Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.8

HIGH

CVE-2021-34728

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker with a low-privileged account to elevate privileges on an affected device. For more information about these vulnerabilities, see the Details section ...

Affected Products : ios_xr asr_9001 asr_9006 asr_9010 asr_9904 asr_9912 asr_9922 8201 8202 ncs_1001 +36 more products
EPSS Score: %0.29

Published: Sep. 09, 2021

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2021-34727

A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. This vulnerability is due to insufficient bounds checking when an affected device proc...

Affected Products : sd-wan ios_xe_sd-wan asr_1001 asr_1002 asr_1002-x asr_1004 asr_1006 asr_1013 1100-4g\/6g_integrated_services_router 1100-4p_integrated_services_router +40 more products
EPSS Score: %1.00

Published: Sep. 23, 2021

Modified: Nov. 21, 2024
7.2

HIGH

CVE-2021-34726

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system of an affected device. This vulnerability is due to ...

Affected Products : sd-wan sd-wan_solution
EPSS Score: %0.15

Published: Sep. 23, 2021

Modified: Nov. 21, 2024
7.2

HIGH

CVE-2021-34725

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system. This vulnerability is due to insufficient in...

Affected Products : sd-wan ios_xe_sd-wan asr_1001 asr_1002 asr_1002-x asr_1004 asr_1006 asr_1013 1100-4g\/6g_integrated_services_router 1100-4p_integrated_services_router +40 more products
EPSS Score: %0.14

Published: Sep. 23, 2021

Modified: Nov. 21, 2024
6.6

MEDIUM

CVE-2021-34724

A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to elevate privileges and execute arbitrary code on the underlying operating system as the root user. An attacker must be authenticated on an affected dev...

Affected Products : sd-wan ios_xe_sd-wan asr_1001 asr_1002 asr_1002-x asr_1004 asr_1006 asr_1013 1100-4g\/6g_integrated_services_router 1100-4p_integrated_services_router +40 more products
EPSS Score: %0.12

Published: Sep. 23, 2021

Modified: Nov. 21, 2024
6.9

MEDIUM

CVE-2021-34723

A vulnerability in a specific CLI command that is run on Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the configuration database of an affected device. This vulnerability is due to insufficient ...

Affected Products : ios_xe asr_1001 asr_1002 asr_1002-x asr_1004 asr_1006 asr_1013 1100-4g_integrated_services_router 1100-4gltegb_integrated_services_router 1100-4gltena_integrated_services_router +11 more products
EPSS Score: %0.06

Published: Sep. 23, 2021

Modified: Nov. 21, 2024
7.2

HIGH

CVE-2021-34722

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an affected device and execute arbitrary commands with root privileges. For more information about the...

Affected Products : ios_xr asr_9001 asr_9006 asr_9010 asr_9904 asr_9912 asr_9922 8201 8202 ncs_1001 +34 more products
EPSS Score: %0.09

Published: Sep. 09, 2021

Modified: Nov. 21, 2024
6.9

MEDIUM

CVE-2021-34721

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an affected device and execute arbitrary commands with root privileges. For more information about the...

Affected Products : ios_xr asr_9001 asr_9006 asr_9010 asr_9904 asr_9912 asr_9922 8201 8202 ncs_1001 +34 more products
EPSS Score: %0.09

Published: Sep. 09, 2021

Modified: Nov. 21, 2024
8.6

HIGH

CVE-2021-34720

A vulnerability in the IP Service Level Agreements (IP SLA) responder and Two-Way Active Measurement Protocol (TWAMP) features of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause device packet memory to become exhausted or ca...

Affected Products : ios_xr asr_9001 asr_9006 asr_9010 asr_9904 asr_9912 asr_9922 8201 8202 ncs_1001 +36 more products
EPSS Score: %1.15

Published: Sep. 09, 2021

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-34719

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker with a low-privileged account to elevate privileges on an affected device. For more information about these vulnerabilities, see the Details section ...

Affected Products : ios_xr asr_9001 asr_9006 asr_9010 asr_9904 asr_9912 asr_9922 8201 8202 ncs_1001 +36 more products
EPSS Score: %0.10

Published: Sep. 09, 2021

Modified: Nov. 21, 2024
8.5

HIGH

CVE-2021-34718

A vulnerability in the SSH Server process of Cisco IOS XR Software could allow an authenticated, remote attacker to overwrite and read arbitrary files on the local device. This vulnerability is due to insufficient input validation of arguments that are su...

