Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior
Críticas / altas1288▼ 199 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
291 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 1.5% | — | Cisco Nx-os | 30/8/2019 | 17/6/2026 | A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an endpoint device in certain circumstances. The vulnerability is due to… | |
| Modificada | Media (5.3) | 1.4% | — | Cisco Nx-os | 30/8/2019 | 17/6/2026 | A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) Access Control List (ACL) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to perform SNMP polling of an affected device, even if it is configured to deny SNMP traffic. The vulnerability is due to an… | |
| Modificada | Alta (7.5) | 1.8% | — | Cisco Nx-os | 30/8/2019 | 17/6/2026 | A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to unexpectedly restart. The vulnerability is due to incorrect validation of the HTTP header of a request that is sent to the NX-API. An attacker could exploit this… | |
| Modificada | Alta (7.5) | 2.0% | — | Cisco Nx-os | 30/8/2019 | 17/6/2026 | A vulnerability in the Network Time Protocol (NTP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to excessive use of system resources when the affected device is logging a drop action for… | |
| Modificada | Alta (7.8) | 0.36% | — | Cisco Nx-osCisco Unified Computing System | 30/8/2019 | 17/6/2026 | A vulnerability in a specific CLI command within the local management (local-mgmt) context for Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to gain elevated privileges as the root user on an affected device. The vulnerability is due to extraneous subcommand options present for a… | |
| Modificada | Alta (7.7) | 1.5% | — | Cisco Nx-os | 28/8/2019 | 17/6/2026 | A vulnerability in the Virtual Shell (VSH) session management for Cisco NX-OS Software could allow an authenticated, remote attacker to cause a VSH process to fail to delete upon termination. This can lead to a build-up of VSH processes that overtime can deplete system memory. When there is no system memory available,… | |
| Modificada | Alta (7.5) | 2.0% | — | Cisco Nx-os | 28/8/2019 | 17/6/2026 | A vulnerability in the IPv6 traffic processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an unexpected restart of the netstack process on an affected device. The vulnerability is due to improper validation of IPv6 traffic sent through an affected device. An attacker could exploit… | |
| Modificada | Media (6.5) | 1.6% | — | Cisco Nx-osCisco Fx-os | 28/8/2019 | 17/6/2026 | A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application on an affected device to restart unexpectedly. The vulnerability is due to improper validation of Abstract… | |
| Modificada | Alta (7.5) | 2.0% | — | Cisco Nx-os | 28/8/2019 | 17/6/2026 | A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause process crashes, which can result in a denial of service (DoS) condition on an affected system. The vulnerability is due to insufficient validation of TCP packets when processed by… | |
| Modificada | Alta (8.8) | 1.1% | — | Cisco Nx-os | 31/7/2019 | 17/6/2026 | A vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an adjacent, unauthenticated attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges. The vulnerability… | |
| Modificada | Media (6.7) | 0.45% | — | Cisco Nx-osCisco Firepower Extensible Operating System | 16/5/2019 | 17/6/2026 | A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying operating system of an affected device with elevated privileges. The vulnerability is due to insufficient validation of… | |
| Modificada | Alta (8.6) | 2.4% | — | Cisco Nx-osCisco Firepower Extensible Operating SystemCisco Fx-os | 16/5/2019 | 17/6/2026 | A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the SNMP application to leak system memory, which could cause an affected device to restart unexpectedly. The vulnerability is… | |
| Modificada | Media (6.7) | 0.96% | — | Cisco Nx-os | 16/5/2019 | 17/6/2026 | A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command injection. This could allow the attacker to execute arbitrary commands with elevated privileges on… | |
| Modificada | Media (6.7) | 0.34% | — | Cisco Nx-os | 15/5/2019 | 17/6/2026 | A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not properly verified… | |
| Modificada | Media (6.7) | 0.34% | — | Cisco Nx-os | 15/5/2019 | 17/6/2026 | A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not properly verified… | |
| Modificada | Media (6.7) | 0.27% | — | Cisco Nx-os | 15/5/2019 | 17/6/2026 | A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not properly verified… | |
| Modificada | Media (6.7) | 0.26% | — | Cisco Nx-os | 15/5/2019 | 17/6/2026 | A vulnerability in the Image Signature Verification feature used in an NX-OS CLI command in Cisco Nexus 3000 Series and 9000 Series Switches could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because… | |
| Modificada | Media (6.7) | 0.18% | — | Cisco Nx-os | 15/5/2019 | 17/6/2026 | A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper verification of digital signatures for patch images. An… | |
| Modificada | Media (4.4) | 0.18% | — | Cisco Nx-os | 15/5/2019 | 17/6/2026 | A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper verification of digital signatures for patch images. An… | |
| Modificada | Media (6.7) | 0.48% | — | Cisco Nx-osCisco Firepower Extensible Operating System | 15/5/2019 | 17/6/2026 | A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI… | |
| Modificada | Media (6.7) | 0.50% | — | Cisco Nx-os | 15/5/2019 | 17/6/2026 | A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to… | |
| Modificada | Media (6.7) | 0.46% | — | Cisco Nx-os | 15/5/2019 | 17/6/2026 | A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with valid administrator credentials to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands.… | |
| Modificada | Media (6.7) | 0.48% | — | Cisco Nx-os | 15/5/2019 | 17/6/2026 | A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command on the affected… | |
| Modificada | Media (6.7) | 0.48% | — | Cisco Nx-os | 15/5/2019 | 17/6/2026 | A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a specific… | |
| Modificada | Media (6.7) | 0.46% | — | Cisco Nx-osCisco Fx-os | 15/5/2019 | 17/6/2026 | A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker… |