Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2739▼ 491 respecto a la semana anterior
Críticas / altas1301▼ 189 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior
309 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.8) | 0.90% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance SoftwareCisco Firepower Extensible Operating SystemCisco UCS Manager | 26/2/2020 | 11/8/2026 | A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS). The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including… | |
| Modificada | Media (6.7) | 0.29% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance SoftwareCisco Firepower Extensible Operating System | 26/2/2020 | 11/8/2026 | A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to read or write arbitrary files on the underlying operating system (OS). The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including crafted arguments to a specific… | |
| Modificada | Media (5.3) | 0.97% | — | Cisco Firepower Services Software FOR ASACisco Secure Firewall Management CenterCisco Secure Firewall Threat Defense | 5/11/2019 | 11/8/2026 | A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to improper handling of… | |
| Modificada | Media (5.8) | 1.0% | — | Cisco Firepower Services Software FOR ASACisco Secure Firewall Management CenterCisco Secure Firewall Threat Defense | 5/11/2019 | 11/8/2026 | A vulnerability in the normalization functionality of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to insufficient… | |
| Modificada | Media (5.3) | 0.97% | — | Cisco Firepower Services Software FOR ASACisco Secure Firewall Management CenterCisco Secure Firewall Threat Defense | 5/11/2019 | 11/8/2026 | A vulnerability in the protocol detection component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to improper detection of… | |
| Modificada | Media (5.8) | 9.4% | 💥 Exploit | Cisco Firepower Services Software FOR ASACisco Secure Firewall Management CenterCisco Secure Firewall Threat Defense | 5/11/2019 | 11/8/2026 | A vulnerability in the stream reassembly component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to improper reassembly of… | |
| Modificada | Alta (8.6) | 2.0% | — | Cisco Adaptive Security Appliance SoftwareCisco Secure Firewall Threat DefenseCisco ASA 5505 FirmwareCisco ASA 5510 Firmware+9 | 2/10/2019 | 11/8/2026 | A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The… | |
| Modificada | Media (6.5) | 1.9% | — | Cisco Firepower 9300 FirmwareCisco Firepower Extensible Operating SystemCisco Secure Firewall Management CenterCisco Secure Firewall Threat Defense | 2/10/2019 | 11/8/2026 | A vulnerability in the configuration of the Pluggable Authentication Module (PAM) used in Cisco Firepower Threat Defense (FTD) Software, Cisco Firepower Management Center (FMC) Software, and Cisco FXOS Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The… | |
| Modificada | Alta (7.8) | 0.91% | — | Cisco Firepower 9300 FirmwareCisco Secure Firewall Threat DefenseCisco Firepower Extensible Operating System | 2/10/2019 | 11/8/2026 | Multiple vulnerabilities in the CLI of Cisco FXOS Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute commands on the underlying operating system (OS) with root privileges. These vulnerabilities are due to insufficient input validation. An attacker could… | |
| Modificada | Alta (7.5) | 2.0% | — | Cisco Adaptive Security ApplianceCisco Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense | 2/10/2019 | 11/8/2026 | A vulnerability in the WebVPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause increased CPU utilization on an affected device. The vulnerability is due to excessive processing load for a specific… | |
| Modificada | Media (6.1) | 1.1% | — | Cisco Adaptive Security ApplianceCisco Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense | 2/10/2019 | 11/8/2026 | A vulnerability in the Clientless SSL VPN (WebVPN) portal of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected… | |
| Modificada | Media (6.7) | 0.79% | — | Cisco Secure Firewall Threat Defense | 2/10/2019 | 11/8/2026 | A vulnerability in the command line interface (CLI) of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker with administrative privileges to execute commands on the underlying operating system with root privileges. The vulnerability is due to insufficient input validation. An… | |
| Modificada | Alta (7.5) | 1.8% | — | Cisco Adaptive Security ApplianceCisco Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense | 2/10/2019 | 11/8/2026 | A vulnerability in the Session Initiation Protocol (SIP) inspection module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due… | |
| Modificada | Alta (7.4) | 0.51% | — | Cisco Adaptive Security ApplianceCisco Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense | 2/10/2019 | 11/8/2026 | A vulnerability in the Open Shortest Path First (OSPF) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The… | |
| Modificada | Alta (8.8) | 0.74% | — | Cisco Secure Firewall Threat DefenseCisco Firepower 9300 FirmwareCisco Firepower 4115 FirmwareCisco Firepower 4125 Firmware+5 | 2/10/2019 | 11/8/2026 | Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and execute commands with root privileges in the host namespace. These vulnerabilities are due to insufficient protections… | |
| Modificada | Alta (8.2) | 0.79% | — | Cisco Secure Firewall Threat DefenseCisco Firepower 9300 FirmwareCisco Firepower 4115 FirmwareCisco Firepower 4125 Firmware+5 | 2/10/2019 | 11/8/2026 | Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and execute commands with root privileges in the host namespace. These vulnerabilities are due to insufficient protections… | |
| Modificada | Alta (7.5) | 1.8% | — | Cisco Adaptive Security ApplianceCisco Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense | 2/10/2019 | 11/8/2026 | A vulnerability in the FTP inspection engine of Cisco Adaptive Security (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient validation of FTP data.… | |
| Modificada | Alta (7.5) | 1.2% | — | Cisco Secure Firewall Threat Defense | 21/8/2019 | 11/8/2026 | A vulnerability in the application policy configuration of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data. The vulnerability is due to insufficient application identification. An attacker could exploit this… | |
| Modificada | Alta (7.5) | 1.5% | — | Cisco Secure Firewall Management CenterCisco Secure Firewall Threat Defense | 8/8/2019 | 11/8/2026 | A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) protocol inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the configured file policies on an affected system. The vulnerability is due to errors when handling… | |
| Modificada | Alta (7.5) | 1.7% | — | Cisco Adaptive Security Appliance Device ManagerCisco Secure Firewall Threat Defense | 3/5/2019 | 11/8/2026 | A vulnerability in the Deterministic Random Bit Generator (DRBG), also known as Pseudorandom Number Generator (PRNG), used in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a cryptographic collision, enabling… | |
| Modificada | Alta (8.6) | 2.0% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 3/5/2019 | 11/8/2026 | A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 Single Sign-On (SSO) for Clientless SSL VPN (WebVPN) and AnyConnect Remote Access VPN in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… | |
| Modificada | Alta (7.8) | 0.68% | — | Cisco Secure Firewall Management CenterCisco Secure Firewall Threat Defense | 3/5/2019 | 11/8/2026 | A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting commands into arguments for a specific… | |
| Modificada | Alta (8.6) | 2.1% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 3/5/2019 | 11/8/2026 | A vulnerability in the Internet Key Exchange Version 2 Mobility and Multihoming Protocol (MOBIKE) feature for the Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device… | |
| Modificada | Alta (7.5) | 2.3% | — | Cisco Secure Firewall Threat Defense | 3/5/2019 | 11/8/2026 | Multiple vulnerabilities in the Server Message Block (SMB) Protocol preprocessor detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, adjacent or remote attacker to cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details… | |
| Modificada | Alta (8.6) | 2.9% | — | Cisco Secure Firewall Threat Defense | 3/5/2019 | 11/8/2026 | A vulnerability in the internal packet-processing functionality of Cisco Firepower Threat Defense (FTD) Software for the Cisco Firepower 2100 Series could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service (DoS) condition. The… |