Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2698▼ 542 respecto a la semana anterior
Críticas / altas1273▼ 220 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)254▼ 248 respecto a la semana anterior
291 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.4) | 0.35% | — | Cisco Nx-os | 6/3/2019 | 17/6/2026 | A vulnerability in the Cisco Nexus 9000 Series Fabric Switches running in Application-Centric Infrastructure (ACI) mode could allow an authenticated, local attacker to read arbitrary files on an affected device. The vulnerability is due to a lack of proper input and validation checking mechanisms of user-supplied… | |
| Modificada | Alta (7.8) | 0.39% | — | Cisco Nx-osCisco Application Policy Infrastructure Controller Software | 6/3/2019 | 17/6/2026 | A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of certain sudoers files for the bashroot… | |
| Modificada | Alta (8.6) | 4.0% | — | Cisco Nx-os | 17/10/2018 | 17/6/2026 | A vulnerability in the Precision Time Protocol (PTP) feature of Cisco Nexus 5500, 5600, and 6000 Series Switches running Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of protection against PTP… | |
| Modificada | Alta (7.7) | 3.2% | — | Cisco Nx-os | 17/10/2018 | 17/6/2026 | A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application of an affected device to restart unexpectedly. The vulnerability is due to improper validation of SNMP protocol data units (PDUs)… | |
| Modificada | Media (5.3) | 0.79% | — | Cisco Nx-osCisco Firepower Extensible Operating System | 17/10/2018 | 17/6/2026 | A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition when the device unexpectedly reloads. The vulnerability is due to improper input validation of… | |
| Modificada | Alta (7.5) | 2.5% | — | Cisco Nx-os | 18/7/2018 | 17/6/2026 | A vulnerability in the DHCPv6 feature of the Cisco Nexus 9000 Series Fabric Switches in Application-Centric Infrastructure (ACI) Mode could allow an unauthenticated, remote attacker to cause the device to run low on system memory, which could result in a Denial of Service (DoS) condition on an affected system. The… | |
| Modificada | Alta (7.8) | 0.35% | — | Cisco Nx-os | 21/6/2018 | 17/6/2026 | A vulnerability in the role-based access-checking mechanisms of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on an affected device. The vulnerability exists because the affected software lacks proper input and validation checks for certain file systems. An attacker… | |
| Modificada | Media (6.5) | 0.64% | — | Cisco Nx-osCisco Firepower Extensible Operating SystemCisco Fxos | 21/6/2018 | 17/6/2026 | A vulnerability in the Cisco Discovery Protocol (formerly known as CDP) subsystem of devices running, or based on, Cisco NX-OS Software contain a vulnerability that could allow an unauthenticated, adjacent attacker to create a denial of service (DoS) condition. The vulnerability is due to a failure to properly… | |
| Modificada | Alta (8.8) | 3.9% | — | Cisco Nx-os | 21/6/2018 | 17/6/2026 | A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to send a malicious packet to the management interface on an affected system and execute a command-injection exploit. The vulnerability is due to incorrect input validation of user-supplied data to the NX-API… | |
| Modificada | Alta (7.5) | 2.8% | — | Cisco Nx-osCisco Firepower Extensible Operating System | 21/6/2018 | 17/6/2026 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the affected software insufficiently validates Cisco Fabric… | |
| Modificada | Crítica (9.8) | 4.1% | — | Cisco Nx-osCisco Firepower Extensible Operating System | 21/6/2018 | 17/6/2026 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to obtain sensitive information from memory or cause a denial of service (DoS) condition on the affected product. The vulnerability exists because the affected software… | |
| Modificada | Alta (7.7) | 2.0% | — | Cisco Nx-os | 21/6/2018 | 17/6/2026 | A vulnerability in the implementation of a specific CLI command and the associated Simple Network Management Protocol (SNMP) MIB for Cisco NX-OS (in standalone NX-OS mode) on Cisco Nexus 3000 and 9000 Series Switches could allow an authenticated, remote attacker to exhaust system memory on an affected device,… | |
