 2025
- Medium6.7A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sEPSS 17.0%May 7, 2025
- Medium4.6A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sEPSS 17.0%May 7, 2025
- Medium4.6A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sEPSS 17.0%May 7, 2025
- Medium6.7A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sEPSS 17.0%May 7, 2025
- High8.8A vulnerability in the web-based management interface of the Wireless LAN Controller feature of Cisco IOS XE Software could allow an authenticated, remote attacker with a lobby ambEPSS 91.0%May 7, 2025
- Medium6.0A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an authenticated, local attacker to write arbitrary files to an affected system.EPSS 17.0%May 7, 2025
- High8.3A vulnerability in the Cisco Industrial Ethernet Switch Device Manager (DM) of Cisco IOS Software could allow an authenticated, remote attacker to elevate privileges.EPSS 34.0%May 7, 2025
- High7.8A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to gain privileges of the root user on theEPSS 15.0%May 7, 2025
- Medium5.5A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local fEPSS 17.0%May 7, 2025
- UnknownCisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Uncontrolled Resource ConsumptionKEVApr 23, 2025