Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.8

HIGH

CVE-2018-0437

A vulnerability in the Cisco Umbrella Enterprise Roaming Client (ERC) could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This...

Affected Products : windows umbrella umbrella_enterprise_roaming_client umbrella_roaming_module
Published: Oct. 05, 2018

Modified: Nov. 21, 2024
8.7

HIGH

CVE-2018-0436

A vulnerability in Cisco Webex Teams, formerly Cisco Spark, could allow an authenticated, remote attacker to view and modify data for an organization other than their own organization. The vulnerability exists because the affected software performs insuff...

Affected Products : webex_teams
Published: Oct. 05, 2018

Modified: Nov. 21, 2024
9.1

CRITICAL

CVE-2018-0435

A vulnerability in the Cisco Umbrella API could allow an authenticated, remote attacker to view and modify data across their organization and other organizations. The vulnerability is due to insufficient authentication configurations for the API interface...

Affected Products : umbrella
Published: Oct. 05, 2018

Modified: Nov. 21, 2024
7.4

HIGH

CVE-2018-0434

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient cer...

Affected Products : vedge_100_firmware vedge_1000_firmware vedge_2000_firmware vedge_5000_firmware vmanage_network_management_system sd-wan_solution vedge_100 vedge_1000 vedge_2000 vedge_5000
Published: Oct. 05, 2018

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2018-0433

A vulnerability in the command-line interface (CLI) in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. A...

Affected Products : vbond_orchestrator vsmart_controller vedge_100_firmware vedge_1000_firmware vedge_2000_firmware vedge_5000_firmware vmanage_network_management_system vedge_cloud_router_platform sd-wan_solution vedge_100 +3 more products
Published: Oct. 05, 2018

Modified: Nov. 21, 2024
9.0

HIGH

CVE-2018-0432

A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters incl...

Affected Products : vedge_100_firmware vedge_1000_firmware vedge_2000_firmware vedge_5000_firmware vmanage_network_management_system sd-wan_solution vedge_100 vedge_1000 vedge_2000 vedge_5000
Published: Oct. 05, 2018

Modified: Nov. 21, 2024
9.0

HIGH

CVE-2018-0431

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to inject and execute arbitrary commands with root privileges on an affected device. The vulnerabi...

Affected Products : unified_computing_system unified_computing_system_software
Published: Oct. 05, 2018

Modified: Nov. 21, 2024
9.0

HIGH

CVE-2018-0430

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to inject and execute arbitrary commands with root privileges on an affected device. The vulnerabi...

Affected Products : unified_computing_system unified_computing_system_software
Published: Oct. 05, 2018

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2018-0429

Stack-based buffer overflow in the Cisco Thor decoder before commit 18de8f9f0762c3a542b1122589edb8af859d9813 allows local users to cause a denial of service (segmentation fault) and execute arbitrary code via a crafted non-conformant Thor bitstream....

Affected Products : thor_video_codec
Published: Aug. 09, 2018

Modified: Nov. 21, 2024
7.2

HIGH

CVE-2018-0428

A vulnerability in the account management subsystem of Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to elevate privileges to root. The attacker must authenticate with valid administrator credentials. The vulnerability is...

Affected Products : web_security_appliance web_security_appliance
Published: Aug. 15, 2018

Modified: Nov. 21, 2024
9.0

HIGH

CVE-2018-0427

A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to incorrect input validation of user-supplied da...

Affected Products : application_policy_infrastructure_controller_enterprise_module
Published: Aug. 15, 2018

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2018-0426

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to gain access to s...

Affected Products : rv110w_firmware rv130w_firmware rv215w_firmware rv130w_wireless-n_multifunction_vpn_router_firmware rv110w_wireless-n_vpn_firewall rv215w_wireless-n_vpn_router rv130w
Published: Oct. 05, 2018

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2018-0425

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to gain access to s...

Affected Products : rv110w_firmware rv130w_firmware rv215w_firmware rv130w_wireless-n_multifunction_vpn_router_firmware rv110w_wireless-n_vpn_firewall rv215w_wireless-n_vpn_router rv130w
Published: Oct. 05, 2018

Modified: Nov. 21, 2024
9.0

HIGH

CVE-2018-0424

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an authenticated, remote attacker to execute arbitrary ...

Affected Products : rv110w_firmware rv130w_firmware rv215w_firmware rv130w_wireless-n_multifunction_vpn_router_firmware rv110w_wireless-n_vpn_firewall rv215w_wireless-n_vpn_router rv130w
Published: Oct. 05, 2018

Modified: Nov. 21, 2024
9.3

HIGH

CVE-2018-0423

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to cause a denial o...

Affected Products : rv110w_firmware rv130w_firmware rv215w_firmware rv110w rv215w rv130w_wireless-n_multifunction_vpn_router_firmware rv130w
Published: Oct. 05, 2018

Modified: Nov. 21, 2024
7.3

HIGH

CVE-2018-0422

A vulnerability in the folder permissions of Cisco Webex Meetings client for Windows could allow an authenticated, local attacker to modify locally stored files and execute code on a targeted device with the privilege level of the user. The vulnerability ...

Affected Products : webex_meetings_server webex_meetings_online windows webex_business_suite_32 webex_business_suite_33 webex_business_suite_31
Published: Oct. 05, 2018

Modified: Nov. 21, 2024
8.6

HIGH

CVE-2018-0421

A vulnerability in TCP connection management in Cisco Prime Access Registrar could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition when the application unexpectedly restarts. The vulnerability is due to incorrect han...

Affected Products : prime_access_registrar prime_access_registrar_jumpstart
Published: Oct. 05, 2018

Modified: Nov. 21, 2024
6.5

MEDIUM

CVE-2018-0420

A vulnerability in the web-based interface of Cisco Wireless LAN Controller Software could allow an authenticated, remote attacker to view sensitive information. The issue is due to improper sanitization of user-supplied input in HTTP request parameters t...

Affected Products : wireless_lan_controller_software wireless_lan_controller_software
Published: Oct. 17, 2018

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2018-0419

A vulnerability in certain attachment detection mechanisms of Cisco Email Security Appliances (ESA) could allow an unauthenticated, remote attacker to bypass the filtering functionality of an affected system. The vulnerability is due to the improper detec...

Affected Products : email_security_appliance
Published: Aug. 15, 2018

Modified: Nov. 21, 2024
8.6

HIGH

CVE-2018-0418

A vulnerability in the Local Packet Transport Services (LPTS) feature set of Cisco ASR 9000 Series Aggregation Services Router Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The...

Affected Products : ios_xr asr_9001 asr_9006 asr_9010 asr_9904 asr_9912 asr_9922 asr_9000v asr_9901 asr_9906 +1 more products
Published: Aug. 15, 2018

Modified: Nov. 21, 2024

Showing 20 of 293513 Results

Browse by Apps

Latest CVE Feed

7.8

8.7

9.1

7.4

7.8

9.0

9.0

9.0

7.8

7.2

9.0

9.8

9.8

9.0

9.3

7.3

8.6

6.5

7.5

8.6

CVEFeed.io UI Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable