|
198511
|
6.1 |
MEDIUM
Network
|
cisco
|
firepower_management_center
|
Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (X…
|
CWE-79
Cross-site Scripting
|
CVE-2020-3515
|
2024-11-21 14:31 |
2020-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198512
|
6.7 |
MEDIUM
Local
|
cisco
|
firepower_threat_defense firepower_management_center
|
A vulnerability in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their Cisco FTD instance and ex…
|
NVD-CWE-noinfo
|
CVE-2020-3514
|
2024-11-21 14:31 |
2020-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198513
|
8.6 |
HIGH
Network
|
cisco
|
firepower_management_center
|
A vulnerability in the licensing service of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.The vulnerabi…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2020-3499
|
2024-11-21 14:31 |
2020-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198514
|
7.8 |
HIGH
Local
|
cisco
|
firepower_extensible_operating_system
|
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insuffi…
|
CWE-78
OS Command
|
CVE-2020-3459
|
2024-11-21 14:31 |
2020-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198515
|
6.7 |
MEDIUM
Local
|
cisco
|
adaptive_security_appliance_software firepower_threat_defense
|
Multiple vulnerabilities in the secure boot process of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software for the Firepower 1000 Series and Firepower 2100 Se…
|
NVD-CWE-Other
|
CVE-2020-3458
|
2024-11-21 14:31 |
2020-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198516
|
6.7 |
MEDIUM
Local
|
cisco
|
firepower_extensible_operating_system adaptive_security_appliance_software firepower_threat_defense
|
A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insuffi…
|
CWE-78
OS Command
|
CVE-2020-3457
|
2024-11-21 14:31 |
2020-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198517
|
8.8 |
HIGH
Network
|
cisco
|
firepower_extensible_operating_system
|
A vulnerability in the Cisco Firepower Chassis Manager (FCM) of Cisco FXOS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a use…
|
CWE-352
Origin Validation Error
|
CVE-2020-3456
|
2024-11-21 14:31 |
2020-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198518
|
7.8 |
HIGH
Local
|
cisco
|
firepower_extensible_operating_system
|
A vulnerability in the secure boot process of Cisco FXOS Software could allow an authenticated, local attacker to bypass the secure boot mechanisms. The vulnerability is due to insufficient protectio…
|
NVD-CWE-Other
|
CVE-2020-3455
|
2024-11-21 14:31 |
2020-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198519
|
8.6 |
HIGH
Network
|
cisco
|
firepower_threat_defense adaptive_security_appliance adaptive_security_appliance_software
|
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to upload ar…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2020-3436
|
2024-11-21 14:31 |
2020-10-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198520
|
6.3 |
MEDIUM
Local
|
cisco
|
duo_network_gateway
|
Duo has identified and fixed an issue with the Duo Network Gateway (DNG) product in which some customer-provided SSL certificates and private keys were not excluded from logging. This issue resulted …
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2020-3483
|
2024-11-21 14:31 |
2020-10-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|