Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- UnknownCisco Unified IP Conference Station 7937G Crafted Packets Remote Denial of ServiceKEVJun 8, 2025
- UnknownCisco Smart Licensing Utility Insertion of Sensitive Information into Log FileKEVJun 7, 2025
- UnknownCisco secure_firewall_threat_defense Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVMay 22, 2025
- UnknownCisco IOS HTTP Server '?/' String VulnerabilityKEVMay 22, 2025
- UnknownCisco ios_xe Double FreeKEVMay 16, 2025
- UnknownCisco ios_xe Use of Hard-coded CredentialsKEVMay 16, 2025
- Medium5.4A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack againstEPSS 33.0%May 7, 2025
- Medium6.7A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sEPSS 17.0%May 7, 2025
- Medium6.7A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sEPSS 17.0%May 7, 2025
- Medium4.6A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sEPSS 17.0%May 7, 2025
- Medium4.6A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sEPSS 17.0%May 7, 2025
- Medium6.7A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sEPSS 17.0%May 7, 2025
- High8.8A vulnerability in the web-based management interface of the Wireless LAN Controller feature of Cisco IOS XE Software could allow an authenticated, remote attacker with a lobby ambEPSS 91.0%May 7, 2025
- Medium6.0A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an authenticated, local attacker to write arbitrary files to an affected system.EPSS 17.0%May 7, 2025
- High8.3A vulnerability in the Cisco Industrial Ethernet Switch Device Manager (DM) of Cisco IOS Software could allow an authenticated, remote attacker to elevate privileges.EPSS 34.0%May 7, 2025
- High7.8A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to gain privileges of the root user on theEPSS 15.0%May 7, 2025
- Medium5.5A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local fEPSS 17.0%May 7, 2025
- UnknownCisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Uncontrolled Resource ConsumptionKEVApr 23, 2025
- High8.8A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the atEPSS 97.0%Apr 16, 2025
- Medium6.0A vulnerability in the web-based management interface of Cisco Secure Network Analytics could allow an authenticated, remote attacker with valid administrative credentials to execuEPSS 37.0%Apr 16, 2025
- Medium5.3A vulnerability in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to enumerate LDAP user accounts.EPSS 53.0%Apr 16, 2025
- Critical10.0Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function VulnerabilityKEVEPSS 9879.0%Apr 16, 2025
- UnknownCisco meraki_mx64_firmware Failure to Handle Missing ParameterKEVMar 31, 2025
- Medium5.8Cisco ASA and FTD Denial-of-Service VulnerabilityKEVEPSS 15.9%Oct 23, 2024
- UnknownCisco hyperflex_hx_data_platform URL Redirection to Untrusted Site ('Open Redirect')KEVOct 21, 2024