Vendor
Cisco
3,476 known vulnerabilities.
Products
Cisco Small Business RV Series Router Firmware 262
Cisco IOS XE Software 248
Cisco Identity Services Engine Software 200
Cisco Firepower Threat Defense Software 160
Cisco Adaptive Security Appliance (ASA) Software 159
Cisco Firepower Management Center 128
Cisco IOS XR Software 115
Cisco NX-OS Software 102
Cisco Secure Firewall Threat Defense (FTD) Software 81
Cisco Data Center Network Manager 74
Cisco Unified Communications Manager 62
Cisco SD-WAN vManage 61
Cisco SD-WAN Solution 54
Cisco Prime Infrastructure 50
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 48
Cisco Webex Meetings 46
Cisco Catalyst SD-WAN Manager 46
Cisco Unified Computing System (Managed) 41
Cisco Enterprise NFV Infrastructure Software 41
IOS 39
Cisco Unity Connection 39
Cisco IOS 36
Cisco ISE Passive Identity Connector 36
Cisco Unified Contact Center Express 36
Cisco WebEx WRF Player 35
Cisco Digital Network Architecture Center (DNA Center) 33
Cisco TelePresence Video Communication Server (VCS) Expressway 33
Cisco Email Security Appliance (ESA) 30
Cisco Application Policy Infrastructure Controller (APIC) 30
Cisco Secure Email 29
Cisco Aironet Access Point Software 29
Cisco UTD SNORT IPS Engine Software 29
Cisco Secure Firewall Management Center (FMC) 29
Cisco RoomOS Software 28
Cisco Nexus Dashboard 28
Cisco Unified Computing System E-Series Software (UCSE) 26
Cisco Wireless LAN Controller (WLC) 25
Cisco Web Security Appliance (WSA) 24
Cisco Unified Communications Manager IM and Presence Service 23
Cisco Secure Endpoint 23
1,877 results · Clear filters · Feed
-
Medium 5.6
A vulnerability in auxiliary asynchronous port (AUX) functions of Cisco IOS XE Software could allow an authenticated, l…
-
Medium 6.5
A vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an authenticated, remote attacker to elevat…
-
Medium 6.0
A vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE Software could allow an authentic…
-
Medium 5.5
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to acc…
-
Medium 5.8
A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, rem…
-
Medium 4.7
A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an…
-
Medium 4.3
A vulnerability in the web-based management interface of Cisco Catalyst Center, formerly Cisco DNA Center, could allow …
-
Medium 4.3
A vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker t…
-
Medium 6.5
A vulnerability in the Secure Copy Protocol (SCP) and SFTP feature of Cisco IOS XR Software could allow an authenticate…
-
Medium 5.8
A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR…
-
Medium 5.8
A vulnerability in the access control list (ACL) processing on Pseudowire interfaces in the ingress direction of Cisco …
-
Medium 5.3
A vulnerability in the DHCP version 4 (DHCPv4) server feature of Cisco IOS XR Software could allow an unauthenticated, …
-
Medium 6.5
A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote a…
-
Medium 5.4
A vulnerability in the web-based management interface of Cisco AppDynamics Controller could allow an authenticated, rem…
-
Medium 4.4
A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authentic…
-
Medium 6.5
A vulnerability in the web-based user interface of Cisco Small Business 100, 300, and 500 Series Wireless APs could all…
-
Medium 6.5
A vulnerability in the web-based management interface of Cisco Small Business 100, 300, and 500 Series Wireless APs cou…
-
Medium 6.2
A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker t…
-
Medium 5.3CVE-2024-20328 EPSS 85%
ClamAV VirusEvent File Processing Command Injection Vulnerability
A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file names. A local attacker could exploit this…
-
Medium 6.6
A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software cou…
-
Medium 5.8
A vulnerability in the access control list (ACL) programming for port channel subinterfaces of Cisco Nexus 3000 and 900…
-
Medium 5.3
A vulnerability in system resource management in Cisco UCS 6400 and 6500 Series Fabric Interconnects that are in Inters…
-
Medium 5.1
A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local atta…
-
Medium 5.8
A vulnerability with the access control list (ACL) management within a stacked switch configuration of Cisco Business 2…
-
Medium 4.8
A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote at…
-
Medium 6.8
A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance install…
-
Medium 6.5
A vulnerability in the web-based management interface of the Cisco WAP371 Wireless-AC/N Dual Radio Access Point (AP) wi…
-
Medium 6.0
A vulnerability in the application CLI of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager cou…
-
Medium 6.5
A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remot…
-
Medium 6.5
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Netw…
-
Medium 4.8
A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remot…
-
Medium 4.8
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authentica…
-
Medium 4.8
A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform and Cisco Broad…
-
Medium 4.1
A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepow…
-
Medium 5.5
Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an au…
-
Medium 5.5
Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an au…
-
Medium 5.0
A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attac…
-
Medium 6.3
A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to …
-
Medium 6.7
A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, r…
-
Medium 4.8
A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to con…