Lucene search
+L

38 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2012-2554

Malware in sbrugna...

10CVSS6.4AI score0.04422EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2023-34428

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00616EPSS
SaveExploits0References1
Cisco
Cisco
•added 2025/08/14 4:00 p.m.•27 views

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerabilities

Multiple vulnerabilities in the management and VPN web servers for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to stop responding or reload unexpectedly,...

8.6CVSS7.7AI score0.00775EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/14 12:00 a.m.•1 views

CVE-2025-20243: Loop with Unreachable Exit Condition

A vulnerability in the management and VPN web servers of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability is due to improper validation of...

8.6CVSS5.9AI score0.00613EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:54 a.m.•19 views

CVE-2023-2992

An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions. Rebooting SMM or FPC will restore access to the management web server...

7.5CVSS7AI score0.00616EPSS
SaveExploits0References1
NVD
NVD
•added 2023/08/23 10:15 p.m.•38 views

CVE-2023-38422

Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the management web server. This could allow an attacker to download and export sensitive data...

7.5CVSS7.8AI score0.00634EPSS
SaveExploits0References1
OSV
OSV
•added 2023/08/23 10:15 p.m.•14 views

CVE-2023-38422

Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the management web server. This could allow an attacker to download and export sensitive data...

7.5CVSS5.8AI score0.00634EPSS
SaveExploits0References1
Prion
Prion
•added 2023/08/23 10:15 p.m.•30 views

Authentication flaw

Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the management web server. This could allow an attacker to download and export sensitive data...

5CVSS7.8AI score0.00634EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/08/23 9:21 p.m.•51 views

CVE-2023-38422 Walchem Intuition Missing Authentication for Critical Function

Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the management web server. This could allow an attacker to download and export sensitive data...

7.5CVSS7.8AI score0.00634EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/08/23 9:21 p.m.•20 views

CVE-2023-38422 Walchem Intuition Missing Authentication for Critical Function

Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the management web server. This could allow an attacker to download and export sensitive data...

7.5CVSS7AI score0.00634EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/23 12:00 a.m.•0 views

CVE-2023-38422: Missing Authentication for Critical Function

Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the management web server. This could allow an attacker to download and export sensitive data...

7.5CVSS7.2AI score0.00634EPSS
SaveExploits0References2
OSV
OSV
•added 2023/06/26 8:15 p.m.•16 views

CVE-2023-2992

An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions. Rebooting SMM or FPC will restore access to the management web server...

7.5CVSS5.8AI score0.00616EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/06/26 7:44 p.m.•37 views

CVE-2023-2992

An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions. Rebooting SMM or FPC will restore access to the management web server...

7.5CVSS7.7AI score0.00616EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/06/26 12:00 a.m.•16 views

PT-2023-22477 · Smm V1 +2 · Smm V1 +2

Name of the Vulnerable Software and Affected Versions: SMM v1 affected versions not specified SMM v2 affected versions not specified FPC affected versions not specified Description: An unauthenticated denial of service issue exists in the management web server of the affected products, which can ...

7.5CVSS7.2AI score0.00616EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/26 12:00 a.m.•0 views

CVE-2023-2992: Asymmetric Resource Consumption (Amplification)

An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions. Rebooting SMM or FPC will restore access to the management web server...

7.5CVSS7.2AI score0.00616EPSS
SaveExploits0References2
OSV
OSV
•added 2022/11/15 9:15 p.m.•12 views

CVE-2022-20949

A vulnerability in the management web server of Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker with high privileges to execute configuration commands on an affected system. This vulnerability exists because access to HTTPS endpoints is not properly...

4.9CVSS5.9AI score0.00744EPSS
SaveExploits0References1
NVD
NVD
•added 2022/11/15 9:15 p.m.•33 views

CVE-2022-20949

A vulnerability in the management web server of Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker with high privileges to execute configuration commands on an affected system. This vulnerability exists because access to HTTPS endpoints is not properly...

6.5CVSS0.00744EPSS
SaveExploits0References1
Prion
Prion
•added 2022/11/15 9:15 p.m.•20 views

Design/Logic Flaw

A vulnerability in the management web server of Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker with high privileges to execute configuration commands on an affected system. This vulnerability exists because access to HTTPS endpoints is not properly...

3.3CVSS5.5AI score0.00744EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/15 12:00 a.m.•1 views

CVE-2022-20949: Undefined Security Weakness

A vulnerability in the management web server of Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker with high privileges to execute configuration commands on an affected system. This vulnerability exists because access to HTTPS endpoints is not properly...

6.5CVSS6.2AI score0.00744EPSS
SaveExploits0References2
CVE
CVE
•added 2022/11/10 5:32 p.m.•77 views

CVE-2022-20949

CVE-2022-20949 describes a privilege-escalation flaw in the management web server of Cisco Firepower Threat Defense (FTD) Software. An authenticated, remote attacker with high privileges could issue configuration commands on the affected system due to improper access control of HTTPS endpoints, w...

6.5CVSS5.5AI score0.00744EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder