CVE Database

117989+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2024-20494
8.6 HIGH

A vulnerability in the TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, …

Oct 23, 2024
CVE-2024-20493
5.3 MEDIUM

A vulnerability in the login authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat …

Oct 23, 2024
CVE-2024-20485
6.0 MEDIUM

A vulnerability in the VPN web server of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, …

Oct 23, 2024
CVE-2024-20482
6.5 MEDIUM

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote …

Oct 23, 2024
CVE-2024-20481
5.8 MEDIUM KEV

A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow …

Oct 23, 2024
CVE-2024-20474
4.3 MEDIUM

A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial …

Oct 23, 2024
CVE-2024-20473
6.5 MEDIUM

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection …

Oct 23, 2024
CVE-2024-20472
6.5 MEDIUM

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection …

Oct 23, 2024
CVE-2024-20471
6.5 MEDIUM

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to conduct SQL injection …

Oct 23, 2024
CVE-2024-20431
5.8 MEDIUM

A vulnerability in the geolocation access control feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass an access …

Oct 23, 2024
CVE-2024-20426
8.6 HIGH

A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol for VPN termination of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat …

Oct 23, 2024
CVE-2024-20424
9.9 CRITICAL

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote …

Oct 23, 2024
CVE-2024-20415
4.8 MEDIUM

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting …

Oct 23, 2024
CVE-2024-20412
9.3 CRITICAL

A vulnerability in Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series could allow an unauthenticated, local attacker to …

Oct 23, 2024
CVE-2024-20410
5.4 MEDIUM

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting …

Oct 23, 2024
CVE-2024-20409
4.8 MEDIUM

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting …

Oct 23, 2024
CVE-2024-20408
7.7 HIGH

A vulnerability in the Dynamic Access Policies (DAP) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow …

Oct 23, 2024
CVE-2024-20407
5.8 MEDIUM

A vulnerability in the interaction between the TCP Intercept feature and the Snort 3 detection engine on Cisco Firepower Threat Defense (FTD) Software could allow …

Oct 23, 2024
CVE-2024-20403
4.8 MEDIUM

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting …

Oct 23, 2024
CVE-2024-20402
8.6 HIGH

A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, …

Oct 23, 2024
CVE-2024-20388
5.3 MEDIUM

A vulnerability in the password change feature of Cisco Firepower Management Center (FMC) software could allow an unauthenticated, remote attacker to determine valid user names …

Oct 23, 2024
CVE-2024-20387
5.4 MEDIUM

A vulnerability in the web-based management interface of Cisco FMC Software could allow an authenticated, remote attacker to store malicious content for use in XSS …

Oct 23, 2024
CVE-2024-20386
4.8 MEDIUM

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a stored cross-site …

Oct 23, 2024
CVE-2024-20384
5.8 MEDIUM

A vulnerability in the Network Service Group (NSG) feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow …

Oct 23, 2024
CVE-2024-20382
6.1 MEDIUM

A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow …

Oct 23, 2024
CVE-2024-20379
6.5 MEDIUM

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote …

Oct 23, 2024
CVE-2024-20377
5.4 MEDIUM

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a stored cross-site scripting …

Oct 23, 2024
CVE-2024-20374
6.5 MEDIUM

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote …

Oct 23, 2024
CVE-2024-20372
6.1 MEDIUM

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a stored cross-site …

Oct 23, 2024
CVE-2024-20370
6.0 MEDIUM

A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) …

Oct 23, 2024
CVE-2024-20364
4.8 MEDIUM

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a stored cross-site …

Oct 23, 2024
CVE-2024-10297
4.7 MEDIUM

A vulnerability was found in PHPGurukul Medical Card Generation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality …

Oct 23, 2024
CVE-2024-50383
5.9 MEDIUM

Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 (used in Chacha-Poly1305 and x25519). An addition …

Oct 23, 2024
CVE-2024-50382
5.9 MEDIUM

Botan before 3.6.0, when certain LLVM versions are used, has compiler-induced secret-dependent control flow in lib/utils/ghash/ghash.cpp in GHASH in AES-GCM. There is a branch instead …

Oct 23, 2024
CVE-2024-49756
5.3 MEDIUM

AshPostgres is the PostgreSQL data layer for Ash Framework. Starting in version 2.0.0 and prior to version 2.4.10, in certain very specific situations, it was …

Oct 23, 2024
CVE-2024-20351
8.6 HIGH

A vulnerability in the TCP/IP traffic handling function of the Snort Detection Engine of Cisco Firepower Threat Defense (FTD) Software and Cisco FirePOWER Services could …

Oct 23, 2024
CVE-2024-20342
5.8 MEDIUM

Multiple Cisco products are affected by a vulnerability in the rate filtering feature of the Snort detection engine that could allow an unauthenticated, remote attacker …

Oct 23, 2024
CVE-2024-20341
6.1 MEDIUM

A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow …

Oct 23, 2024
CVE-2024-20340
6.5 MEDIUM

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote …

Oct 23, 2024
CVE-2024-20339
8.6 HIGH

A vulnerability in the TLS processing feature of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series could allow an unauthenticated, remote attacker …

Oct 23, 2024
CVE-2024-20331
6.8 MEDIUM

A vulnerability in the session authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat …

Oct 23, 2024
CVE-2024-20330
8.6 HIGH

A vulnerability in the Snort 2 and Snort 3 TCP and UDP detection engine of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 …

Oct 23, 2024
CVE-2024-20329
9.9 CRITICAL

A vulnerability in the SSH subsystem of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to execute operating system commands as …

Oct 23, 2024
CVE-2024-20300
4.8 MEDIUM

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting …

Oct 23, 2024
CVE-2024-20299
5.8 MEDIUM

A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote …

Oct 23, 2024
CVE-2024-20298
4.8 MEDIUM

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to conduct a cross-site scripting …

Oct 23, 2024
CVE-2024-20297
5.8 MEDIUM

A vulnerability in the AnyConnect firewall for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote …

Oct 23, 2024
CVE-2024-20275
6.1 MEDIUM

A vulnerability in the cluster backup feature of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote …

Oct 23, 2024
CVE-2024-20274
5.5 MEDIUM

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote …

Oct 23, 2024
CVE-2024-20273
6.1 MEDIUM

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting …

Oct 23, 2024

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.