Lucene search
+L

96 matches found

NVD
NVD
•added 2026/04/15 5:17 p.m.•20 views

CVE-2026-20152

A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HT...

5.3CVSS0.00299EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/15 4:03 p.m.•11 views

CVE-2026-20152

A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HT...

5.3CVSS5.9AI score0.00299EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/04/15 4:03 p.m.•41 views

CVE-2026-20152 Cisco Secure Web Appliance Authentication Service Traffic Bypass Vulnerability

A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HT...

5.3CVSS0.00299EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/04/15 4:00 p.m.•46 views

Cisco Secure Web Appliance Authentication Bypass Vulnerability

A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HT...

5.3CVSS5.9AI score0.00299EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/15 12:00 a.m.•31 views

PT-2026-33089

A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HT...

5.3CVSS5.9AI score0.00299EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/15 12:00 a.m.•2 views

CVE-2026-20152: Authentication Bypass by Primary Weakness

A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HT...

5.3CVSS5.9AI score0.00299EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/03/06 12:00 a.m.•17 views

The vulnerability of the Dynamic Vectorization and Streaming Transfer (DVS) implementation of the Cisco Secure Web Appliance allows a hacker to circumvent existing security restrictions.

The vulnerability of the Dynamic Vectorization and Streaming Transfer DVS mechanism implemented in Cisco Secure Web Appliance lies in the loading of code without checking its integrity. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions remotely...

4CVSS5.8AI score0.00163EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/02/04 4:11 p.m.•124 views

CVE-2026-20056

Cisco AsyncOS for Cisco Secure Web Appliance is affected by a DVS Engine vulnerability (CVE-2026-20056) that can allow an unauthenticated remote attacker to bypass the anti‑malware scanner and cause download of malicious archive files. The issue stems from improper handling of certain archives, e...

4CVSS5.8AI score0.00163EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/04 4:11 p.m.•7 views

CVE-2026-20056

A vulnerability in the Dynamic Vectoring and Streaming DVS Engine implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass the anti-malware scanner, allowing malicious archive files to be downloaded. This vulnerability is du...

4CVSS5.6AI score0.00163EPSS
SaveExploits0References2Affected Software1
Cisco
Cisco
•added 2026/02/04 4:00 p.m.•33 views

Cisco Secure Web Appliance Real-Time Scanning Archive File Bypass Vulnerability

A vulnerability in the Dynamic Vectoring and Streaming DVS Engine implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass the anti-malware scanner, allowing malicious archive files to be downloaded. This vulnerability is du...

4CVSS5.6AI score0.00163EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/04 12:00 a.m.•17 views

Cisco Secure Web Appliance 安全漏洞

Cisco Secure Web Appliance is an application developed by the American company Cisco. It is used to protect websites. There is a security vulnerability in Cisco Secure Web Appliance, which stems from the dynamic vector and stream engine’s improper handling of certain archive files. This...

4CVSS5.8AI score0.00163EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2020-24638

Malware in sbrugna...

7.8CVSS5.7AI score0.00797EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2023-24299

Malicious code in bioql PyPI...

6.1CVSS6.3AI score0.00473EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:50 a.m.•12 views

CVE-2022-20952

A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance, formerly known as Cisco Web Security Appliance WSA, could allow an unauthenticated, remote attacker to bypass a configured rule, thereby allowing traffic onto a network that should have been blocked...

5.3CVSS7.1AI score0.00678EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/02/18 12:00 a.m.•26 views

Cisco Secure Web Appliance Input Validation Error Vulnerability

Cisco Secure Web Appliance is an application from Cisco USA. An input validation error vulnerability exists in Cisco Secure Web Appliance that stems from improper handling of HTTP request headers and can be exploited by an attacker to download malicious files...

5.8CVSS6.6AI score0.00439EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/02/07 12:00 a.m.•10 views

Cisco Secure Web Appliance Range Request Bypass (cisco-sa-swa-range-bypass-2BsEHYSu)

According to its self-reported version, Cisco Secure Web Appliance Range Request Bypass is affected by a vulnerability. - A vulnerability in a policy-based Cisco Application Visibility and Control AVC implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an...

5.8CVSS5.6AI score0.00439EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/02/07 12:00 a.m.•12 views

Secure Web Appliance SNMP Polling Information Disclosure (cisco-sa-esa-sma-wsa-snmp-inf-FqPvL8sX)

According to its self-reported version, Cisco Secure Web Appliance is affected by a vulnerability. - A vulnerability in SNMP polling for Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance could allow an authenticated, remote attacker to obtain...

4.3CVSS5.5AI score0.00343EPSS
SaveExploits0References2
NVD
NVD
•added 2025/02/05 5:15 p.m.•21 views

CVE-2025-20183

A vulnerability in a policy-based Cisco Application Visibility and Control AVC implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to evade the antivirus scanner and download a malicious file onto an endpoint. The vulnerability i...

5.8CVSS0.00439EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/05 4:14 p.m.•31 views

CVE-2025-20183 Cisco Secure Web Appliance Range Request Bypass Vulnerability

A vulnerability in a policy-based Cisco Application Visibility and Control AVC implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to evade the antivirus scanner and download a malicious file onto an endpoint. The vulnerability i...

5.8CVSS0.00439EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/05 4:14 p.m.•9 views

CVE-2025-20183 Cisco Secure Web Appliance Range Request Bypass Vulnerability

A vulnerability in a policy-based Cisco Application Visibility and Control AVC implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to evade the antivirus scanner and download a malicious file onto an endpoint. The vulnerability i...

5.8CVSS7AI score0.00439EPSS
SaveExploits0References1
Rows per page
Query Builder