Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 5.3

    MEDIUM
    CVE-2016-6421

    Cisco IOS XR 5.2.2 allows remote attackers to cause a denial of service (process restart) via a crafted OSPF Link State Advertisement (LSA) update, aka Bug ID CSCvb05643.... Read more

    Affected Products : ios_xr
    • EPSS Score: %0.55
    • Published: Oct. 05, 2016
    • Modified: Apr. 12, 2025
  • 7.5

    HIGH
    CVE-2016-6393

    The AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial of service (device reload) via a failed SSH connection attempt that is mishandled during generation of an e... Read more

    Affected Products : ios_xe ios
    • EPSS Score: %8.65
    • Published: Oct. 05, 2016
    • Modified: Apr. 12, 2025
  • 7.8

    HIGH
    CVE-2016-6391

    Cisco IOS 12.2 and 15.0 through 15.3 allows remote attackers to cause a denial of service (traffic-processing outage) via a crafted series of Common Industrial Protocol (CIP) requests, aka Bug ID CSCur69036.... Read more

    Affected Products : ios
    • EPSS Score: %0.74
    • Published: Oct. 05, 2016
    • Modified: Apr. 12, 2025
  • 7.8

    HIGH
    CVE-2016-6385

    Memory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.2 through 3.8 allows remote attackers to cause a denial of service (memory consumption) via crafted image-list parameters, aka Bug ID CSCuy82367.... Read more

    Affected Products : ios_xe ios
    • EPSS Score: %3.57
    • Published: Oct. 05, 2016
    • Modified: Apr. 12, 2025
  • 8.3

    HIGH
    CVE-2016-6380

    The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (data corruption or device reload) via a crafted DN... Read more

    • EPSS Score: %2.26
    • Published: Oct. 05, 2016
    • Modified: Apr. 12, 2025
  • 7.8

    HIGH
    CVE-2016-6379

    Cisco IOS 12.2 and IOS XE 3.14 through 3.16 and 16.1 allow remote attackers to cause a denial of service (device reload) via crafted IP Detail Record (IPDR) packets, aka Bug ID CSCuu35089.... Read more

    Affected Products : ios_xe ios
    • EPSS Score: %0.74
    • Published: Oct. 05, 2016
    • Modified: Apr. 12, 2025
  • 7.8

    HIGH
    CVE-2016-6378

    Cisco IOS XE 3.1 through 3.17 and 16.1 through 16.2 allows remote attackers to cause a denial of service (device reload) via crafted ICMP packets that require NAT, aka Bug ID CSCuw85853.... Read more

    Affected Products : ios_xe ios_xe
    • EPSS Score: %0.74
    • Published: Oct. 05, 2016
    • Modified: Apr. 12, 2025
  • 7.5

    HIGH
    CVE-2016-1455

    Cisco NX-OS before 7.0(3)I2(2e) and 7.0(3)I4 before 7.0(3)I4(1) has an incorrect iptables local-interface configuration, which allows remote attackers to obtain sensitive information via TCP or UDP traffic, aka Bug ID CSCuz05365.... Read more

    • EPSS Score: %0.68
    • Published: Oct. 05, 2016
    • Modified: Apr. 12, 2025
  • 6.1

    MEDIUM
    CVE-2016-6418

    Cross-site scripting (XSS) vulnerability in Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.0 through 3.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCva14552.... Read more

    • EPSS Score: %0.29
    • Published: Oct. 05, 2016
    • Modified: Apr. 12, 2025
  • 8.8

    HIGH
    CVE-2016-6417

    Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCva21636.... Read more

    Affected Products : firesight_system_software
    • EPSS Score: %0.13
    • Published: Oct. 05, 2016
    • Modified: Apr. 12, 2025
  • 5.9

    MEDIUM
    CVE-2016-6416

    The FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 through 9.9.6-026, Web Security Appliance (WSA) devices 9.0.0-162 through 9.5.0-444, and Content Security Management Appliance (SMA) devices allows remote attackers to ca... Read more

    • EPSS Score: %0.89
    • Published: Oct. 05, 2016
    • Modified: Apr. 12, 2025
  • 7.8

    HIGH
    CVE-2016-6392

    Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a denial of service (device restart) via a crafted IPv4 Multicast Source Discovery Protocol (MSDP) Source-Active (SA) message, aka Bug ID CSCud36767.... Read more

    Affected Products : ios_xe ios
    • EPSS Score: %1.03
    • Published: Oct. 05, 2016
    • Modified: Apr. 12, 2025
  • 7.8

    HIGH
    CVE-2016-6386

    Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service (data-structure corruption and device reload) via fragmented IPv4 packets, aka Bug ID CSCux66005.... Read more

    • EPSS Score: %0.74
    • Published: Oct. 05, 2016
    • Modified: Apr. 12, 2025
  • 7.8

    HIGH
    CVE-2016-6384

    Cisco IOS 12.2 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.17 and 16.2 allow remote attackers to cause a denial of service (device reload) via crafted fields in an H.323 message, aka Bug ID CSCux04257.... Read more

    Affected Products : ios_xe ios
    • EPSS Score: %1.97
    • Published: Oct. 05, 2016
    • Modified: Apr. 12, 2025
  • 7.8

    HIGH
    CVE-2016-6382

    Cisco IOS 15.2 through 15.6 and IOS XE 3.6 through 3.17 and 16.1 allow remote attackers to cause a denial of service (device restart) via a malformed IPv6 Protocol Independent Multicast (PIM) register packet, aka Bug ID CSCuy16399.... Read more

    Affected Products : ios_xe ios
    • EPSS Score: %6.26
    • Published: Oct. 05, 2016
    • Modified: Apr. 12, 2025
  • 7.5

    HIGH
    CVE-2016-6381

    Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service (memory consumption or device reload) via fragmented IKEv1 packets, aka Bug ID CSCuy47382.... Read more

    • EPSS Score: %1.26
    • Published: Oct. 05, 2016
    • Modified: Apr. 12, 2025
  • 4.9

    MEDIUM
    CVE-2016-7909

    The pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by setting the (1) receive or (2) transmit descriptor ring length to 0.... Read more

    Affected Products : debian_linux qemu
    • EPSS Score: %0.14
    • Published: Oct. 05, 2016
    • Modified: Apr. 12, 2025
  • 4.4

    MEDIUM
    CVE-2016-7908

    The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU proc... Read more

    Affected Products : debian_linux qemu
    • EPSS Score: %0.14
    • Published: Oct. 05, 2016
    • Modified: Apr. 12, 2025
  • 4.4

    MEDIUM
    CVE-2016-7907

    The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU proc... Read more

    Affected Products : qemu
    • EPSS Score: %0.11
    • Published: Oct. 05, 2016
    • Modified: Apr. 12, 2025
  • 7.2

    HIGH
    CVE-2016-7561

    Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow administrators to obtain sensitive user credentials by reading the pam.log file.... Read more

    Affected Products : fortiwlc
    • EPSS Score: %0.31
    • Published: Oct. 05, 2016
    • Modified: Apr. 12, 2025
Showing 20 of 291712 Results