Browse CVEs

CRITICAL 10.0 CVE-2025-32433 KEVEPSS 99% Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server ma… Confd Basic 5.7.19.1 / 6.1.16.2+ Fix from $2,3002025-04-16 CRITICAL 9.9 CVE-2025-20156 A vulnerability in the REST API of Cisco Meeting Management could allow a remote, authenticated attacker with low privileges to elevate privileges to… Meeting Management 3.9.1+ Fix from $2,3002025-01-22 CRITICAL 9.9 CVE-2023-20036EPSS 13% A vulnerability in the web UI of Cisco IND could allow an authenticated, remote attacker to execute arbitrary commands with administrative privileges… Industrial Network Director 1.11.3+ Fix from $2,3002024-11-15 CRITICAL 9.9 CVE-2024-20424 A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center… Secure Firewall Management Center Mitigation only Fix from $2,3002024-10-23 CRITICAL 9.9 CVE-2024-20329 A vulnerability in the SSH subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to execute ope… Adaptive Security Appliance Software Mitigation only Fix from $2,3002024-10-23 CRITICAL 9.1 CVE-2024-20520 A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, A… Rv042 Firmware Mitigation only Fix from $2,3002024-10-02 CRITICAL 9.1 CVE-2024-20521 A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, A… Rv042 Firmware Mitigation only Fix from $2,3002024-10-02 CRITICAL 9.1 CVE-2024-20518 A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, A… Rv042 Firmware Mitigation only Fix from $2,3002024-10-02 CRITICAL 9.1 CVE-2024-20519 A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, A… Rv042 Firmware Mitigation only Fix from $2,3002024-10-02 CRITICAL 9.3 CVE-2024-20510 A vulnerability in the Central Web Authentication (CWA) feature of Cisco IOS XE Software for Wireless Controllers could allow an unauthenticated, adj… Ios Xe Mitigation only Fix from $2,3002024-09-25 CRITICAL 9.8 CVE-2024-20439 KEVEPSS 92% A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a sta… Smart License Utility 2.3.0+ Fix from $2,3002024-09-04 CRITICAL 9.8 CVE-2024-20450EPSS 7% Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series… Spa 301 Firmware Mitigation only Fix from $2,3002024-08-07 CRITICAL 9.8 CVE-2024-20454EPSS 7% Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series… Spa 301 Firmware Mitigation only Fix from $2,3002024-08-07 CRITICAL 10.0 CVE-2024-20419EPSS 81% A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to… Smart Software Manager On Prem 8-202112+ Fix from $2,3002024-07-17 CRITICAL 9.8 CVE-2024-20401 A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker … Secure Email Gateway 15.5.1-055+ Fix from $2,3002024-07-17 CRITICAL 10.0 CVE-2024-20253 A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an unauthenticated, remote attacker to exe… Unified Communications Manager 12.5 / 14su3+ Fix from $2,3002024-01-26 CRITICAL 9.8 CVE-2024-20272 A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to upload arbitrary f… Unity Connection 12.5.1.19017-4 / 14.0.1.14006-5+ Fix from $2,3002024-01-17 CRITICAL 9.8 CVE-2023-31488 Hyland Perceptive Filters releases before 2023-12-08 (e.g., 11.4.0.2647), as used in Cisco IronPort Email Security Appliance Software, Cisco Secure E… Ironport Email Security Appliance Mitigation only Fix from $2,3002024-01-10 CRITICAL 9.9 CVE-2023-20048EPSS 16% A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to ex… Secure Firewall Management Center after 7.3.1.1 Fix from $2,3002023-11-01 CRITICAL 10.0 CVE-2023-20198 KEVEPSS 100% Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating… Ios Xe 16.12.10a / 17.3.8a+ Fix from $2,3002023-10-16 CRITICAL 9.8 CVE-2023-20101 A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected device using the root account, … Emergency Responder No fix yet Fix from $2,3002023-10-04 CRITICAL 9.8 CVE-2023-20252 A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an unauthenticated, remot… Catalyst Sd Wan Manager Mitigation only Fix from $2,3002023-09-27 CRITICAL 9.1 CVE-2023-20186 A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could allow an aut… iOS Mitigation only Fix from $2,3002023-09-27 CRITICAL 9.8 CVE-2023-20238EPSS 15% A vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Pl… Broadworks Application Delivery Platform 23.0.1075.ap384245+ Fix from $2,3002023-09-06 CRITICAL 9.1 CVE-2023-20269 KEVEPSS 22% A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Softwar… Adaptive Security Appliance Software Mitigation only Fix from $2,3002023-09-06 CRITICAL 9.1 CVE-2023-20017 Multiple vulnerabilities in Cisco Intersight Private Virtual Appliance could allow an authenticated, remote attacker to execute arbitrary commands us… Intersight Private Virtual Appliance Mitigation only Fix from $2,3002023-08-16 CRITICAL 9.1 CVE-2023-20013 Multiple vulnerabilities in Cisco Intersight Private Virtual Appliance could allow an authenticated, remote attacker to execute arbitrary commands us… Intersight Private Virtual Appliance Mitigation only Fix from $2,3002023-08-16 CRITICAL 9.1 CVE-2023-20214 A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow an unauthenticated, remote att… Catalyst Sd Wan Manager 20.6.4.2 / 20.6.5.5+ Fix from $2,3002023-08-03 CRITICAL 9.8 CVE-2023-20189EPSS 11% Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attac… Business 250 16p 2g Firmware Mitigation only Fix from $2,3002023-05-18 CRITICAL 9.8 CVE-2023-20157 Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attac… Business 250 16p 2g Firmware Mitigation only Fix from $2,3002023-05-18