Priority MEDIUM 44
A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cau…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-08-05 · No fix listed CWE-606
Priority MEDIUM 43
A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, and Cisco Secure Firewall Threat Defe…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.0036 · Published 2026-03-25 · No fix listed CWE-401
Priority MEDIUM 51
A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR So…
CVSS 3.1CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.0716 · Published 2025-09-25 · No fix listed CWE-122
Priority LOW 28
A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition…
CVSS 3.1MEDIUM 6.5· Local · Low privileges · No interaction · EPSS 0.0024 · Published 2025-09-24 · No fix listed CWE-120
Priority LOW 34
A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00416 · Published 2025-09-24 · No fix listed CWE-1287
Priority CRITICAL 93KEV
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a de…
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.40575 · Published 2025-09-24 · No fix listed CWE-121
Priority LOW 38
A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive data or bypass authentication.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00448 · Published 2025-09-24 · No fix listed CWE-287
Priority LOW 31
A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical…
CVSS 3.0MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00199 · Published 2025-05-07 · No fix listed CWE-347
Priority LOW 21
A vulnerability in the access control list (ACL) programming of Cisco IOS Software that is running on Cisco Catalyst 1000 Switches and Cisco Catalyst 2960L Switches could allow an unauthenticated, remote attacker to bypa…
CVSS 3.1MEDIUM 4.7· Adjacent network · No auth · No interaction · EPSS 0.00285 · Published 2025-05-07 · No fix listed CWE-284
Priority MEDIUM 46
A vulnerability in the Two-Way Active Measurement Protocol (TWAMP) server feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload, re…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00545 · Published 2025-05-07 · No fix listed CWE-20
Priority LOW 35
A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00783 · Published 2025-02-05 · No fix listed CWE-805
Priority LOW 35
A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00764 · Published 2025-02-05 · No fix listed CWE-805
Priority LOW 35
A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00764 · Published 2025-02-05 · No fix listed CWE-805
Priority LOW 35
A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00783 · Published 2025-02-05 · No fix listed CWE-805
Priority LOW 35
A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00783 · Published 2025-02-05 · No fix listed CWE-248
Priority LOW 35
A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00764 · Published 2025-02-05 · No fix listed CWE-248
Priority LOW 35
A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00764 · Published 2025-02-05 · No fix listed CWE-248
Priority LOW 35
A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00764 · Published 2025-02-05 · No fix listed CWE-248
Priority LOW 28
A vulnerability in the web UI feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system through th…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00264 · Published 2024-09-25 · No fix listed CWE-285
Priority LOW 32
A vulnerability in the access control list (ACL) programming of Cisco IOS Software running on Cisco Industrial Ethernet 4000, 4010, and 5000 Series Switches could allow an unauthenticated, remote attacker to bypass a con…
CVSS 3.1MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.00416 · Published 2024-09-25 · No fix listed CWE-284
Priority MEDIUM 44
A vulnerability in the Resource Reservation Protocol (RSVP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resu…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.0063 · Published 2024-09-25 · No fix listed CWE-121
Priority LOW 34
A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap overflow, resulting in an affected device reloading.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00726 · Published 2024-03-27 · No fix listed CWE-121
Priority MEDIUM 45
A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap underflow, resulting in an affected device reloading.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00803 · Published 2024-03-27 · No fix listed CWE-787
Priority LOW 32
A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) cond…
CVSS 3.1HIGH 7.4· Adjacent network · No auth · No interaction · EPSS 0.00256 · Published 2024-03-27 · No fix listed CWE-476
Priority LOW 32
A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly.
CVSS 3.1HIGH 7.4· Adjacent network · No auth · No interaction · EPSS 0.00291 · Published 2024-03-27 · No fix listed CWE-248
Load more