Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2768▼ 428 respecto a la semana anterior
Críticas / altas1324▼ 116 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)265▼ 243 respecto a la semana anterior
341 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.3) | 0.82% | — | Mcafee Advanced Threat Defense | 15/4/2021 | 17/6/2026 | Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended… | |
| Modificada | Media (4.3) | 0.73% | — | Mcafee Advanced Threat Defense | 15/4/2021 | 17/6/2026 | Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended… | |
| Modificada | Media (5.3) | 2.2% | — | Cisco IOS XECisco Secure Firewall Management CenterCisco Secure Firewall Threat DefenseSnort | 13/1/2021 | 11/8/2026 | Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit this vulnerability by… | |
| Modificada | Media (5.3) | 2.0% | — | Cisco Secure Firewall Management CenterCisco Secure Firewall Threat DefenseCisco IOS XESnort+12 | 13/1/2021 | 11/8/2026 | Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect detection of the HTTP payload if it is… | |
| Modificada | Alta (7.5) | 2.0% | — | Cisco Secure Firewall Management CenterCisco Secure Firewall Threat DefenseCisco IOS XESnort | 13/1/2021 | 11/8/2026 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect handling of an HTTP range header. An attacker could exploit this vulnerability by sending crafted… | |
| Modificada | Baja (3.7) | 1.3% | — | Cisco Secure Firewall Threat DefenseCisco Firepower Threat DefenseCisco Adaptive Security Appliance Software | 21/10/2020 | 11/8/2026 | A vulnerability in the TLS handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000 Series firewalls could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper implementation… | |
| Modificada | Media (6.1) | 1.1% | — | Cisco Secure Firewall Threat DefenseCisco Firepower Threat DefenseCisco Adaptive Security Appliance Software | 21/10/2020 | 11/8/2026 | Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web services interface of an affected device.… | |
| Modificada | Media (6.1) | 1.2% | — | Cisco Secure Firewall Threat DefenseCisco Firepower Threat DefenseCisco Adaptive Security Appliance Software | 21/10/2020 | 11/8/2026 | Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web services interface of an affected device.… | |
| Modificada | Media (6.1) | 1.2% | — | Cisco Secure Firewall Threat DefenseCisco Firepower Threat DefenseCisco Adaptive Security Appliance Software | 21/10/2020 | 11/8/2026 | Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web services interface of an affected device.… | |
| Analizada | Media (6.1) | 86% | ⚠ Explotación activa💥 Exploit | Cisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 21/10/2020 | 11/8/2026 | Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the web services interface of an affected device.… | |
| Modificada | Media (6.5) | 1.2% | — | Cisco Secure Firewall Threat DefenseCisco Firepower Threat DefenseCisco Adaptive Security Appliance Software | 21/10/2020 | 11/8/2026 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access rule and access parts of the WebVPN portal that are supposed to be blocked. The vulnerability… | |
| Modificada | Alta (7.4) | 0.44% | — | Cisco Secure Firewall Threat Defense | 21/10/2020 | 11/8/2026 | A vulnerability in the ingress packet processing path of Cisco Firepower Threat Defense (FTD) Software for interfaces that are configured either as Inline Pair or in Passive mode could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient… | |
| Modificada | Alta (8.6) | 1.8% | — | Cisco Adaptive Security ApplianceCisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 21/10/2020 | 11/8/2026 | A vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a memory leak when closing… | |
| Modificada | Alta (8.6) | 1.4% | — | Cisco Secure Firewall Threat Defense | 21/10/2020 | 11/8/2026 | A vulnerability in the ICMP ingress packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 4110 appliances could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incomplete input validation upon… | |
| Modificada | Media (5.8) | 0.95% | — | Cisco Secure Firewall Threat Defense | 21/10/2020 | 11/8/2026 | A vulnerability in the TCP Intercept functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured Access Control Policies (including Geolocation) and Service Polices on an affected system. The vulnerability exists because TCP Intercept is invoked… | |
| Modificada | Media (5.3) | 1.3% | — | Cisco Adaptive Security ApplianceCisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 21/10/2020 | 11/8/2026 | A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass FTP inspection. The vulnerability is due to ineffective flow tracking of FTP traffic. An attacker could exploit… | |
| Modificada | Alta (8.6) | 1.4% | — | Cisco Secure Firewall Threat Defense | 21/10/2020 | 11/8/2026 | A vulnerability in the packet processing functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to inefficient memory management. An attacker could exploit this… | |
| Modificada | Alta (8.6) | 1.8% | — | Cisco Secure Firewall Threat Defense | 21/10/2020 | 11/8/2026 | A vulnerability in the SSL/TLS inspection of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series firewalls could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation for certain… | |
| Modificada | Media (4.7) | 1.3% | — | Cisco Adaptive Security ApplianceCisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 21/10/2020 | 11/8/2026 | A vulnerability in the Clientless SSL VPN (WebVPN) of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to inject arbitrary HTTP headers in the responses of the affected system. The vulnerability is due to improper input… | |
| Modificada | Alta (7.5) | 1.7% | — | Cisco Adaptive Security ApplianceCisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 21/10/2020 | 11/8/2026 | A vulnerability in the SIP inspection process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is… | |
| Modificada | Alta (7.5) | 2.7% | — | Cisco Adaptive Security ApplianceCisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 21/10/2020 | 11/8/2026 | A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a memory exhaustion… | |
| Modificada | Alta (8.1) | 2.2% | — | Cisco Secure Firewall Management CenterCisco Secure Firewall Threat Defense | 21/10/2020 | 11/8/2026 | A vulnerability in the sfmgr daemon of Cisco Firepower Management Center (FMC) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to perform directory traversal and access directories outside the restricted path. The vulnerability is due to insufficient input… | |
| Modificada | Alta (8.1) | 0.96% | — | Cisco Secure Firewall Management CenterCisco Secure Firewall Threat Defense | 21/10/2020 | 11/8/2026 | A vulnerability in the sftunnel functionality of Cisco Firepower Management Center (FMC) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to obtain the device registration hash. The vulnerability is due to insufficient sftunnel negotiation protection during… | |
| Modificada | Alta (7.5) | 1.8% | — | Cisco Secure Firewall Threat Defense | 21/10/2020 | 11/8/2026 | A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to restart unexpectedly. The vulnerability is due to a lack of sufficient memory management protections… | |
| Modificada | Alta (7.5) | 1.9% | — | Cisco Adaptive Security ApplianceCisco Secure Firewall Threat DefenseCisco Adaptive Security Appliance Software | 21/10/2020 | 11/8/2026 | A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due… |