Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3007▼ 67 respecto a la semana anterior
Críticas / altas1403▲ 50 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)390▼ 120 respecto a la semana anterior
11 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.8) | 1.4% | — | Cisco Adaptive Security ApplianceCisco Adaptive Security Appliance SoftwareCisco ASA 5500Cisco ASA 5505+13 | 25/2/2011 | 16/6/2026 | Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13), when a Certificate Authority (CA) is configured, allow remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCtk12352. | |
| Modificada | Alta (7.8) | 2.6% | — | Cisco Adaptive Security ApplianceCisco Adaptive Security Appliance SoftwareCisco ASA 5500Cisco ASA 5505+13 | 25/2/2011 | 16/6/2026 | Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.20), 8.1 before 8.1(2.48), 8.2 before 8.2(3), and 8.3 before 8.3(2.1), when the RIP protocol and the Cisco Phone Proxy functionality are configured, allow remote attackers to cause a denial of service (device reload) via a RIP… | |
| Modificada | Alta (7.8) | 2.5% | — | Cisco Adaptive Security ApplianceCisco Adaptive Security Appliance SoftwareCisco ASA 5500Cisco ASA 5505+13 | 9/8/2010 | 16/6/2026 | Unspecified vulnerability in the IKE implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.10), and 8.3 before 8.3(1.1) and Cisco PIX Security Appliances 500 series… | |
| Modificada | Alta (7.8) | 2.5% | — | Cisco Adaptive Security ApplianceCisco Adaptive Security Appliance SoftwareCisco ASA 5500Cisco ASA 5505+13 | 9/8/2010 | 16/6/2026 | Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.17), 8.1 before 8.1(2.45), and 8.2 before 8.2(2.13) allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCtd32106. | |
| Modificada | Alta (7.8) | 2.5% | — | Cisco Adaptive Security ApplianceCisco Adaptive Security Appliance SoftwareCisco ASA 5500Cisco ASA 5505+13 | 9/8/2010 | 16/6/2026 | Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.17), and 8.3 before 8.3(1.6) and Cisco PIX Security Appliances 500 series devices… | |
| Modificada | Alta (7.8) | 2.5% | — | Cisco Adaptive Security ApplianceCisco Adaptive Security Appliance SoftwareCisco ASA 5500Cisco ASA 5505+13 | 9/8/2010 | 16/6/2026 | Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.17), and 8.3 before 8.3(1.6) and Cisco PIX Security Appliances 500 series devices… | |
| Modificada | Media (6.8) | 0.32% | — | Cisco PIX Firewall 501Cisco PIX Firewall 506Cisco PIX Firewall 515Cisco PIX Firewall 515e+5 | 23/8/2006 | 16/6/2026 | Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user passwords, and the enable password to be changed to a "non-random value"… | |
| Modificada | Media (5) | 2.3% | — | Cisco PIX Firewall 501Cisco PIX Firewall 506Cisco PIX Firewall 515Cisco PIX Firewall 515e+4 | 17/8/2006 | 16/6/2026 | Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working with the researcher,… | |
| Modificada | Media (5) | 6.9% | — | Cisco IOSCisco VPN 3001 ConcentratorCisco VPN 3015 ConcentratorCisco VPN 3020 Concentrator+17 | 27/7/2006 | 16/6/2026 | Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that this is due to a… | |
| Modificada | Alta (7.5) | 2.6% | — | Cisco VPN 3001 ConcentratorCisco VPN 3015 ConcentratorCisco VPN 3020 ConcentratorCisco VPN 3030 Concentator+17 | 22/12/2005 | 16/6/2026 | The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges by sniffing the… | |
| Modificada | Media (5) | 10% | — | Cisco PIX Firewall 515Cisco PIX Firewall 520 | 18/6/2001 | 16/6/2026 | Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to cause a denial of service via a large number of authentication requests. |