Affected Products : ios_xr asr_9001 asr_9006 asr_9010 asr_9904 asr_9912 asr_9922 ncs_1001 ncs_1002 ncs_1004 +26 more products
EPSS Score: %0.89

Published: Sep. 09, 2021

Modified: Nov. 21, 2024
9.0

HIGH

CVE-2021-34716

A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as the root...

Affected Products : expressway telepresence_video_communication_server expressway-e
EPSS Score: %1.10

Published: Aug. 18, 2021

Modified: Nov. 21, 2024
9.0

HIGH

CVE-2021-34715

A vulnerability in the image verification function of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to execute code with internal user privileges on the underlying operating s...

Affected Products : expressway telepresence_video_communication_server expressway-e
EPSS Score: %0.67

Published: Aug. 18, 2021

Modified: Nov. 21, 2024
7.4

HIGH

CVE-2021-34714

A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause an affected d...

Affected Products : ios_xe ios nx-os firepower_extensible_operating_system fxos ios_xr mds_9000 nexus_7000 nexus_7000_10-slot nexus_7000_18-slot +215 more products
EPSS Score: %0.17

Published: Sep. 23, 2021

Modified: Nov. 21, 2024
7.4

HIGH

CVE-2021-34713

A vulnerability in the Layer 2 punt code of Cisco IOS XR Software running on Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to cause the affected line card to reboot. This vulnerability is due to incor...

Affected Products : ios_xr asr_9001 asr_9006 asr_9010 asr_9904 asr_9912 asr_9922 asr_9000 asr_9901 asr_9902 +4 more products
EPSS Score: %0.10

Published: Sep. 09, 2021

Modified: Nov. 21, 2024
6.5

MEDIUM

CVE-2021-34712

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct cypher query language injection attacks on an affected system. This vulnerability is due to insufficient input ...

Affected Products : catalyst_sd-wan_manager sd-wan_vmanage
EPSS Score: %0.07

Published: Sep. 23, 2021

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2021-34711

A vulnerability in the debug shell of Cisco IP Phone software could allow an authenticated, local attacker to read any file on the device file system. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability...

Affected Products : ip_conference_phone_8832_firmware ip_phone_7811_firmware ip_phone_7821_firmware ip_phone_7832_firmware ip_phone_7841_firmware ip_phone_7861_firmware ip_phone_8811_firmware ip_phone_8831_firmware ip_phone_8841_firmware ip_phone_8845_firmware +22 more products
EPSS Score: %0.07

Published: Oct. 06, 2021

Modified: Nov. 21, 2024
9.0

HIGH

CVE-2021-34710

Multiple vulnerabilities in the Cisco ATA 190 Series Analog Telephone Adapter Software could allow an attacker to perform a command injection attack resulting in remote code execution or cause a denial of service (DoS) condition on an affected device. For...

Affected Products : ata_190_firmware ata_191_firmware ata_192_firmware ata_191 ata_192 ata_190
EPSS Score: %5.69

Published: Oct. 06, 2021

Modified: Nov. 21, 2024
6.9

MEDIUM

CVE-2021-34709

Multiple vulnerabilities in image verification checks of Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for Cisco 8000 Series Routers could allow an authenticate...

Affected Products : ios_xr 8201 8202 8101-32fh 8101-32h 8102-64h 8201-32fh 8800_12-slot 8800_18-slot 8800_4-slot +13 more products
EPSS Score: %0.02

Published: Sep. 09, 2021

Modified: Nov. 21, 2024
7.2

HIGH

CVE-2021-34708

Multiple vulnerabilities in image verification checks of Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for Cisco 8000 Series Routers could allow an authenticate...

Affected Products : ios_xr 8201 8202 8101-32fh 8101-32h 8102-64h 8201-32fh 8800_12-slot 8800_18-slot 8800_4-slot +13 more products
EPSS Score: %0.02

Published: Sep. 09, 2021

Modified: Nov. 21, 2024

Showing 20 of 291219 Results

Latest CVE Feed

7.8

10.0

7.2

7.2

6.6

6.9

7.2

6.9

8.6

7.8

8.5

9.0

9.0

7.4

7.4

6.5

5.5

9.0

6.9

7.2

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable