Latest CVE Feed
-
6.5
MEDIUMCVE-2022-20804
A vulnerability in the Cisco Discovery Protocol of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, adjacent attacker to cause a kernel p... Read more
Affected Products : unified_communications_manager- Published: Apr. 21, 2022
- Modified: Nov. 21, 2024
-
8.6
HIGHCVE-2022-20803
A vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnerability is due to incorrect use of t... Read more
Affected Products : clamav- Published: Feb. 17, 2023
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2022-20802
A vulnerability in the web interface of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validatio... Read more
Affected Products : enterprise_chat_and_email- Published: May. 27, 2022
- Modified: Nov. 21, 2024
-
9.0
HIGHCVE-2022-20801
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device.... Read more
- Published: May. 04, 2022
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2022-20800
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (U... Read more
- Published: Jul. 06, 2022
- Modified: Nov. 21, 2024
-
9.0
HIGHCVE-2022-20799
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device.... Read more
- Published: May. 04, 2022
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2022-20798
A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to by... Read more
- Published: Jun. 15, 2022
- Modified: Nov. 21, 2024
-
9.1
CRITICALCVE-2022-20797
A vulnerability in the web-based management interface of Cisco Secure Network Analytics, formerly Cisco Stealthwatch Enterprise, could allow an authenticated, remote attacker to execute arbitrary commands as an administrator on the underlying operating sy... Read more
Affected Products : secure_network_analytics- Published: May. 27, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-20796
On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2 could allow an authen... Read more
Affected Products : fedora debian_linux clamav advanced_malware_protection_for_endpoints secure_endpoint- Published: May. 04, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2022-20795
A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause high CPU utilization, ... Read more
Affected Products : adaptive_security_appliance_software firepower_threat_defense adaptive_security_appliance asa_5580 asa_5505 asa_5585-x asa_5512-x asa_5515-x asa_5525-x asa_5545-x +19 more products- Published: Apr. 21, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-20794
Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service (DoS) condition, view sensitive data on an affected device, or redir... Read more
- Published: May. 04, 2022
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2022-20792
A vulnerability in the regex module used by the signature database load module of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions could allow an authenticated, local attacker to crash ClamAV at database ... Read more
Affected Products : clamav- Published: Aug. 10, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-20791
A vulnerability in the database user privileges of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unified Communications Manager IM & Presence Service (Uni... Read more
Affected Products : unified_communications_manager_im_and_presence_service unified_communications_manager- Published: Jul. 06, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-20790
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to read arbitrary... Read more
Affected Products : unified_communications_manager- Published: Apr. 21, 2022
- Modified: Nov. 21, 2024
-
8.5
HIGHCVE-2022-20789
A vulnerability in the software upgrade process of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to write arbitrary file... Read more
Affected Products : unified_communications_manager- Published: Apr. 21, 2022
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2022-20788
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct... Read more
- Published: Apr. 21, 2022
- Modified: Nov. 21, 2024
-
6.8
MEDIUMCVE-2022-20787
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) Software and Cisco Unified CM Session Management Edition (SME) Software could allow an authenticated, remote attacker to conduct a cross-site reques... Read more
Affected Products : unified_communications_manager- Published: Apr. 21, 2022
- Modified: Nov. 21, 2024
-
8.1
HIGHCVE-2022-20786
A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulner... Read more
Affected Products : unified_communications_manager_im_and_presence_service- Published: Apr. 21, 2022
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2022-20785
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in HTML file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS versi... Read more
Affected Products : fedora debian_linux clamav advanced_malware_protection_for_endpoints secure_endpoint- Published: May. 04, 2022
- Modified: Nov. 21, 2024
-
5.8
MEDIUMCVE-2022-20784
A vulnerability in the Web-Based Reputation Score (WBRS) engine of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to bypass established web request policies and access blocked content on an af... Read more
- Published: Apr. 06, 2022
- Modified: Nov. 21, 2024