Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.3A vulnerability in the Cisco Industrial Ethernet Switch Device Manager (DM) of Cisco IOS Software could allow an authenticated, remote attacker to elevate privileges.EPSS 34.0%May 7, 2025
- High7.8A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to gain privileges of the root user on theEPSS 15.0%May 7, 2025
- Medium5.5A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local fEPSS 17.0%May 7, 2025
- UnknownCisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Uncontrolled Resource ConsumptionKEVApr 23, 2025
- High8.8A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the atEPSS 97.0%Apr 16, 2025
- Medium6.0A vulnerability in the web-based management interface of Cisco Secure Network Analytics could allow an authenticated, remote attacker with valid administrative credentials to execuEPSS 37.0%Apr 16, 2025
- Medium5.3A vulnerability in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to enumerate LDAP user accounts.EPSS 53.0%Apr 16, 2025
- Critical10.0Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function VulnerabilityKEVEPSS 9879.0%Apr 16, 2025
- UnknownCisco meraki_mx64_firmware Failure to Handle Missing ParameterKEVMar 31, 2025
- Medium5.8Cisco ASA and FTD Denial-of-Service VulnerabilityKEVEPSS 15.9%Oct 23, 2024
- UnknownCisco hyperflex_hx_data_platform URL Redirection to Untrusted Site ('Open Redirect')KEVOct 21, 2024
- UnknownCisco RV Series Routers Stack-based Buffer OverflowKEVSep 18, 2024
- UnknownCisco rv340w_firmware Improper Restriction of Operations within the Bounds of a Memory BufferKEVSep 18, 2024
- Critical9.8Cisco Smart Licensing Utility Static Credential VulnerabilityKEVEPSS 97.1%Sep 4, 2024
- Medium6.7Cisco NX-OS Command Injection VulnerabilityKEVEPSS 4.3%Jul 1, 2024
- UnknownCisco linksys_firmware Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVMay 22, 2024
- UnknownCisco AppDynamics Controller Directory Traversal VulnerabilityKEVMay 10, 2024
- Medium6.0Cisco ASA and FTD Privilege Escalation VulnerabilityKEVEPSS 19.4%Apr 24, 2024
- High8.6Cisco ASA and FTD Denial of Service VulnerabilityKEVEPSS 70.7%Apr 24, 2024
- UnknownCisco SD-WAN vManage Software Directory Traversal VulnerabilityKEVJan 5, 2024
- UnknownCisco RV Series Routers Unrestricted Upload of File with Dangerous TypeKEVNov 15, 2023
- UnknownCisco evolved_programmable_network_manager Improper Input ValidationKEVNov 15, 2023
- UnknownCisco RV Series Routers Exposure of Sensitive Information to an Unauthorized ActorKEVNov 15, 2023
- UnknownCisco IOS Improper AuthenticationKEVNov 15, 2023
- High7.2Cisco IOS XE Web UI Command Injection VulnerabilityKEVEPSS 89.6%Oct 16, 2023