Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
security access manager for web vulnerabilities and exploits
(subscribe to this query)
7.8
CVSSv2
CVE-2020-3436
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote malicious user to upload arbitrary-sized files to specific folders on an affected device, which could ...
Cisco Firepower Threat Defense
Cisco Adaptive Security Appliance
Cisco Firepower Threat Defense 6.6.0
Cisco Adaptive Security Appliance Software
10
CVSSv2
CVE-2017-6639
A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manager (DCNM) could allow an unauthenticated, remote malicious user to access sensitive information or execute arbitrary code with root privileges on an affected system. The ...
Cisco Prime Data Center Network Manager 10.1.0
Cisco Prime Data Center Network Manager 10.1\\(2\\)
Cisco Prime Data Center Network Manager 10.1\\(1\\)
6.8
CVSSv2
CVE-2022-20798
A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote malicious user to bypass authentication...
Cisco Email Security Appliance 7.1.5
Cisco Email Security Appliance
Cisco Secure Email And Web Manager
5
CVSSv2
CVE-2019-1717
A vulnerability in the web-based management interface of Cisco Video Surveillance Manager could allow an unauthenticated, remote malicious user to access sensitive information. The vulnerability is due to improper validation of parameters handled by the web-based management inter...
Cisco Video Surveillance Manager 7.21
7.8
CVSSv2
CVE-2017-12246
A vulnerability in the implementation of the direct authentication feature in Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote malicious user to cause an affected device to unexpectedly reload, resulting in a denial of service (DoS) conditio...
Cisco Adaptive Security Appliance Software 9.4\\(3\\)
Cisco Adaptive Security Appliance Software 9.7\\(1\\)
Cisco Adaptive Security Appliance Software 9.8\\(0.56\\)
5.8
CVSSv2
CVE-2017-10293
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE. Succ...
Oracle Jdk 1.9.0
Oracle Jre 1.9.0
Oracle Jdk 1.8.0
Oracle Jdk 1.7.0
Oracle Jdk 1.6.0
Oracle Jre 1.6.0
Oracle Jre 1.8.0
Oracle Jre 1.7.0
Netapp Cloud Backup -
Netapp Oncommand Balance -
Netapp Element Software -
Netapp Steelstore Cloud Integrated Storage -
Netapp Snapmanager -
Netapp Oncommand Workflow Automation -
Netapp Oncommand Insight -
Netapp Virtual Storage Console
Netapp E-series Santricity Storage Manager -
Netapp Oncommand Unified Manager -
Netapp Active Iq Unified Manager
Netapp Vasa Provider For Clustered Data Ontap
Netapp E-series Santricity Management Plug-ins -
Netapp Oncommand Shift -
NA
CVE-2023-24594
When an SSL profile is configured on a Virtual Server, undisclosed traffic can cause an increase in CPU or SSL accelerator resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
F5 Big-ip Advanced Firewall Manager 16.1.2
F5 Big-ip Access Policy Manager 16.1.2
F5 Big-ip Analytics 16.1.2
F5 Big-ip Application Security Manager 16.1.2
F5 Big-ip Application Acceleration Manager 16.1.2
F5 Big-ip Policy Enforcement Manager 16.1.2
F5 Big-ip Local Traffic Manager 16.1.2
F5 Big-ip Link Controller 16.1.2
F5 Big-ip Global Traffic Manager 16.1.2
F5 Big-ip Fraud Protection Service 16.1.2
F5 Big-ip Domain Name System 16.1.2
F5 Big-ip Advanced Web Application Firewall 16.1.2
F5 Big-ip Application Visibility And Reporting 16.1.2
F5 Big-ip Carrier-grade Nat 16.1.2
F5 Big-ip Ddos Hybrid Defender 16.1.2
F5 Big-ip Edge Gateway 16.1.2
F5 Big-ip Ssl Orchestrator 16.1.2
F5 Big-ip Webaccelerator 16.1.2
F5 Big-ip Websafe 16.1.2
F5 Big-ip Access Policy Manager 15.1.4.1
F5 Big-ip Advanced Firewall Manager 15.1.4.1
F5 Big-ip Advanced Web Application Firewall 15.1.4.1
7.5
CVSSv2
CVE-2021-1493
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote malicious user to cause a buffer overflow on an affected system. The vulnerability is due to in...
Cisco Firepower Threat Defense
Cisco Adaptive Security Appliance Software
10
CVSSv2
CVE-2017-6640
A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote malicious user to log in to the administrative console of a DCNM server by using an account that has a default, static password. The account could be granted root- or...
Cisco Prime Data Center Network Manager 10.1.0
Cisco Prime Data Center Network Manager 10.1\\(2\\)
Cisco Prime Data Center Network Manager 10.1\\(1\\)
1 Github repository
5.8
CVSSv2
CVE-2020-1935
In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if Tomcat was located be...
Apache Tomcat 9.0.0
Apache Tomcat
Debian Debian Linux 8.0
Debian Debian Linux 9.0
Debian Debian Linux 10.0
Canonical Ubuntu Linux 16.04
Opensuse Leap 15.1
Netapp Oncommand System Manager
Netapp Data Availability Services -
Oracle Transportation Management 6.3.7
Oracle Hospitality Guest Access 4.2.0
Oracle Hospitality Guest Access 4.2.1
Oracle Retail Order Broker 15.0
Oracle Agile Product Lifecycle Management 9.3.3
Oracle Agile Product Lifecycle Management 9.3.5
Oracle Agile Product Lifecycle Management 9.3.6
Oracle Instantis Enterprisetrack
Oracle Health Sciences Empirica Signal 7.3.3
Oracle Communications Instant Messaging Server 10.0.1.4.0
Oracle Communications Element Manager 8.2.0
Oracle Communications Element Manager 8.2.1
Oracle Communications Element Manager 8.1.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversal
CVE-2024-33545
CVE-2024-35725
CVE-2024-32704
overflow
file upload
CVE-2024-0230
CVE-2024-32705
CVE-2024-23692
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
4
5
6
7
8
9
10
NEXT »