Lucene search
+L

1492 matches found

The Hacker News
The Hacker News
•added 2025/05/07 10:44 a.m.•45 views

Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day to Breach U.S. Organization

Threat actors with links to the Play ransomware family exploited a recently patched security flaw in Microsoft Windows as a zero-day as part of an attack targeting an unnamed organization in the United States. The attack, per the Symantec Threat Hunter Team, part of Broadcom, leveraged...

7.8CVSS8.3AI score0.13904EPSS
SaveExploits5
CNNVD
CNNVD
•added 2025/05/07 12:00 a.m.•17 views

Cisco多款产品 缓冲区错误漏洞

Cisco IOS and others are products of Cisco Corporation USA.Cisco IOS is a set of operating systems developed for its network appliances.Cisco IOS XE is an operating system.Cisco Adaptive Security Appliance is a network appliance. A buffer error vulnerability exists in various Cisco products that...

8.6CVSS6.5AI score0.00555EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2025/04/23 12:00 a.m.•8 views

VulnCheck KEV: CVE-2020-3529

A vulnerability in the SSL VPN negotiation process for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. The...

8.6CVSS7.5AI score0.01871EPSS
SaveIn wildExploits0References2
Packet Storm News
Packet Storm News
•added 2025/04/19 12:00 a.m.•13 views

Application of Deep Reinforcement Learning for Intrusion Detection in Internet of Things: a Systematic Review

The Internet of Things IoT has significantly expanded the digital landscape, interconnecting an unprecedented array of devices, from home appliances to industrial equipment. This growth enhances functionality, e.g., automation, remote monitoring, and control, and introduces substantial security...

7AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/03/17 12:00 a.m.•17 views

Akamai ASE 安全漏洞

Akamai ASE is an adaptive security engine from Akamai. A security vulnerability exists in Akamai ASE versions prior to 2024-12-10, which stems from Rule 3000216 not properly handling JavaScript variable assignments...

5.4CVSS6.7AI score0.00238EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/02/05 9:12 p.m.•14 views

CVE-2022-20924

A vulnerability in the Simple Network Management Protocol SNMP feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerabili...

7.7CVSS6.9AI score0.00842EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 9:06 p.m.•15 views

CVE-2022-20927

A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper memory...

7.7CVSS6.9AI score0.00533EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 9:05 p.m.•21 views

CVE-2022-20947

A vulnerability in dynamic access policies DAP functionality of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. This...

8.6CVSS7.1AI score0.00931EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 3:00 p.m.•20 views

CVE-2020-27124

A vulnerability in the SSL/TLS handler of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause the affected device to reload unexpectedly, leading to a denial of service DoS condition. The vulnerability is due to improper error handling on...

8.6CVSS7AI score0.0092EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/05 1:17 a.m.•19 views

CVE-2024-20426

A vulnerability in the Internet Key Exchange version 2 IKEv2 protocol for VPN termination of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

8.6CVSS7.2AI score0.00518EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 1:14 a.m.•19 views

CVE-2024-20260

A vulnerability in the VPN and management web servers of the Cisco Adaptive Security Virtual Appliance ASAv and Cisco Secure Firewall Threat Defense Virtual FTDv, formerly Cisco Firepower Threat Defense Virtual, platforms could allow an unauthenticated, remote attacker to cause the virtual device...

8.6CVSS7.2AI score0.00594EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 1:14 a.m.•13 views

CVE-2024-20495

A vulnerability in the Remote Access VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition on an...

8.6CVSS7.3AI score0.00518EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 1:11 a.m.•16 views

CVE-2024-20329

A vulnerability in the SSH subsystem of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to execute operating system commands as root. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by...

9.9CVSS7.7AI score0.01151EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/01/10 12:00 a.m.•20 views

The vulnerability in the web server of Cisco Adaptive Security Appliance (ASA), a microprogramming-based network device, allows attackers to execute XSS attacks.

The vulnerability of Cisco Adaptive Security Appliance ASA’s microprogramming-based web server exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS7.4AI score0.22558EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/12/16 12:00 a.m.•15 views

The vulnerability of the Snort module of the microprogramming software for Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to trigger a service failure.

The vulnerability of the Snort module of the microprogramming software for Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause...

8.6CVSS5.8AI score0.00661EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/16 12:00 a.m.•19 views

The vulnerability of the Cisco FXOS CLI microprogramming software for Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to enhance their privileges.

The vulnerability of the Cisco FXOS CLI microprogramming software for Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

6.2CVSS5.5AI score0.00166EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/06 12:00 a.m.•19 views

The vulnerability of the SSL VPN remote access function in Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to cause a service failure.

The vulnerability of the SSL VPN remote access function in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD systems is related to the use of insufficiently random values. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.8CVSS5.5AI score0.00677EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/06 12:00 a.m.•16 views

The vulnerability of AnyConnect, a microprogramming-based network interface software from Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD), allows attackers to circumvent existing security restrictions.

The vulnerability of AnyConnect, a microprogramming-based network interface software used by Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD, relates to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to...

5.8CVSS5.4AI score0.0048EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/06 12:00 a.m.•22 views

The vulnerability of the web-client VPN microprogramming system used by Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to induce a service failure.

The vulnerability of the web-client VPN microprogramming software for Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

8.6CVSS5.5AI score0.00594EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/12/06 12:00 a.m.•17 views

The vulnerability of the SSH server of the microprogrammed network interface devices of Cisco Adaptive Security Appliance (ASA) allows a attacker to execute arbitrary commands on the basic operating system as the root user.

The vulnerability of the SSH server of the microprogrammed network interface devices in Cisco Adaptive Security Appliance ASA is related to insufficient validation of data entered by users. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the basic operating...

9.9CVSS6.4AI score0.01151EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder