CVE-2018-0231

A vulnerability in the Transport Layer Security TLS library of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a reload of the affected device, resulting in a denial of service DoS condition...

Cisco ASA Software, FTD Software, and AnyConnect Secure Mobility Client SAML Authentication Session Fixation Vulnerability

A vulnerability in the implementation of Security Assertion Markup Language SAML Single Sign-On SSO authentication for Cisco AnyConnect Secure Mobility Client for Desktop Platforms, Cisco Adaptive Security Appliance ASA Software, and Cisco Firepower Threat Defense FTD Software could allow an...

PT-2018-1300 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: Multiple vulnerabilities in the Application Layer Protocol Inspection...

Cisco Adaptive Security Appliance Remote Code Execution and Denial of Service Vulnerability

Summary A vulnerability in the Secure Sockets Layer SSL VPN functionality of the Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to an attempt to double fr...

CVE-2017-12245

CVE-2017-12245 describes a memory-consumption DoS vulnerability in Cisco Firepower Threat Defense (FTD) Software’s SSL traffic decryption. Root cause: an error in how the Firepower Detection Snort Engine handles SSL traffic decryption and communicates with the ASA handler, enabling an unauthentic...

Cisco Firepower Detection Engine SSL Decryption Memory Consumption Denial of Service Vulnerability

A vulnerability in SSL traffic decryption for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause depletion of system memory. If this memory leak persists over time, a denial of service DoS condition could develop because traffic can cease to be...

Cisco Firepower Detection Engine SSL Multiple DoS (cisco-sa-20170405-cfpw) (cisco-sa-20170405-cfpw1)

According to its version, the Cisco Firepower Threat Defense FTD software installed on the remote device is prior to 6.1.0.2 or else is 6.2.x prior to 6.2.0.1. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in the detection engine reassembly of...

Cisco Firepower System Software SSL Logging DoS (cisco-sa-20170517-fpwr)

According to its version, the Cisco Firepower Threat Defense FTD software installed on the remote host is prior to 6.1.0.3 or else is 6.2.x prior to 6.2.1. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in the logging configuration of Secure...

Race condition

A vulnerability in the TCP normalizer of Cisco Adaptive Security Appliance ASA Software 8.0 through 8.7 and 9.0 through 9.6 and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause Cisco ASA and FTD to drop any further incoming traffic on all...

CVE-2017-3793

A vulnerability in the TCP normalizer of Cisco Adaptive Security Appliance ASA Software 8.0 through 8.7 and 9.0 through 9.6 and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause Cisco ASA and FTD to drop any further incoming traffic on all...

CVE-2017-3793

The CVE-2017-3793 issue affects Cisco ASA Software (8.0–8.7) and Cisco FTD Software (9.0–9.6), caused by improper limitation of the global out-of-order TCP queue for specific block sizes. An unauthenticated, remote attacker can send many unique permitted TCP connections with out-of-order segments...

CVE-2017-3793

A vulnerability in the TCP normalizer of Cisco Adaptive Security Appliance ASA Software 8.0 through 8.7 and 9.0 through 9.6 and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause Cisco ASA and FTD to drop any further incoming traffic on all...

Cisco ASA Software and Cisco FTD Software TCP Normalizer Denial of Service Vulnerability

A vulnerability in the TCP normalizer of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause Cisco ASA and FTD to drop any further incoming traffic on all interfaces, resulting in a denial of servi...

CVE-2011-2957

Unspecified vulnerability in Rockwell Automation FactoryTalk Diagnostics Viewer before V2.30.00 CPR9 SR3 allows local users to execute arbitrary code via a crafted FactoryTalk Diagnostics Viewer .ftd configuration file, which triggers memory corruption...

CVE-2006-4105

Cross-site scripting XSS vulnerability in Fill Threads Database FTD 3.7.3 allows remote attackers to inject arbitrary web script or HTML via the 1 search field or 2 an e-mail message...

CVE-2006-4105

CVE-2006-4105 concerns a Cross-site Scripting (XSS) vulnerability in Fill Threads Database (FTD) version 3.7.3. The issue allows remote attackers to inject arbitrary web script or HTML through two vectors: the search field and an e-mail message. The provided documents confirm the affected product...

XSS Vulnerability in FTD v3.7.3

There are some XSS Vulnerabilities in FTD v3.7.3 and prior. XSS attacks HTML / Javascript codes will launch if they are submitted as a search in the search bar. They will also be launched when sent as a mail to yourself or a victim. Proof of Concept: To make sure it launches, you just need to add...