Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

5.3

MEDIUM

CVE-2021-34791

Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attack...

Affected Products : adaptive_security_appliance_software firepower_threat_defense asa_5585-x_firmware asa_5512-x_firmware asa_5515-x_firmware asa_5505_firmware asa_5525-x_firmware asa_5545-x_firmware asa_5555-x_firmware asa_5580_firmware +9 more products
EPSS Score: %0.99

Published: Oct. 27, 2021

Modified: Nov. 21, 2024
5.3

MEDIUM

CVE-2021-34790

Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attack...

Affected Products : adaptive_security_appliance_software firepower_threat_defense asa_5585-x_firmware asa_5512-x_firmware asa_5515-x_firmware asa_5505_firmware asa_5525-x_firmware asa_5545-x_firmware asa_5555-x_firmware asa_5580_firmware +9 more products
EPSS Score: %0.47

Published: Oct. 27, 2021

Modified: Nov. 21, 2024
4.8

MEDIUM

CVE-2021-34789

A vulnerability in the web-based management interface of Cisco Tetration could allow an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack on an affected system. This vulnerability exists because the web-based management ...

Affected Products : tetration secure_workload
EPSS Score: %0.17

Published: Oct. 21, 2021

Modified: Nov. 21, 2024
7.0

HIGH

CVE-2021-34788

A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS could allow an authenticated, local attacker to perform a shared library hijacking attack on an affected device if the VPN Posture (Hos...

Affected Products : linux_kernel macos anyconnect_secure_mobility_client
EPSS Score: %0.04

Published: Oct. 06, 2021

Modified: Nov. 21, 2024
5.3

MEDIUM

CVE-2021-34787

A vulnerability in the identity-based firewall (IDFW) rule processing feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass security protecti...

Affected Products : adaptive_security_appliance_software firepower_threat_defense asa_5585-x_firmware asa_5512-x_firmware asa_5515-x_firmware asa_5505_firmware asa_5525-x_firmware asa_5545-x_firmware asa_5555-x_firmware asa_5580_firmware +9 more products
EPSS Score: %0.40

Published: Oct. 27, 2021

Modified: Nov. 21, 2024
6.5

MEDIUM

CVE-2021-34786

Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system....

Affected Products : broadworks_application_delivery_platform broadworks_commpilot_application_software broadworks_commpilot_application
EPSS Score: %0.22

Published: Sep. 09, 2021

Modified: Nov. 21, 2024
7.2

HIGH

CVE-2021-34785

Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system....

Affected Products : broadworks_application_delivery_platform broadworks_commpilot_application_software broadworks_commpilot_application
EPSS Score: %0.52

Published: Sep. 09, 2021

Modified: Nov. 21, 2024
5.4

MEDIUM

CVE-2021-34784

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a us...

Affected Products : prime_infrastructure evolved_programmable_network_manager
EPSS Score: %0.17

Published: Nov. 04, 2021

Modified: Nov. 21, 2024
8.6

HIGH

CVE-2021-34783

A vulnerability in the software-based SSL/TLS message handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting ...

Affected Products : adaptive_security_appliance_software firepower_threat_defense asa_5585-x_firmware asa_5512-x_firmware asa_5515-x_firmware asa_5505_firmware asa_5525-x_firmware asa_5545-x_firmware asa_5555-x_firmware asa_5580_firmware +8 more products
EPSS Score: %0.30

Published: Oct. 27, 2021

Modified: Nov. 21, 2024
8.6

HIGH

CVE-2021-34781

A vulnerability in the processing of SSH connections for multi-instance deployments of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. This ...

Affected Products : adaptive_security_appliance_software firepower_threat_defense firepower_management_center_virtual_appliance sourcefire_defense_center
EPSS Score: %0.43

Published: Oct. 27, 2021

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2021-34780

Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause i...

Affected Products : business_220-8t-e-2g_firmware business_220-8p-e-2g_firmware business_220-8fp-e-2g_firmware business_220-16t-2g_firmware business_220-16p-2g_firmware business_220-24t-4g_firmware business_220-24p-4g_firmware business_220-24fp-4g_firmware business_220-48t-4g_firmware business_220-48p-4g_firmware +22 more products
EPSS Score: %0.09

Published: Oct. 06, 2021

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2021-34779

Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause i...

