Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2856▼ 331 respecto a la semana anterior
Críticas / altas1383▼ 38 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)292▼ 217 respecto a la semana anterior
121 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.1) | 0.50% | — | Cisco Firepower 9000 Firmware | 21/2/2019 | 17/6/2026 | A vulnerability in field-programmable gate array (FPGA) ingress buffer management for the Cisco Firepower 9000 Series with the Cisco Firepower 2-port 100G double-width network module (PID: FPR9K-DNM-2X100G) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. Manual… | |
| Modificada | Alta (7.5) | 2.8% | — | Cisco Firepower System Software | 8/11/2018 | 17/6/2026 | A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a configured Intrusion Prevention System (IPS) rule that inspects certain types of TCP traffic. The vulnerability is due to incorrect TCP retransmission handling. An attacker could… | |
| Modificada | Media (5.3) | 0.79% | — | Cisco Nx-osCisco Firepower Extensible Operating System | 17/10/2018 | 17/6/2026 | A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition when the device unexpectedly reloads. The vulnerability is due to improper input validation of… | |
| Modificada | Alta (7.5) | 2.5% | — | Cisco Firepower Threat DefenseCisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 5/10/2018 | 11/8/2026 | A vulnerability in the cryptographic hardware accelerator driver of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a temporary denial of service (DoS) condition. The… | |
| Modificada | Alta (7.5) | 1.5% | — | Cisco Firepower System Software | 5/10/2018 | 17/6/2026 | A vulnerability in the Server Message Block Version 2 (SMBv2) and Version 3 (SMBv3) protocol implementation for the Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause the device to run low on system memory, possibly preventing the device from forwarding traffic. It is also… | |
| Modificada | Alta (8.8) | 0.94% | — | Cisco Secure Firewall Management CenterCisco Firepower Appliance 8360 FirmwareCisco Firepower Management Center 2500 FirmwareCisco Firepower Appliance 8120 Firmware+28 | 21/6/2018 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the… | |
| Modificada | Media (6.5) | 0.64% | — | Cisco Nx-osCisco Firepower Extensible Operating SystemCisco Fxos | 21/6/2018 | 17/6/2026 | A vulnerability in the Cisco Discovery Protocol (formerly known as CDP) subsystem of devices running, or based on, Cisco NX-OS Software contain a vulnerability that could allow an unauthenticated, adjacent attacker to create a denial of service (DoS) condition. The vulnerability is due to a failure to properly… | |
| Modificada | Alta (7.5) | 2.8% | — | Cisco Nx-osCisco Firepower Extensible Operating System | 21/6/2018 | 17/6/2026 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the affected software insufficiently validates Cisco Fabric… | |
| Modificada | Crítica (9.8) | 4.1% | — | Cisco Nx-osCisco Firepower Extensible Operating System | 21/6/2018 | 17/6/2026 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to obtain sensitive information from memory or cause a denial of service (DoS) condition on the affected product. The vulnerability exists because the affected software… | |
| Modificada | Alta (8.6) | 2.3% | — | Cisco Nexus 7000 FirmwareCisco Nexus 5000 FirmwareCisco Firepower 9000 FirmwareCisco Nexus 9000 Firmware+1 | 21/6/2018 | 17/6/2026 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability exists because the affected software insufficiently validates Cisco Fabric… | |
| Modificada | Alta (8.8) | 1.1% | — | Cisco Nx-osCisco Firepower Extensible Operating System | 21/6/2018 | 17/6/2026 | A vulnerability in the Cisco Discovery Protocol component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service (DoS) condition on the affected device. The vulnerability exists because of insufficiently validated… | |
| Modificada | Alta (7.8) | 0.43% | — | Cisco Nx-osCisco Firepower Extensible Operating System | 21/6/2018 | 17/6/2026 | A vulnerability in the CLI parser of Cisco FXOS Software and Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to incorrect input validation in the CLI parser subsystem. An attacker could exploit this… | |
