Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2730▼ 551 respecto a la semana anterior
Críticas / altas1294▼ 234 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior
610 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.1) | 0.52% | — | Cisco IOS XE | 5/10/2018 | 17/6/2026 | A vulnerability in the errdisable per VLAN feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause the device to crash, leading to a denial of service (DoS) condition. The vulnerability is due to a race condition that occurs when the VLAN and port enter an errdisabled state,… | |
| Modificada | Media (6.7) | 0.49% | — | Cisco IOS XE | 5/10/2018 | 17/6/2026 | A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability exist because the affected software improperly sanitizes command arguments, failing to prevent access… | |
| Modificada | Media (5.9) | 14% | — | Cisco IOS XE | 5/10/2018 | 17/6/2026 | A vulnerability in the Network Address Translation (NAT) Session Initiation Protocol (SIP) Application Layer Gateway (ALG) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper processing of SIP packets in transit while NAT… | |
| Modificada | Alta (7.4) | 0.86% | — | Cisco IOSCisco IOS XE | 5/10/2018 | 17/6/2026 | A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation when handling Cluster Management… | |
| Modificada | Alta (8.6) | 16% | — | Cisco IOS XE | 5/10/2018 | 17/6/2026 | A vulnerability in the IPsec driver code of multiple Cisco IOS XE Software platforms and the Cisco ASA 5500-X Series Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to improper processing of malformed IPsec Authentication Header… | |
| Modificada | Alta (7.4) | 0.85% | — | Cisco IOS XE | 5/10/2018 | 17/6/2026 | A vulnerability in the Cisco Discovery Protocol (CDP) module of Cisco IOS XE Software Releases 16.6.1 and 16.6.2 could allow an unauthenticated, adjacent attacker to cause a memory leak that may lead to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain CDP packets. An… | |
| Modificada | Alta (8.6) | 4.4% | — | Cisco IOS XE | 5/10/2018 | 17/6/2026 | A vulnerability in the web framework of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a buffer overflow condition on an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to the affected software improperly parsing malformed HTTP packets that… | |
| Modificada | Media (6.8) | 3.1% | — | Cisco IOS XE | 5/10/2018 | 17/6/2026 | A vulnerability in the web user interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a double-free-in-memory handling by the affected software when specific HTTP requests are processed. An attacker could exploit this… | |
| Modificada | Alta (8.6) | 3.8% | — | Cisco IOS XE | 5/10/2018 | 17/6/2026 | A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of specific IPv6 hop-by-hop options. An attacker could exploit this vulnerability by sending a malicious IPv6 packet… | |
| Modificada | Media (6.5) | 0.95% | — | Cisco IOSCisco IOS XE | 5/10/2018 | 17/6/2026 | A vulnerability in the Open Shortest Path First version 3 (OSPFv3) implementation in Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload. The vulnerability is due to incorrect handling of specific OSPFv3 packets. An attacker could exploit this… | |
| Analizada | Media (6.5) | 0.63% | — | Cisco IOSCisco IOS XE | 5/10/2018 | 17/6/2026 | A vulnerability in the VLAN Trunking Protocol (VTP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to corrupt the internal VTP database on an affected device and cause a denial of service (DoS) condition. The vulnerability is due to a logic error in how the… | |
| Modificada | Media (5.9) | 1.7% | — | Cisco IOSCisco IOS XE | 14/8/2018 | 17/6/2026 | A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to obtain the encrypted nonces of an Internet Key Exchange Version 1 (IKEv1) session. The vulnerability exists because the affected software responds incorrectly… | |
| Modificada | Crítica (9.8) | 7.8% | — | Cisco IOS XE | 7/6/2018 | 17/6/2026 | A vulnerability in the authentication, authorization, and accounting (AAA) security services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device or cause an affected device to reload, resulting in a denial of service (DoS) condition. The… | |
| Modificada | Media (4.3) | 0.77% | — | Cisco IOS XE | 19/4/2018 | 17/6/2026 | A vulnerability in Cisco IOS XE Software running on Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, adjacent attacker to cause high CPU usage on an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to the incorrect handling of certain DHCP packets.… | |
| Modificada | Alta (7.8) | 0.57% | — | Cisco IOS XE | 2/4/2018 | 17/6/2026 | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected software, which could allow the attacker to gain access to the underlying Linux shell of an affected device and execute commands with root… | |
| Modificada | Media (4.9) | 0.98% | — | Cisco IOS XE | 28/3/2018 | 17/6/2026 | A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to write arbitrary files to the operating system of an affected device. The vulnerability is due to insufficient input validation of HTTP requests that are sent to the web UI of the affected… | |
| Modificada | Alta (8.8) | 1.3% | — | Cisco IOS XE | 28/3/2018 | 17/6/2026 | A vulnerability in the Cisco IOS XE Software REST API could allow an authenticated, remote attacker to bypass API authorization checks and use the API to perform privileged actions on an affected device. The vulnerability is due to insufficient authorization checks for requests that are sent to the REST API of the… | |
| Modificada | Alta (7.8) | 0.57% | — | Cisco IOS XE | 28/3/2018 | 17/6/2026 | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected software, which could allow the attacker to gain access to the underlying Linux shell of an affected device and execute commands with root… | |
| Modificada | Media (6.1) | 0.87% | — | Cisco IOS XE | 28/3/2018 | 17/6/2026 | Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web UI of the affected software. The vulnerabilities are due to insufficient input validation of certain… | |
| Modificada | Media (5.3) | 1.00% | — | Cisco IOS XE | 28/3/2018 | 17/6/2026 | A vulnerability in the Forwarding Information Base (FIB) code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, network attacker to cause a denial of service (DoS) condition. The vulnerability is due to a limitation in the way the FIB is internally representing recursive routes. An… | |
| Modificada | Media (6.1) | 0.87% | — | Cisco IOS XE | 28/3/2018 | 17/6/2026 | Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web UI of the affected software. The vulnerabilities are due to insufficient input validation of certain… | |
| Modificada | Media (6.1) | 0.87% | — | Cisco IOS XE | 28/3/2018 | 17/6/2026 | Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web UI of the affected software. The vulnerabilities are due to insufficient input validation of certain… | |
| Modificada | Alta (7.8) | 0.57% | — | Cisco IOS XE | 28/3/2018 | 17/6/2026 | Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected software, which could allow the attacker to gain access to the underlying Linux shell of an affected device and execute commands with root… | |
| Modificada | Media (6.7) | 0.40% | — | Cisco IOS XE | 28/3/2018 | 17/6/2026 | A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is due to the affected software improperly sanitizing command… | |
| Modificada | Media (6.7) | 0.40% | — | Cisco IOS XE | 28/3/2018 | 17/6/2026 | A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is due to the affected software improperly sanitizing command… |