Browse CVEs

MEDIUM 6.7 CVE-2024-20492 A vulnerability in the restricted shell of Cisco Expressway Series could allow an authenticated, local attacker to perform command injection attacks … Telepresence Video Communication Server Mitigation only Fix from $1,6002024-10-02 MEDIUM 6.5 CVE-2024-20515 A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain… Identity Services Engine Mitigation only Fix from $1,6002024-10-02 HIGH 8.8 CVE-2024-20393 A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could all… Rv340 Dual Wan Gigabit Vpn Router Firmware Mitigation only Fix from $1,9502024-10-02 HIGH 7.2 CVE-2024-20365 A vulnerability in the Redfish API of Cisco UCS B-Series, Cisco UCS Managed C-Series, and Cisco UCS X-Series Servers could allow an authenticated, re… Unified Computing System Mitigation only Fix from $1,9502024-10-02 CRITICAL 9.3 CVE-2024-20510 A vulnerability in the Central Web Authentication (CWA) feature of Cisco IOS XE Software for Wireless Controllers could allow an unauthenticated, adj… Ios Xe Mitigation only Fix from $2,3002024-09-25 MEDIUM 6.5 CVE-2024-20508 A vulnerability in Cisco Unified Threat Defense (UTD) Snort Intrusion Prevention System (IPS) Engine for Cisco IOS XE Software could allow an unauthe… Unified Threat Defense Snort Intrusion Prevention System Engine Mitigation only Fix from $1,6002024-09-25 HIGH 8.6 CVE-2024-20464 A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause… Ios Xe Mitigation only Fix from $1,9502024-09-25 HIGH 8.6 CVE-2024-20467 A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE Software could allow an unauthenticated, remote attac… Ios Xe Mitigation only Fix from $1,9502024-09-25 HIGH 8.6 CVE-2024-20480 A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edge nodes could allow an unauthe… Ios Xe Mitigation only Fix from $1,9502024-09-25 MEDIUM 5.8 CVE-2024-20465 A vulnerability in the access control list (ACL) programming of Cisco IOS Software running on Cisco Industrial Ethernet 4000, 4010, and 5000 Series S… iOS Mitigation only Fix from $1,6002024-09-25 MEDIUM 5.4 CVE-2024-20475 A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, … Catalyst Sd Wan Manager Mitigation only Fix from $1,6002024-09-25 HIGH 8.8 CVE-2024-20437 A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to perform a cross-sit… Ios Xe Mitigation only Fix from $1,9502024-09-25 HIGH 8.6 CVE-2024-20455 A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software in contro… Ios Xe Mitigation only Fix from $1,9502024-09-25 HIGH 7.5 CVE-2024-20436 A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, rem… Ios Xe Mitigation only Fix from $1,9502024-09-25 HIGH 8.1 CVE-2024-20350 A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate… Catalyst Center Mitigation only Fix from $1,9502024-09-25 HIGH 7.5 CVE-2024-20433 A vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, r… iOS Mitigation only Fix from $1,9502024-09-25 MEDIUM 6.5 CVE-2024-20414 A vulnerability in the web UI feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cr… Ios Xe Mitigation only Fix from $1,6002024-09-25 HIGH 7.2 CVE-2024-20483 Multiple vulnerabilities in Cisco Routed PON Controller Software, which runs as a docker container on hardware that is supported by Cisco IOS XR Soft… Ios Xr Mitigation only Fix from $1,9502024-09-11 MEDIUM 5.5 CVE-2024-20489 A vulnerability in the storage method of the PON Controller configuration file could allow an authenticated, local attacker with low privileges to ob… Ios Xr Mitigation only Fix from $1,6002024-09-11 HIGH 8.8 CVE-2024-20381 A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD that is used by the web-based management… Ios Xr Mitigation only Fix from $1,9502024-09-11 HIGH 7.8 CVE-2024-20398 A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to obtain read/write file system access on the under… Ios Xr Mitigation only Fix from $1,9502024-09-11 HIGH 7.4 CVE-2024-20317 A vulnerability in the handling of specific Ethernet frames by Cisco IOS XR Software for various Cisco Network Convergence System (NCS) platforms cou… Ios Xr Mitigation only Fix from $1,9502024-09-11 MEDIUM 5.5 CVE-2024-20343 A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to read any file in the file system of the underlyin… Ios Xr Mitigation only Fix from $1,6002024-09-11 HIGH 7.5 CVE-2024-20304 A vulnerability in the multicast traceroute version 2 (Mtrace2) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to e… Ios Xr Mitigation only Fix from $1,9502024-09-11 MEDIUM 5.5 CVE-2024-20503 A vulnerability in Cisco Duo Epic for Hyperdrive could allow an authenticated, local attacker to view sensitive information in cleartext on an affect… Duo Authentication For Epic Mitigation only Fix from $1,6002024-09-04 HIGH 7.5 CVE-2024-20440EPSS 52% A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information. This vulnerabili… Smart License Utility Mitigation only Fix from $1,9502024-09-04 MEDIUM 6.7 CVE-2024-20469 A vulnerability in specific CLI commands in Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to perform command inje… Identity Services Engine Mitigation only Fix from $1,6002024-09-04 HIGH 7.2 CVE-2024-20478 A vulnerability in the software upgrade component of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Network Controlle… Application Policy Infrastructure Controller Mitigation only Fix from $1,9502024-08-28 HIGH 8.8 CVE-2024-20286 A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python s… Nx Os Mitigation only Fix from $1,9502024-08-28 HIGH 8.8 CVE-2024-20285 A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python s… Nx Os Mitigation only Fix from $1,9502024-08-28