Affected Products : business_220-8t-e-2g_firmware business_220-8p-e-2g_firmware business_220-8fp-e-2g_firmware business_220-16t-2g_firmware business_220-16p-2g_firmware business_220-24t-4g_firmware business_220-24p-4g_firmware business_220-24fp-4g_firmware business_220-48t-4g_firmware business_220-48p-4g_firmware +22 more products
EPSS Score: %0.09

Published: Oct. 06, 2021

Modified: Nov. 21, 2024
4.3

MEDIUM

CVE-2021-34778

Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause i...

Affected Products : business_220-8t-e-2g_firmware business_220-8p-e-2g_firmware business_220-8fp-e-2g_firmware business_220-16t-2g_firmware business_220-16p-2g_firmware business_220-24t-4g_firmware business_220-24p-4g_firmware business_220-24fp-4g_firmware business_220-48t-4g_firmware business_220-48p-4g_firmware +22 more products
EPSS Score: %0.07

Published: Oct. 06, 2021

Modified: Nov. 21, 2024
4.3

MEDIUM

CVE-2021-34777

Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause i...

Affected Products : business_220-8t-e-2g_firmware business_220-8p-e-2g_firmware business_220-8fp-e-2g_firmware business_220-16t-2g_firmware business_220-16p-2g_firmware business_220-24t-4g_firmware business_220-24p-4g_firmware business_220-24fp-4g_firmware business_220-48t-4g_firmware business_220-48p-4g_firmware +22 more products
EPSS Score: %0.07

Published: Oct. 06, 2021

Modified: Nov. 21, 2024
4.3

MEDIUM

CVE-2021-34776

Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause i...

Affected Products : business_220-8t-e-2g_firmware business_220-8p-e-2g_firmware business_220-8fp-e-2g_firmware business_220-16t-2g_firmware business_220-16p-2g_firmware business_220-24t-4g_firmware business_220-24p-4g_firmware business_220-24fp-4g_firmware business_220-48t-4g_firmware business_220-48p-4g_firmware +22 more products
EPSS Score: %0.07

Published: Oct. 06, 2021

Modified: Nov. 21, 2024
4.3

MEDIUM

CVE-2021-34775

Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause i...

Affected Products : business_220-8t-e-2g_firmware business_220-8p-e-2g_firmware business_220-8fp-e-2g_firmware business_220-16t-2g_firmware business_220-16p-2g_firmware business_220-24t-4g_firmware business_220-24p-4g_firmware business_220-24fp-4g_firmware business_220-48t-4g_firmware business_220-48p-4g_firmware +22 more products
EPSS Score: %0.07

Published: Oct. 06, 2021

Modified: Nov. 21, 2024
4.9

MEDIUM

CVE-2021-34774

A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does n...

Affected Products : common_services_platform_collector
EPSS Score: %0.05

Published: Nov. 04, 2021

Modified: Nov. 21, 2024
6.5

MEDIUM

CVE-2021-34773

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unified Communications Manager IM & Presence Servic...

Affected Products : unified_communications_manager_im_and_presence_service unified_communications_manager
EPSS Score: %0.18

Published: Nov. 04, 2021

Modified: Nov. 21, 2024
6.1

MEDIUM

CVE-2021-34772

A vulnerability in the web-based management interface of Cisco Orbital could allow an unauthenticated, remote attacker to redirect users to a malicious webpage. This vulnerability is due to improper validation of URL paths in the web-based management inte...

Affected Products : orbital
EPSS Score: %0.18

Published: Oct. 06, 2021

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2021-34771

A vulnerability in the Cisco IOS XR Software CLI could allow an authenticated, local attacker to view more information than their privileges allow. This vulnerability is due to insufficient application of restrictions during the execution of a specific co...

Affected Products : ios_xr
EPSS Score: %0.12

Published: Sep. 09, 2021

Modified: Nov. 21, 2024

Showing 20 of 291395 Results

Latest CVE Feed

5.3

5.3

4.8

7.0

5.3

6.5

7.2

5.4

8.6

8.6

8.8

8.8

4.3

4.3

4.3

4.3

4.9

6.5

6.1

5.5

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable