Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2698▼ 542 respecto a la semana anterior
Críticas / altas1273▼ 220 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)254▼ 248 respecto a la semana anterior
610 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.3) | 1.3% | — | Cisco Cgr1000 Compute ModuleCisco Ic3000 Industrial Compute GatewayCisco IOSCisco IOS XE | 15/4/2022 | 17/6/2026 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or… | |
| Modificada | Alta (7.2) | 2.1% | — | Cisco IOS XE | 15/4/2022 | 17/6/2026 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or… | |
| Modificada | Media (4.9) | 1.3% | — | Cisco IOS XE | 15/4/2022 | 17/6/2026 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or… | |
| Modificada | Media (4.9) | 1.3% | — | Cisco IOS XE | 15/4/2022 | 17/6/2026 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or… | |
| Modificada | Alta (7.2) | 1.5% | — | Cisco IOS XE | 15/4/2022 | 17/6/2026 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or… | |
| Modificada | Alta (7.2) | 2.7% | — | Cisco IOS XE | 15/4/2022 | 17/6/2026 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or… | |
| Modificada | Alta (7.2) | 2.4% | — | Cisco IOS XE | 15/4/2022 | 17/6/2026 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or… | |
| Modificada | Alta (8.6) | 1.2% | — | Cisco IOSCisco IOS XE | 15/4/2022 | 17/6/2026 | A vulnerability in the web services interface of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper resource management in the HTTP server code. An attacker could exploit this vulnerability by… | |
| Modificada | Media (6.8) | 1.2% | — | Cisco IOS XE | 15/4/2022 | 17/6/2026 | A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Border Gateway Protocol (BGP) process to crash, resulting in a denial of service (DoS) condition. This vulnerability is due to the… | |
| Modificada | Alta (7.2) | 1.6% | — | Cisco IOS XE | 15/4/2022 | 17/6/2026 | A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI API. A… | |
| Modificada | Media (6.5) | 1.1% | — | Cisco IOS XE | 15/4/2022 | 17/6/2026 | A vulnerability in the NETCONF over SSH feature of Cisco IOS XE Software could allow a low-privileged, authenticated, remote attacker to cause a denial of service condition (DoS) on an affected device. This vulnerability is due to insufficient resource management. An attacker could exploit this vulnerability by… | |
| Modificada | Media (6.5) | 0.52% | — | Cisco IOS XE | 15/4/2022 | 17/6/2026 | A vulnerability in Simple Network Management Protocol (SNMP) trap generation for wireless clients of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause an affected device to unexpectedly reload, resulting in a denial of service (DoS)… | |
| Modificada | Alta (8.6) | 1.5% | — | Cisco IOS XE | 15/4/2022 | 17/6/2026 | A vulnerability in the Application Visibility and Control (AVC-FNF) feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient packet… | |
| Modificada | Alta (8.6) | 1.3% | — | Cisco IOS XE | 15/4/2022 | 17/6/2026 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due… | |
| Modificada | Alta (7.8) | 0.23% | — | Cisco IOS XE | 15/4/2022 | 17/6/2026 | A vulnerability in the CLI of Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Cisco Catalyst 9000 Family Wireless Controllers could allow an authenticated, local attacker to elevate privileges to level 15 on an affected device. This vulnerability is due to insufficient validation of user privileges… | |
| Modificada | Alta (7.7) | 1.3% | — | Cisco IOS XE | 15/4/2022 | 17/6/2026 | A vulnerability in the IPSec decryption routine of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to buffer exhaustion that occurs while traffic on a configured IPsec tunnel is… | |
| Modificada | Alta (7.5) | 0.96% | — | Cisco IOS XE | 15/4/2022 | 17/6/2026 | A vulnerability in the AppNav-XE feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of certain TCP segments. An attacker could exploit this… | |
| Modificada | Media (6.7) | 0.28% | — | Cisco IOS XE | 15/4/2022 | 17/6/2026 | A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root-level privileges. This vulnerability is due to insufficient input validation of data that is passed into the Tcl interpreter. An attacker… | |
| Modificada | Alta (7.8) | 0.31% | — | Cisco IOS XECisco IOS XE Sd-wan | 21/10/2021 | 17/6/2026 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation by the system CLI. An attacker could exploit this vulnerability by authenticating to an affected device… | |
| Analizada | Crítica (9.8) | 3.0% | — | Cisco IOS XE | 23/9/2021 | 17/6/2026 | A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to execute arbitrary code with administrative privileges or cause a denial of service (DoS)… | |
| Modificada | Alta (7.5) | 1.4% | — | Cisco IOS XE | 23/9/2021 | 17/6/2026 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. These… | |
| Modificada | Alta (7.5) | 1.4% | — | Cisco IOS XE | 23/9/2021 | 17/6/2026 | Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. These… | |
| Analizada | Alta (7.4) | 0.78% | 💥 PoC | Cisco IOS XE | 23/9/2021 | 17/6/2026 | A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a Layer 2 (L2) loop in a configured VLAN, resulting in a denial of service (DoS) condition for that VLAN. The… | |
| Modificada | Media (6.7) | 0.36% | — | Cisco IOS XECisco IOS XE Sd-wan | 23/9/2021 | 17/6/2026 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software and Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker… | |
| Modificada | Crítica (9.8) | 2.6% | — | Cisco IOS XE Sd-wan | 23/9/2021 | 17/6/2026 | A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. This vulnerability is due to insufficient bounds checking when an affected device processes traffic. An attacker could exploit this vulnerability by… |