Browse CVEs

MEDIUM 5.5 CVE-2018-4381 A resource exhaustion issue was addressed with improved input validation. This issue is fixed in tvOS 12.1, iOS 12.1. Processing a maliciously crafte… Iphone Os 12.1+ Fix from $1,6002020-10-27 HIGH 7.5 CVE-2020-7755 All versions of package dat.gui are vulnerable to Regular Expression Denial of Service (ReDoS) via specifically crafted rgb and rgba values. Dat.gui 0.7.8+ Fix from $1,9502020-10-27 HIGH 7.5 CVE-2020-7753 All versions of package trim are vulnerable to Regular Expression Denial of Service (ReDoS) via trim(). Trim No fix yet Fix from $1,9502020-10-27 HIGH 8.6 CVE-2020-3571 A vulnerability in the ICMP ingress packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 4110 appliances could allo… Secure Firewall Threat Defense 6.3.0.6 / 6.4.0.10+ Fix from $1,9502020-10-21 HIGH 8.6 CVE-2020-3572 A vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software … Adaptive Security Appliance 6.3.0.6 / 6.4.0.10+ Fix from $1,9502020-10-21 HIGH 7.5 CVE-2020-3533 A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco Firepower Threat Defense (FTD) Software could allow … Secure Firewall Threat Defense 6.3.0.6 / 6.4.0.10+ Fix from $1,9502020-10-21 HIGH 7.5 CVE-2020-3554 A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software co… Adaptive Security Appliance 6.4.0.10 / 6.5.0.5+ Fix from $1,9502020-10-21 HIGH 8.6 CVE-2020-3563 A vulnerability in the packet processing functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attack… Secure Firewall Threat Defense 6.3.0.6 / 6.4.0.10+ Fix from $1,9502020-10-21 HIGH 8.6 CVE-2020-3499 A vulnerability in the licensing service of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to cause… Secure Firewall Management Center Mitigation only Fix from $1,9502020-10-21 HIGH 7.5 CVE-2020-3528 A vulnerability in the OSPF Version 2 (OSPFv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense … Adaptive Security Appliance 6.3.0.6 / 6.4.0.10+ Fix from $1,9502020-10-21 HIGH 7.5 CVE-2020-3529 A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Soft… Adaptive Security Appliance 6.3.0.6 / 6.4.0.10+ Fix from $1,9502020-10-21 HIGH 8.6 CVE-2020-3304 A vulnerability in the web interface of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an u… Adaptive Security Appliance 6.3.0.6 / 6.4.0.10+ Fix from $1,9502020-10-21 HIGH 8.6 CVE-2020-3373 A vulnerability in the IP fragment-handling implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FT… Secure Firewall Threat Defense Mitigation only Fix from $1,9502020-10-21 HIGH 7.5 CVE-2020-1684 On Juniper Networks SRX Series configured with application identification inspection enabled, receipt of specific HTTP traffic can cause high CPU loa… Junos Mitigation only Fix from $1,9502020-10-16 MEDIUM 6.5 CVE-2020-1687 On Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in (Ethernet VPN) EVPN-(Virtual Extensible LAN) VXLAN configuration, re… Junos Mitigation only Fix from $1,6002020-10-16 MEDIUM 6.5 CVE-2020-1689 On Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in a Virtual Chassis configuration, receipt of a stream of specific lay… Junos Mitigation only Fix from $1,6002020-10-16 MEDIUM 6.5 CVE-2020-1678 On Juniper Networks Junos OS and Junos OS Evolved platforms with EVPN configured, receipt of specific BGP packets causes a slow memory leak. If the m… Junos Mitigation only Fix from $1,6002020-10-16 MEDIUM 6.5 CVE-2020-1668 On Juniper Networks EX2300 Series, receipt of a stream of specific multicast packets by the layer2 interface can cause high CPU load, which could lea… Junos Mitigation only Fix from $1,6002020-10-16 MEDIUM 6.5 CVE-2020-1670 On Juniper Networks EX4300 Series, receipt of a stream of specific IPv4 packets can cause Routing Engine (RE) high CPU load, which could lead to netw… Junos Mitigation only Fix from $1,6002020-10-16 MEDIUM 6.5 CVE-2020-11645 A denial of service vulnerability in B&R GateManager 4260 and 9250 versions <9.0.20262 and GateManager 8250 versions <9.2.620236042 allows authentica… Gatemanager 9250 Firmware 9.0.20262 / 9.2.620236042+ Fix from $1,6002020-10-15 MEDIUM 6.5 CVE-2020-3543 A vulnerability in the Cisco Discovery Protocol of Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker … 8000p Ip Camera Firmware Mitigation only Fix from $1,6002020-10-08 MEDIUM 5.5 CVE-2020-26164 In kdeconnect-kde (aka KDE Connect) before 20.08.2, an attacker on the local network could send crafted packets that trigger use of large amounts of … Kdeconnect 20.08.2+ Fix from $1,6002020-10-07 MEDIUM 5.3 CVE-2020-1901 Receiving a large text message containing URLs in WhatsApp for iOS prior to v2.20.91.4 could have caused the application to freeze while processing t… Whatsapp 2.20.91.4+ Fix from $1,6002020-10-06 MEDIUM 5.5 CVE-2020-1903 An issue when unzipping docx, pptx, and xlsx documents in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could ha… Whatsapp 2.20.61+ Fix from $1,6002020-10-06 HIGH 7.5 CVE-2019-20922 Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching. The parser may be forced into an endless loop … Handlebars 4.4.5+ Fix from $1,9502020-09-30 HIGH 7.5 CVE-2018-10432 Pexip Infinity before 18 allows Remote Denial of Service (TLS handshakes in RTMP). Pexip Infinity 18+ Fix from $1,9502020-09-25 HIGH 7.5 CVE-2018-10585 Pexip Infinity before 18 allows remote Denial of Service (XML parsing). Pexip Infinity 18+ Fix from $1,9502020-09-25 HIGH 8.6 CVE-2020-3560 A vulnerability in Cisco Aironet Access Points (APs) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on an affecte… Wireless Lan Controller 8.5.161.0 / 8.8.130.0+ Fix from $1,9502020-09-24 HIGH 8.6 CVE-2020-3510 A vulnerability in the Umbrella Connector component of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches could allow an unauthenticated, … Ios Xe Mitigation only Fix from $1,9502020-09-24 HIGH 7.4 CVE-2020-3512 A vulnerability in the PROFINET handler for Link Layer Discovery Protocol (LLDP) messages of Cisco IOS Software and Cisco IOS XE Software could allow… Ios Xe Mitigation only Fix from $1,9502020-09-24