| Modificada | Alta (7.5) | 2.0% | — | Cisco Nx-osCisco Firepower Extensible Operating System | 21/6/2018 | 17/6/2026 | A vulnerability in the web UI of Cisco FXOS and Cisco UCS Fabric Interconnect Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected system. The vulnerability is due to incorrect input validation in the web UI. An attacker could exploit this vulnerability by sending a… | |
| Modificada | Crítica (9.8) | 5.9% | — | Cisco Nexus 7000 FirmwareCisco Nexus 5000 FirmwareCisco Firepower 9000 FirmwareCisco Nexus 9000 Firmware+1 | 20/6/2018 | 17/6/2026 | A vulnerability in the Cisco Fabric Services (CFS) component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability exists because the affected software insufficiently validates Cisco Fabric Services packet… | |
| Modificada | Crítica (9.8) | 5.6% | — | Cisco Nexus 7000 FirmwareCisco Nexus 5000 FirmwareCisco Firepower 9000 FirmwareCisco Nexus 9000 Firmware+1 | 20/6/2018 | 17/6/2026 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the affected software insufficiently… | |
| Modificada | Crítica (9.8) | 5.6% | — | Cisco Nexus 7000 FirmwareCisco Nexus 5000 FirmwareCisco Firepower 9000 FirmwareCisco Nexus 9000 Firmware+1 | 20/6/2018 | 17/6/2026 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. The vulnerability exists because the affected software insufficiently validates header values in… | |
| Modificada | Crítica (9.8) | 8.6% | — | Cisco Nexus 7000 FirmwareCisco Nexus 5000 FirmwareCisco Firepower 9000 FirmwareCisco Nexus 9000 Firmware+1 | 20/6/2018 | 17/6/2026 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to read sensitive memory content, create a denial of service (DoS) condition, or execute arbitrary code as root. The vulnerability exists because the affected software… | |
| Modificada | Media (6.7) | 0.45% | — | Cisco Nx-osCisco Firepower Extensible Operating SystemCisco Fxos | 20/6/2018 | 17/6/2026 | A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to configure an unauthorized administrator account for an affected device. The vulnerability exists because the affected software does not properly delete sensitive files when certain… | |
| Analizada | Alta (7.5) | 100% | ⚠ Explotación activa💥 Exploit | Cisco Adaptive Security Appliance SoftwareCisco Firepower Threat DefenseCisco Secure Firewall Threat Defense | 7/6/2018 | 11/8/2026 | A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. It is also possible on certain software releases that the ASA will not reload, but an… | |
| Modificada | Media (5.9) | 1.3% | — | Cisco Firepower | 19/4/2018 | 17/6/2026 | A vulnerability in the Secure Sockets Layer (SSL) Engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper error handling while processing SSL traffic. An attacker could exploit this vulnerability by… | |
| Modificada | Media (6.3) | 1.1% | — | Cisco Nx-osCisco Unified Computing SystemCisco Firepower Extensible Operating System | 30/11/2017 | 17/6/2026 | A vulnerability in the CLI of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacker could exploit this… | |
| Modificada | Media (5.3) | 1.2% | — | Cisco Firepower Extensible Operating System | 16/11/2017 | 17/6/2026 | A vulnerability exists in the process of creating default IP blocks during device initialization for Cisco ASA Next-Generation Firewall Services that could allow an unauthenticated, remote attacker to send traffic to the local IP address of the device, bypassing any filters that are configured to deny local IP… | |
| Modificada | Alta (8.8) | 3.8% | — | Cisco Firepower Extensible Operating System | 2/11/2017 | 17/6/2026 | A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security Appliance could allow an authenticated, remote attacker to inject arbitrary commands that could be executed with root privileges. The vulnerability is due to… | |
| Modificada | Alta (7.8) | 77% | 💥 Exploit | Cisco Unified Computing System Manager FirmwareCisco Firepower 9300 Security Appliance FirmwareCisco Firepower 4100 Next-generation Firewall Firmware | 2/11/2017 | 17/6/2026 | A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to obtain root shell privileges on the device, aka Command Injection. The vulnerability is due to… | |
| Modificada | Alta (8.6) | 4.5% | — | Cisco Firepower Extensible Operating SystemCisco FxosCisco Nx-os | 19/10/2017 | 17/6/2026 | A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability occurs because AAA processes prevent the… |