Threat database

808 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.5	KEVEPSS 99%	CVE-2018-0296Adaptive Security Appliance (ASA) · Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability High7.5KEVEPSS 99%2021-11-03CISA KEVCVE-2018-0296 CVE-2018-0296 is a vulnerability in Cisco Adaptive Security Appliance (ASA) involving improper input validation of HTTP URLs. Successful exploitation can lead to denial-of-service (DoS) conditions or information disclosure. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data. KEVEPSS 99%Vulnerability Cisco #exploited-in-the-wild	CISA KEV	2021-11-03
High	7.5	KEVEPSS 99%	CVE-2020-3452Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) · Cisco ASA and FTD Read-Only Path Traversal Vulnerability High7.5KEVEPSS 99%2021-11-03CISA KEVCVE-2020-3452 CVE-2020-3452 is a high-severity vulnerability in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) that allows attackers to exploit improper input validation in HTTP request URL processing. By sending crafted HTTP requests with directory traversal sequences, attackers can read arbitrary files on the device's web services file system. This vulnerability has been exploited in the wild. KEVEPSS 99%Vulnerability Cisco #exploited-in-the-wild	CISA KEV	2021-11-03
Medium	6.1	KEVEPSS 85%	CVE-2020-3580Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) · Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability Medium6.1KEVEPSS 85%2021-11-03CISA KEVCVE-2020-3580 CVE-2020-3580 is a high-severity cross-site scripting (XSS) vulnerability in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) web services interface. It arises from insufficient input validation of user-supplied data, allowing attackers to execute scripts in the context of the interface or access sensitive browser information. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. KEVEPSS 85%Vulnerability Cisco #exploited-in-the-wild	CISA KEV	2021-11-03
High	8.6	KEVEPSS 3.3%	CVE-2020-3569IOS XR · Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability High8.6KEVEPSS 3.3%2021-11-03CISA KEVCVE-2020-3569 CVE-2020-3569 is a vulnerability in Cisco IOS XR software affecting the Distance Vector Multicast Routing Protocol (DVMRP). The flaw involves improper handling of Internet Group Management Protocol (IGMP) packets, which can be exploited by an unauthenticated remote attacker to cause the IGMP process to crash immediately or consume excessive memory leading to a crash. This vulnerability has been exploited in the wild. KEVEPSS 3.3%Vulnerability Cisco #exploited-in-the-wild	CISA KEV	2021-11-03
High	8.6	KEVEPSS 3.7%	CVE-2020-3566IOS XR · Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability High8.6KEVEPSS 3.7%2021-11-03CISA KEVCVE-2020-3566 CVE-2020-3566 is a vulnerability in Cisco IOS XR software's Distance Vector Multicast Routing Protocol (DVMRP) where improper handling of IGMP packets can lead to memory exhaustion or immediate crash of the IGMP process. This flaw allows unauthenticated remote attackers to disrupt service by causing process crashes or resource depletion. KEVEPSS 3.7%Vulnerability Cisco #exploited-in-the-wild	CISA KEV	2021-11-03
High	8.8	KEVEPSS 11%	CVE-2020-3118IOS XR · Cisco IOS XR Software Discovery Protocol Format String Vulnerability High8.8KEVEPSS 11%2021-11-03CISA KEVCVE-2020-3118 CVE-2020-3118 is a vulnerability in Cisco IOS XR software where improper validation of string input in Cisco Discovery Protocol messages can allow an unauthenticated, adjacent attacker to execute code with administrative privileges or cause the device to reload. This vulnerability has been exploited in the wild. KEVEPSS 11%Vulnerability Cisco #exploited-in-the-wild	CISA KEV	2021-11-03
Critical	9.8	KEVEPSS 83%	CVE-2020-3161Cisco IP Phones · Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability Critical9.8KEVEPSS 83%2021-11-03CISA KEVCVE-2020-3161 Cisco IP Phones have a vulnerability in their web server due to improper input validation of HTTP requests. This flaw allows remote attackers to execute code with root privileges or cause denial-of-service conditions. The vulnerability is known to be exploited in the wild. No specific affected versions or patches are provided in the available data. KEVEPSS 83%Vulnerability Cisco #exploited-in-the-wild	CISA KEV	2021-11-03
Critical	9.8	KEVEPSS 99%	CVE-2021-1498HyperFlex HX · Cisco HyperFlex HX Data Platform Command Injection Vulnerability Critical9.8KEVEPSS 99%2021-11-03CISA KEVCVE-2021-1498 CVE-2021-1498 is a command injection vulnerability in Cisco HyperFlex HX Installer Virtual Machine due to insufficient input validation. This flaw allows an attacker to execute arbitrary commands on the affected device with the privileges of the tomcat8 user. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 99%Vulnerability Cisco #exploited-in-the-wild	CISA KEV	2021-11-03

Showing 801–808 of 808 results