Latest CVE Feed
-
8.1
HIGHCVE-2022-20816
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to delete arbitra... Read more
Affected Products : unified_communications_manager- Published: Aug. 10, 2022
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2022-20815
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified CM Session Management Edition (Unified CM SME), and Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&... Read more
Affected Products : unified_communications_manager_im_and_presence_service unified_communications_manager- Published: Jul. 06, 2022
- Modified: Nov. 21, 2024
-
9.0
CRITICALCVE-2022-20813
Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow a remote attacker to overwrite arbitrary files or conduct null byte poisoning atta... Read more
- Published: Jul. 06, 2022
- Modified: Nov. 21, 2024
-
9.0
CRITICALCVE-2022-20812
Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow a remote attacker to overwrite arbitrary files or conduct null byte poisoning atta... Read more
- Published: Jul. 06, 2022
- Modified: Nov. 21, 2024
-
7.2
HIGHCVE-2022-20811
Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. For more informat... Read more
- Published: Oct. 26, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-20810
A vulnerability in the Simple Network Management Protocol (SNMP) of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an authenticated, remote attacker to access sensitive information. This vulnerability is due to insuffic... Read more
- Published: Sep. 30, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-20809
Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to write files or disclose sensitive information on an... Read more
- Published: May. 26, 2022
- Modified: Nov. 21, 2024
-
7.7
HIGHCVE-2022-20808
A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incorrect handling of multiple simultaneou... Read more
Affected Products : smart_software_manager_on-prem- Published: Jul. 06, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-20807
Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to write files or disclose sensitive information on an... Read more
- Published: May. 27, 2022
- Modified: Nov. 21, 2024
-
7.1
HIGHCVE-2022-20806
Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to write files or disclose sensitive information on an... Read more
- Published: May. 27, 2022
- Modified: Nov. 21, 2024
-
4.1
MEDIUMCVE-2022-20805
A vulnerability in the automatic decryption process in Cisco Umbrella Secure Web Gateway (SWG) could allow an authenticated, adjacent attacker to bypass the SSL decryption and content filtering policies on an affected system. This vulnerability is due to ... Read more
- Published: Apr. 21, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-20804
A vulnerability in the Cisco Discovery Protocol of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, adjacent attacker to cause a kernel p... Read more
Affected Products : unified_communications_manager- Published: Apr. 21, 2022
- Modified: Nov. 21, 2024
-
8.6
HIGHCVE-2022-20803
A vulnerability in the OLE2 file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device.The vulnerability is due to incorrect use of t... Read more
Affected Products : clamav- Published: Feb. 17, 2023
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2022-20802
A vulnerability in the web interface of Cisco Enterprise Chat and Email (ECE) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validatio... Read more
Affected Products : enterprise_chat_and_email- Published: May. 27, 2022
- Modified: Nov. 21, 2024
-
9.0
HIGHCVE-2022-20801
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device.... Read more
- Published: May. 04, 2022
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2022-20800
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (U... Read more
- Published: Jul. 06, 2022
- Modified: Nov. 21, 2024
-
9.0
HIGHCVE-2022-20799
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device.... Read more
- Published: May. 04, 2022
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2022-20798
A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to by... Read more
- Published: Jun. 15, 2022
- Modified: Nov. 21, 2024
-
9.1
CRITICALCVE-2022-20797
A vulnerability in the web-based management interface of Cisco Secure Network Analytics, formerly Cisco Stealthwatch Enterprise, could allow an authenticated, remote attacker to execute arbitrary commands as an administrator on the underlying operating sy... Read more
Affected Products : secure_network_analytics- Published: May. 27, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-20796
On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2 could allow an authen... Read more
Affected Products : fedora debian_linux clamav advanced_malware_protection_for_endpoints secure_endpoint- Published: May. 04, 2022
- Modified: Nov. 21, 2024