Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an affeCheck this weekEPSS 15.00%May 21, 2025
- UnknownCisco ios_xe Double FreePatch nowKEVEPSS 1.63%May 16, 2025
- UnknownCisco ios_xe Use of Hard-coded CredentialsPatch nowKEVEPSS 4.79%May 16, 2025
- Medium5.4A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack againstCheck this weekEPSS 33.00%May 7, 2025
- Medium6.7A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sCheck this weekEPSS 17.00%May 7, 2025
- Medium6.7A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sCheck this weekEPSS 17.00%May 7, 2025
- Medium4.6A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sCheck this weekEPSS 17.00%May 7, 2025
- Medium4.6A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sCheck this weekEPSS 17.00%May 7, 2025
- Medium6.7A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sCheck this weekEPSS 17.00%May 7, 2025
- High8.8A vulnerability in the web-based management interface of the Wireless LAN Controller feature of Cisco IOS XE Software could allow an authenticated, remote attacker with a lobby ambCheck this weekEPSS 91.00%May 7, 2025
- Medium6.0A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an authenticated, local attacker to write arbitrary files to an affected system.Check this weekEPSS 17.00%May 7, 2025
- High8.3A vulnerability in the Cisco Industrial Ethernet Switch Device Manager (DM) of Cisco IOS Software could allow an authenticated, remote attacker to elevate privileges.Check this weekEPSS 34.00%May 7, 2025
- High7.8A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to gain privileges of the root user on theCheck this weekEPSS 15.00%May 7, 2025
- Medium5.5A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local fCheck this weekEPSS 17.00%May 7, 2025
- UnknownCisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Uncontrolled Resource ConsumptionPatch nowKEVEPSS 1.87%Apr 23, 2025
- High8.8A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the atCheck this weekEPSS 97.00%Apr 16, 2025
- Medium6.0A vulnerability in the web-based management interface of Cisco Secure Network Analytics could allow an authenticated, remote attacker with valid administrative credentials to execuCheck this weekEPSS 37.00%Apr 16, 2025
- Medium5.3A vulnerability in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to enumerate LDAP user accounts.Check this weekEPSS 53.00%Apr 16, 2025
- Critical10.0Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 98.79%Apr 16, 2025
- UnknownCisco meraki_mx64_firmware Failure to Handle Missing ParameterPatch nowKEVEPSS 1.05%Mar 31, 2025
- Medium5.8Cisco ASA and FTD Denial-of-Service VulnerabilityPatch nowKEVEPSS 15.87%Oct 23, 2024
- UnknownCisco hyperflex_hx_data_platform URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.58%Oct 21, 2024
- UnknownCisco RV Series Routers Stack-based Buffer OverflowPatch nowKEVEPSS 75.32%Sep 18, 2024
- UnknownCisco rv340w_firmware Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 2.17%Sep 18, 2024
- Critical9.8Cisco Smart Licensing Utility Static Credential VulnerabilityPatch nowKEVEPSS 97.09%Sep 4, 2024