Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2727▼ 513 respecto a la semana anterior
Críticas / altas1294▼ 200 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior
341 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.8) | 0.91% | — | Cisco Firepower 9300 FirmwareCisco Secure Firewall Threat DefenseCisco Firepower Extensible Operating System | 2/10/2019 | 11/8/2026 | Multiple vulnerabilities in the CLI of Cisco FXOS Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute commands on the underlying operating system (OS) with root privileges. These vulnerabilities are due to insufficient input validation. An attacker could… | |
| Modificada | Alta (7.5) | 2.0% | — | Cisco Adaptive Security ApplianceCisco Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense | 2/10/2019 | 11/8/2026 | A vulnerability in the WebVPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause increased CPU utilization on an affected device. The vulnerability is due to excessive processing load for a specific… | |
| Modificada | Media (6.1) | 1.1% | — | Cisco Adaptive Security ApplianceCisco Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense | 2/10/2019 | 11/8/2026 | A vulnerability in the Clientless SSL VPN (WebVPN) portal of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected… | |
| Modificada | Media (6.7) | 0.79% | — | Cisco Secure Firewall Threat Defense | 2/10/2019 | 11/8/2026 | A vulnerability in the command line interface (CLI) of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker with administrative privileges to execute commands on the underlying operating system with root privileges. The vulnerability is due to insufficient input validation. An… | |
| Modificada | Alta (7.5) | 1.8% | — | Cisco Adaptive Security ApplianceCisco Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense | 2/10/2019 | 11/8/2026 | A vulnerability in the Session Initiation Protocol (SIP) inspection module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due… | |
| Modificada | Alta (7.4) | 0.51% | — | Cisco Adaptive Security ApplianceCisco Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense | 2/10/2019 | 11/8/2026 | A vulnerability in the Open Shortest Path First (OSPF) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The… | |
| Modificada | Alta (8.8) | 0.74% | — | Cisco Secure Firewall Threat DefenseCisco Firepower 9300 FirmwareCisco Firepower 4115 FirmwareCisco Firepower 4125 Firmware+5 | 2/10/2019 | 11/8/2026 | Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and execute commands with root privileges in the host namespace. These vulnerabilities are due to insufficient protections… | |
| Modificada | Alta (8.2) | 0.79% | — | Cisco Secure Firewall Threat DefenseCisco Firepower 9300 FirmwareCisco Firepower 4115 FirmwareCisco Firepower 4125 Firmware+5 | 2/10/2019 | 11/8/2026 | Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and execute commands with root privileges in the host namespace. These vulnerabilities are due to insufficient protections… | |
| Modificada | Alta (7.5) | 1.8% | — | Cisco Adaptive Security ApplianceCisco Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense | 2/10/2019 | 11/8/2026 | A vulnerability in the FTP inspection engine of Cisco Adaptive Security (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient validation of FTP data.… | |
| Modificada | Alta (7.5) | 2.4% | — | Mcafee Active ResponseMcafee Advanced Threat DefenseMcafee Enterprise Security ManagerMcafee WEB Gateway | 11/9/2019 | 17/6/2026 | McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This affects the scanning proxies. | |
| Modificada | Alta (7.5) | 2.4% | — | Mcafee Active ResponseMcafee Advanced Threat DefenseMcafee Enterprise Security ManagerMcafee WEB Gateway | 11/9/2019 | 17/6/2026 | McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of service. This affects the scanning proxies. | |
| Modificada | Alta (7.5) | 1.2% | — | Cisco Secure Firewall Threat Defense | 21/8/2019 | 11/8/2026 | A vulnerability in the application policy configuration of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data. The vulnerability is due to insufficient application identification. An attacker could exploit this… | |
| Modificada | Alta (7.5) | 1.5% | — | Cisco Secure Firewall Management CenterCisco Secure Firewall Threat Defense | 8/8/2019 | 11/8/2026 | A vulnerability in the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) protocol inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the configured file policies on an affected system. The vulnerability is due to errors when handling… | |
| Modificada | Alta (7.5) | 1.7% | — | Cisco Adaptive Security Appliance Device ManagerCisco Secure Firewall Threat Defense | 3/5/2019 | 11/8/2026 | A vulnerability in the Deterministic Random Bit Generator (DRBG), also known as Pseudorandom Number Generator (PRNG), used in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a cryptographic collision, enabling… | |
| Modificada | Alta (8.6) | 2.0% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 3/5/2019 | 11/8/2026 | A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 Single Sign-On (SSO) for Clientless SSL VPN (WebVPN) and AnyConnect Remote Access VPN in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote… | |
| Modificada | Alta (7.8) | 0.68% | — | Cisco Secure Firewall Management CenterCisco Secure Firewall Threat Defense | 3/5/2019 | 11/8/2026 | A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting commands into arguments for a specific… | |
| Modificada | Alta (8.6) | 2.1% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 3/5/2019 | 11/8/2026 | A vulnerability in the Internet Key Exchange Version 2 Mobility and Multihoming Protocol (MOBIKE) feature for the Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device… | |
| Modificada | Alta (7.5) | 2.3% | — | Cisco Secure Firewall Threat Defense | 3/5/2019 | 11/8/2026 | Multiple vulnerabilities in the Server Message Block (SMB) Protocol preprocessor detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, adjacent or remote attacker to cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details… | |
| Modificada | Alta (8.6) | 2.9% | — | Cisco Secure Firewall Threat Defense | 3/5/2019 | 11/8/2026 | A vulnerability in the internal packet-processing functionality of Cisco Firepower Threat Defense (FTD) Software for the Cisco Firepower 2100 Series could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service (DoS) condition. The… | |
| Modificada | Media (4.8) | 0.87% | — | Cisco Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense | 3/5/2019 | 11/8/2026 | Multiple vulnerabilities in the WebVPN service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the WebVPN portal of an affected device. The… | |
| Modificada | Alta (7.5) | 2.0% | — | Cisco Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense | 3/5/2019 | 11/8/2026 | A vulnerability in the implementation of the Lightweight Directory Access Protocol (LDAP) feature in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS)… | |
| Modificada | Alta (7.4) | 1.8% | — | Cisco Secure Firewall Management CenterCisco Secure Firewall Threat Defense | 3/5/2019 | 11/8/2026 | Multiple vulnerabilities in the Server Message Block (SMB) Protocol preprocessor detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, adjacent or remote attacker to cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details… | |
| Modificada | Media (6.5) | 0.71% | — | Cisco Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense | 3/5/2019 | 11/8/2026 | A vulnerability in the detection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to send data directly to the kernel of an affected device. The vulnerability exists because the software improperly filters… | |
| Modificada | Alta (8.6) | 2.5% | — | Cisco Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense | 3/5/2019 | 11/8/2026 | A vulnerability in the TCP processing engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to the… | |
| Modificada | Media (6.5) | 2.0% | — | Cisco Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense | 3/5/2019 | 11/8/2026 | A vulnerability in the WebVPN service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper management of authenticated… |