| Modificada | Alta (7.8) | 0.56% | — | Cisco Nx-os | 21/6/2018 | 17/6/2026 | A vulnerability in the CLI parser of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-injection attack on an affected device. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting malicious command… | |
| Modificada | Alta (8.8) | 1.1% | — | Cisco Nx-osCisco Firepower Extensible Operating System | 21/6/2018 | 17/6/2026 | A vulnerability in the Cisco Discovery Protocol component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service (DoS) condition on the affected device. The vulnerability exists because of insufficiently validated… | |
| Modificada | Alta (7.8) | 0.43% | — | Cisco Nx-osCisco Firepower Extensible Operating System | 21/6/2018 | 17/6/2026 | A vulnerability in the CLI parser of Cisco FXOS Software and Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to incorrect input validation in the CLI parser subsystem. An attacker could exploit this… | |
| Modificada | Media (6.5) | 2.1% | — | Cisco Nx-os | 21/6/2018 | 17/6/2026 | A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco NX-OS on the Cisco Nexus 4000 Series Switch could allow an authenticated, remote attacker to cause the device to unexpectedly reload, resulting in a denial of service (DoS) condition. The vulnerability is due to incomplete validation of… | |
| Modificada | Alta (7.5) | 2.0% | — | Cisco Nx-osCisco Firepower Extensible Operating System | 21/6/2018 | 17/6/2026 | A vulnerability in the web UI of Cisco FXOS and Cisco UCS Fabric Interconnect Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected system. The vulnerability is due to incorrect input validation in the web UI. An attacker could exploit this vulnerability by sending a… | |
| Modificada | Alta (8.8) | 2.8% | — | Cisco Nx-os | 20/6/2018 | 17/6/2026 | A vulnerability in the NX-API management application programming interface (API) in devices running, or based on, Cisco NX-OS Software could allow an authenticated, remote attacker to execute commands with elevated privileges. The vulnerability is due to a failure to properly validate certain parameters included… | |
| Modificada | Alta (7.8) | 0.58% | — | Cisco Nx-os | 20/6/2018 | 17/6/2026 | A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-injection attack on an affected device. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting malicious command… | |
| Modificada | Crítica (9.8) | 17% | — | Cisco Nx-os | 20/6/2018 | 17/6/2026 | A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft a packet to the management interface on an affected system, causing a buffer overflow. The vulnerability is due to incorrect input validation in the authentication module of the NX-API subsystem. An… | |
| Modificada | Alta (7.5) | 2.5% | — | Cisco Nx-os | 20/6/2018 | 17/6/2026 | A vulnerability in the Border Gateway Protocol (BGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to the device unexpectedly reloading. The vulnerability is due to incomplete input validation of the BGP update messages. An… | |
| Modificada | Media (6.7) | 0.45% | — | Cisco Nx-osCisco Firepower Extensible Operating SystemCisco Fxos | 20/6/2018 | 17/6/2026 | A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to configure an unauthorized administrator account for an affected device. The vulnerability exists because the affected software does not properly delete sensitive files when certain… | |
| Modificada | Alta (8.8) | 4.8% | — | Cisco Nx-os | 20/6/2018 | 17/6/2026 | A vulnerability in role-based access control (RBAC) for Cisco NX-OS Software could allow an authenticated, remote attacker to execute CLI commands that should be restricted for a nonadministrative user. The attacker would have to possess valid user credentials for the device. The vulnerability is due to incorrect RBAC… | |
| Modificada | Alta (8.8) | 1.6% | — | Cisco Nx-os | 20/6/2018 | 17/6/2026 | A vulnerability in the Internet Group Management Protocol (IGMP) Snooping feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload, resulting in a denial of service… | |
| Modificada | Media (6.5) | 2.1% | — | Cisco Nx-os | 20/6/2018 | 17/6/2026 | A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application on an affected device to restart unexpectedly. The vulnerability is due to improper validation of SNMP protocol data units (PDUs)… |