Priority CRITICAL 100KEV
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.99999 · Published 2021-12-10 · Partial fix · 2.15.0, 2.3.1 +5 CWE-20
Priority MEDIUM 42
A vulnerability in the Modbus preprocessor of the Snort detection engine could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01456 · Published 2024-11-15 · No fix listed CWE-190
Priority LOW 33
Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption…
CVSS 3.1MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.00516 · Published 2026-03-04 · No fix listed CWE-787
Priority LOW 33
Multiple Cisco products are affected by a vulnerability in the Snort 3 Visual Basic for Applications (VBA) feature which could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.&nbs…
CVSS 3.1MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.00487 · Published 2026-03-04 · No fix listed CWE-369
Priority LOW 33
Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash. This vulnerability is due to i…
CVSS 3.1MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.00487 · Published 2026-03-04 · No fix listed CWE-835
Priority LOW 33
Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption…
CVSS 3.1MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.00557 · Published 2026-03-04 · No fix listed CWE-392
Priority LOW 32
Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption…
CVSS 3.1MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.0047 · Published 2026-03-04 · No fix listed CWE-248
Priority LOW 31
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass the configured policies o…
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00925 · Published 2022-11-10 · No fix listed CWE-244
Priority LOW 28
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote attacker to bypass the configured policies o…
CVSS 3.1MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.01068 · Published 2022-11-10 · No fix listed CWE-244
Priority LOW 27
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system.
CVSS 3.1MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.00684 · Published 2023-11-01 · No fix listed CWE-1039
Priority LOW 26
Multiple Cisco products are affected by a vulnerability in the Snort 3 VBA feature that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to crash.
CVSS 3.1MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.00466 · Published 2026-03-04 · No fix listed CWE-122