Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2768▼ 449 respecto a la semana anterior
Críticas / altas1325▼ 128 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)268▼ 240 respecto a la semana anterior
341 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.6) | 0.59% | — | Cisco Adaptive Security ApplianceCisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance SoftwareCisco ASA 5512-x Firmware+7 | 27/10/2021 | 11/8/2026 | A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an unauthenticated, remote attacker to poison MAC address tables, resulting in a denial of service (DoS) vulnerability. This vulnerability is… | |
| Modificada | Alta (7.5) | 1.4% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance SoftwareCisco ASA 5512-x FirmwareCisco ASA 5505 Firmware+6 | 27/10/2021 | 11/8/2026 | A vulnerability in the memory management of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper resource management when… | |
| Modificada | Media (5.3) | 1.1% | — | Cisco Adaptive Security ApplianceCisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance SoftwareCisco ASA 5512-x Firmware+7 | 27/10/2021 | 11/8/2026 | Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized connections with a… | |
| Modificada | Media (5.3) | 1.1% | — | Cisco Adaptive Security ApplianceCisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance SoftwareCisco ASA 5512-x Firmware+7 | 27/10/2021 | 11/8/2026 | Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized connections with a… | |
| Modificada | Media (5.3) | 1.0% | — | Cisco Adaptive Security ApplianceCisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance SoftwareCisco ASA 5512-x Firmware+7 | 27/10/2021 | 11/8/2026 | A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass security protections. This vulnerability is due to improper handling of network… | |
| Modificada | Alta (7.5) | 1.6% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance SoftwareCisco ASA 5512-x FirmwareCisco ASA 5505 Firmware+6 | 27/10/2021 | 11/8/2026 | A vulnerability in the software-based SSL/TLS message handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is… | |
| Modificada | Alta (7.5) | 1.4% | — | Cisco Firepower Management Center Virtual ApplianceCisco Secure Firewall Threat DefenseCisco Sourcefire Defense Center | 27/10/2021 | 11/8/2026 | A vulnerability in the processing of SSH connections for multi-instance deployments of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability is due to a lack of proper error handling when an… | |
| Modificada | Media (6.1) | 0.62% | — | Cisco Firepower Management Center Virtual ApplianceCisco Secure Firewall Threat DefenseCisco Sourcefire Defense Center | 27/10/2021 | 11/8/2026 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an attacker to execute a cross-site scripting (XSS) attack or an open redirect attack. For more information about these vulnerabilities, see the Details section of this advisory. | |
| Modificada | Media (4.8) | 0.48% | — | Cisco Firepower Management Center Virtual ApplianceCisco Secure Firewall Threat DefenseCisco Sourcefire Defense Center | 27/10/2021 | 11/8/2026 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an attacker to execute a cross-site scripting (XSS) attack or an open redirect attack. For more information about these vulnerabilities, see the Details section of this advisory. | |
| Modificada | Alta (8.1) | 2.0% | — | Cisco Firepower Management Center Virtual ApplianceCisco Secure Firewall Threat DefenseCisco Sourcefire Defense Center | 27/10/2021 | 11/8/2026 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to perform a directory traversal attack on an affected device. The attacker would require valid device credentials. The vulnerability is due to insufficient input… | |
| Modificada | Media (6) | 0.22% | — | Cisco Firepower Management Center Virtual ApplianceCisco Secure Firewall Threat DefenseCisco Sourcefire Defense Center | 27/10/2021 | 11/8/2026 | A vulnerability in Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to overwrite or append arbitrary data to system files using root-level privileges. The attacker must have administrative credentials on the device. This vulnerability is due to incomplete validation of user… | |
| Modificada | Alta (7.8) | 0.27% | — | Cisco Firepower Management Center Virtual ApplianceCisco Secure Firewall Threat DefenseCisco Sourcefire Defense Center | 27/10/2021 | 11/8/2026 | Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. For more information about these vulnerabilities, see the Details section of this advisory. | |
| Modificada | Alta (7.8) | 0.27% | — | Cisco Firepower Management Center Virtual ApplianceCisco Secure Firewall Threat DefenseCisco Sourcefire Defense Center | 27/10/2021 | 11/8/2026 | Multiple vulnerabilities in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges. For more information about these vulnerabilities, see the Details section of this advisory. | |
| Modificada | Alta (7.5) | 1.0% | — | Cisco Secure Firewall Management CenterCisco Secure Firewall Threat Defense | 27/10/2021 | 11/8/2026 | Multiple vulnerabilities in the payload inspection for Ethernet Industrial Protocol (ENIP) traffic for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured rules for ENIP traffic. These vulnerabilities are due to incomplete processing during deep packet… | |
| Modificada | Alta (7.7) | 1.2% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 16/7/2021 | 11/8/2026 | A vulnerability in the software cryptography module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker or an unauthenticated attacker in a man-in-the-middle position to cause an unexpected reload of the device that results… | |
| Modificada | Alta (7.5) | 1.7% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 29/4/2021 | 11/8/2026 | Multiple vulnerabilities in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. These vulnerabilities are due to lack of proper input validation of the HTTPS… | |
| Modificada | Alta (7.5) | 1.4% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 29/4/2021 | 11/8/2026 | A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service (DoS) condition.The vulnerability is due… | |
| Modificada | Media (5.3) | 1.7% | — | Cisco Secure Firewall Threat DefenseCisco IOS XESnort | 29/4/2021 | 11/8/2026 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect handling of specific HTTP header parameters. An attacker could exploit this vulnerability by… | |
| Modificada | Alta (7.1) | 1.2% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 29/4/2021 | 11/8/2026 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a buffer overflow on an affected system. The vulnerability is due to insufficient boundary checks for specific data… | |
| Modificada | Media (6.7) | 0.26% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 29/4/2021 | 11/8/2026 | A vulnerability in the upgrade process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to inject commands that could be executed with root privileges on the underlying operating system (OS). This vulnerability is due to… | |
| Modificada | Media (6.7) | 0.48% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 29/4/2021 | 11/8/2026 | A vulnerability in the CLI of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS) of an affected device. The vulnerability is due to insufficient input… | |
| Modificada | Alta (7.8) | 0.30% | — | Cisco Secure Firewall Threat Defense | 29/4/2021 | 11/8/2026 | A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device that is running in multi-instance mode. This vulnerability is due to insufficient… | |
| Modificada | Alta (7.5) | 1.7% | — | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 29/4/2021 | 11/8/2026 | Multiple vulnerabilities in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. These vulnerabilities are due to lack of proper input validation of the HTTPS… | |
| Modificada | Alta (8.6) | 1.4% | — | Cisco Secure Firewall Threat Defense | 29/4/2021 | 11/8/2026 | A vulnerability in the software-based SSL/TLS message handler of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of SSL/TLS… | |
| Modificada | Media (6) | 0.50% | — | Cisco Secure Firewall Threat Defense | 29/4/2021 | 11/8/2026 | A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to overwrite files on the file system of an affected device by using directory traversal techniques. A successful exploit could cause system instability if important system files are overwritten.… |