Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2614▼ 473 respecto a la semana anterior

Críticas / altas1270▼ 74 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)243▼ 274 respecto a la semana anterior

32 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2009-0742	Modificada	Alta (7.8)	1.1%	—	Cisco Application Control Engine Module Cisco ACE 4710	26/2/2009	16/6/2026	The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers and Cisco ACE 4710 Application Control Engine Appliance stores a cleartext password by default, which allows context-dependent attackers to obtain sensitive information.
CVE-2009-0625	Modificada	Alta (7.8)	1.7%	—	Cisco ACE 4710 Cisco Application Control Engine Module	26/2/2009	16/6/2026	Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.2) and Cisco ACE 4710 Application Control Engine Appliance before A1(8.0) allows remote attackers to cause a denial of service (device reload) via a crafted SNMPv3 packet.
CVE-2009-0624	Modificada	Media (6.8)	1.3%	—	Cisco Application Control Engine Module Cisco ACE 4710	26/2/2009	16/6/2026	Unspecified vulnerability in the SNMPv2c implementation in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.3) and Cisco ACE 4710 Application Control Engine Appliance before A3(2.1) allows remote attackers to cause a denial of service (device reload) via a crafted…
CVE-2009-0623	Modificada	Alta (7.8)	1.3%	—	Cisco ACE 4710 Cisco Application Control Engine Module	26/2/2009	16/6/2026	Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.3) and Cisco ACE 4710 Application Control Engine Appliance before A3(2.1) allows remote attackers to cause a denial of service (device reload) via a crafted SSH packet.
CVE-2009-0622	Modificada	Alta (9)	1.5%	—	Cisco Application Control Engine Module Cisco ACE 4710	26/2/2009	16/6/2026	Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.2) and Cisco ACE 4710 Application Control Engine Appliance before A1(8a) allows remote authenticated users to execute arbitrary operating-system commands through a command line interface…
CVE-2009-0620	Modificada	Alta (10)	1.8%	—	Cisco Application Control Engine Module	26/2/2009	16/6/2026	Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.1) uses default (1) usernames and (2) passwords for (a) the administrator and (b) web management, which makes it easier for remote attackers to perform configuration changes or obtain operating-system access.
CVE-2009-0615	Modificada	Alta (9)	2.0%	—	Cisco Application Control Engine Device Manager Cisco Application Networking Manager	26/2/2009	16/6/2026	Directory traversal vulnerability in Cisco Application Networking Manager (ANM) before 2.0 and Application Control Engine (ACE) Device Manager before A3(2.1) allows remote authenticated users to read or modify arbitrary files via unspecified vectors, related to "invalid directory permissions."