Skip to content
OpenAdvisories

Archive

4 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /4 April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.7
    CVE-2020-3176

    Cisco Remote PHY Device Software Command Injection Vulnerability

    A vulnerability in Cisco Remote PHY Device Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability exists because the affected software does not prop…

    Cisco Cisco Remote PHY Network devices
  • Medium 5.3
    CVE-2020-3164

    Cisco ESA, Cisco WSA, and Cisco SMA GUI Denial of Service Vulnerability

    A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Security Management Appliance (SMA) could allow an unauthenticated remote attacker to cause …

    Cisco Cisco Web Security Appliance (WSA) Network devices
  • Medium 5.4
    CVE-2020-3157

    Cisco Identity Services Engine Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to i…

    Cisco Cisco Identity Services Engine Software Network devices
  • Medium 5.3
    CVE-2020-3193

    Cisco Prime Collaboration Provisioning Information Disclosure Vulnerability

    A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to obtain sensitive information about an affected device. The vulnerability exists because replies from the web-bas…

    Cisco Cisco Prime Collaboration Provisioning Network devices
  • Medium 6.1
    CVE-2020-3192

    Cisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerabil…

    Cisco Cisco Prime Collaboration Provisioning Network devices
  • Medium 5.8
    CVE-2020-3190

    Cisco IOS XR Software IPsec Packet Processor Denial of Service Vulnerability

    A vulnerability in the IPsec packet processor of Cisco IOS XR Software could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition for IPsec sessions to an affected device. The vulnerability is due to improper handling of packe…

    Cisco Cisco IOS XR Software iOS Network devices
  • Medium 4.8
    CVE-2020-3185

    Cisco TelePresence Management Suite Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerabi…

    Cisco Cisco TelePresence Management Suite (TMS) Network devices
  • Medium 4.3
    CVE-2020-3182

    Cisco Webex Meetings Client for MacOS Information Disclosure Vulnerability

    A vulnerability in the multicast DNS (mDNS) protocol configuration of Cisco Webex Meetings Client for MacOS could allow an unauthenticated adjacent attacker to obtain sensitive information about the device on which the Webex client is running. The vulnerabili…

    Cisco Cisco Webex Meetings Network devices
  • Medium 6.5
    CVE-2020-3181

    Cisco Email Security Appliance Uncontrolled Resource Exhaustion Vulnerability

    A vulnerability in the malware detection functionality in Cisco Advanced Malware Protection (AMP) in Cisco AsyncOS Software for Cisco Email Security Appliances (ESAs) could allow an unauthenticated remote attacker to exhaust resources on an affected device. T…

    Cisco Cisco Email Security Appliance (ESA) Network devices