PT-2026-34270

Name of the Vulnerable Software and Affected Versions Cisco ISE affected versions not specified Cisco ISE-PIC affected versions not specified Description Insufficient validation of user-supplied input in Cisco ISE and ISE-PIC allows an authenticated remote attacker with valid administrative...

EUVD-2026-15426

A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memory of an affected device. This vulnerability is due to improper management of memory resources during TLS connection setup. An attacker could exploit this...

EUVD-2019-4258

Malware in sbrugna...

EUVD-2020-24482

Malware in sbrugna...

EUVD-2018-1292

Malware in sbrugna...

EUVD-2020-24688

Malware in sbrugna...

EUVD-2019-4240

Malware in sbrugna...

EUVD-2017-3802

Malware in sbrugna...

EUVD-2020-24736

Malware in sbrugna...

EUVD-2020-24489

Malware in sbrugna...

EUVD-2022-26120

Malicious code in bioql PyPI...

EUVD-2022-25928

Malicious code in bioql PyPI...

EUVD-2025-13899

Malicious code in bioql PyPI...

EUVD-2022-25943

Malicious code in bioql PyPI...

CVE-2024-20278

A vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate privileges to root on an affected device. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending craft...

CVE-2023-20231

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the...

CVE-2025-20199

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

CVE-2025-20195

CVE-2025-20195 concerns Cisco IOS XE Software and describes a CSRF vulnerability in the web-based management interface. The issue arises from insufficient CSRF protections, enabling an unauthenticated, remote attacker to persuade an authenticated user to follow a crafted link, potentially executi...

CVE-2025-20197

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

CVE-2025-20189

The CVE-2025-20189 entry concerns Cisco IOS XE Software on Cisco ASR 903 routers with RSP3C, where the Cisco Express Forwarding path mishandles ARP messages. The root cause is improper memory management during ARP processing, enabling an unauthenticated adjacent attacker to send crafted ARP traff...