Vulnérabilités exploitées activement (CISA KEV)
Vulnérabilités de pare-feu et d’équipements de sécurité que la CISA liste comme activement exploitées, avec leurs échéances de remédiation.
149 des 259 vulnérabilités suivies par Patcharo figurent au catalogue CISA Known Exploited Vulnerabilities. 29 sont signalées pour un usage connu par des rançongiciels. Ajouts les plus récents d’abord.
Ce que signifie CISA KEV
Le catalogue Known Exploited Vulnerabilities recense les CVE pour lesquelles des preuves fiables d’exploitation existent. Chaque entrée porte une action requise et une échéance qui s’impose aux agences fédérales américaines ; pour les autres, c’est le signal le plus net qu’un correctif ne peut pas attendre. Patcharo lit le flux à chaque synchronisation et garde l’échéance et l’indicateur rançongiciel à côté des versions corrigées de l’éditeur.
| CVE | Produit | Ajout | Échéance | CVSS · EPSS |
|---|---|---|---|---|
| CVE-2026-93616 | Directory Traversal and File upload allows execution of arbitrary script on the Management ServerCheck Point Quantum Security Management | Critique9,8CVSS 3.1, Critique20 % | ||
| CVE-2026-85102 | Improper Certificate Validation in Quantum Security GatewayCheck Point Quantum Security Gateway | Critique9,8CVSS 3.1, Critique8 % | ||
| CVE-2026-76460 | Cisco Identity Services Engine Authentication Bypass VulnerabilityCisco Cisco Identity Services Engine Software, Cisco Cisco ISE Passive Identity Connector | Critique10CVSS 3.1, Critique14 % | ||
| CVE-2026-76461 | Cisco Secure Email Gateway SQL Injection VulnerabilityCisco Cisco Secure Email | Critique9,8CVSS 3.1, Critique28 % | ||
| CVE-2026-20079 | Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution VulnerabilityCisco Secure Firewall Management Center (FMC) | Critique10CVSS 3.1, Critique88 % | ||
| CVE-2025-25249 | Fortinet Multiple Products Heap-based Buffer Overflow VulnerabilityFortinet FortiOS | Critique9,8CVSS 3.1, Critique4 % | ||
| CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service VulnerabilityCisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD) | Élevée8,6CVSS 3.1, Élevée1 % | ||
| CVE-2026-20316Usage par des rançongiciels connu | Cisco Secure Firewall Management Center Software Static Credential VulnerabilityCisco Secure Firewall Management Center (FMC) | Moyenne5,3CVSS 3.1, Moyenne35 % | ||
| CVE-2025-68686 | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityFortinet FortiOS | Moyenne5,9CVSS 3.1, Moyenne30 % | ||
| CVE-2026-16232 | Authentication Bypass in the SmartConsole Login Process Using an Application TokenCheck Point Quantum Security Management | Critique9,8CVSS 3.1, Critique78 % | ||
| CVE-2026-39808 | Fortinet FortiSandbox OS Command Injection VulnerabilityFortinet FortiSandbox | Critique9,8CVSS 3.1, Critique47 % | ||
| CVE-2026-25089 | Fortinet FortiSandbox OS Command Injection VulnerabilityFortinet FortiSandbox | Critique9,8CVSS 3.1, Critique76 % | ||
| CVE-2008-4128 | Cisco IOS Cross-Site Request Forgery Vulnerabilityn/a n/a | Élevée8,1CVSS 3.1, Élevée34 % | ||
| CVE-2026-20230 | Cisco Unified Communications Manager Server-Side Request Forgery VulnerabilityCisco Cisco Unified Communications Manager | Élevée8,6CVSS 3.1, Élevée88 % | ||
| CVE-2026-20262 | Cisco Catalyst SD-WAN Manager Arbitrary File Write VulnerabilityCisco Cisco Catalyst SD-WAN Manager | Moyenne6,5CVSS 3.1, Moyenne28 % | ||
| CVE-2026-20245 | Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation VulnerabilityCisco Cisco Catalyst SD-WAN Controller, Cisco Cisco Catalyst SD-WAN Manager | Élevée7,8CVSS 3.1, Élevée25 % | ||
| CVE-2026-50751Usage par des rançongiciels connu | User Authentication Bypass in VPN Remote Access and Mobile AccessCheck Point Quantum Security Gateway | Critique9,3CVSS 3.1, Critique6 % | ||
| CVE-2026-0257Usage par des rançongiciels connu | PAN-OS: GlobalProtect Authentication Bypass VulnerabilitiesPalo Alto Networks PAN-OS | Critique9,1CVSS 3.1, Critique96 % | ||
| CVE-2026-20182 | Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCisco Cisco Catalyst SD-WAN Controller, Cisco Cisco Catalyst SD-WAN Manager | Critique10CVSS 3.1, Critique92 % | ||
| CVE-2026-0300 | PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication PortalPalo Alto Networks PAN-OS | Critique9,8CVSS 3.1, Critique32 % | ||
| CVE-2026-20133 | Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityCisco Cisco Catalyst SD-WAN Manager | Élevée7,5CVSS 3.1, Élevée32 % | ||
| CVE-2026-20128 | Cisco Catalyst SD-WAN Manager Information Disclosure VulnerabilityCisco Cisco Catalyst SD-WAN Manager | Élevée7,5CVSS 3.1, Élevée7 % | ||
| CVE-2026-20122 | Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite VulnerabilityCisco Cisco Catalyst SD-WAN Manager | Moyenne5,4CVSS 3.1, Moyenne25 % | ||
| CVE-2026-21643 | Fortinet FortiClient EMS SQL Injection VulnerabilityFortinet FortiClient EMS | Critique9,8CVSS 3.1, Critique94 % | ||
| CVE-2026-35616 | Fortinet FortiClient EMS Improper Access Control VulnerabilityFortinet FortiClient EMS | Critique9,8CVSS 3.1, Critique9 % | ||
| CVE-2026-20131Usage par des rançongiciels connu | Cisco Secure Firewall Management Center Software Remote Code Execution VulnerabilityCisco Secure Firewall Management Center (FMC) | Critique10CVSS 3.1, Critique43 % | ||
| CVE-2026-20127 | Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCisco Cisco Catalyst SD-WAN Manager | Critique10CVSS 3.1, Critique88 % | ||
| CVE-2022-20775 | Cisco SD-WAN Software Privilege Escalation VulnerabilityCisco Cisco Catalyst SD-WAN, Cisco Cisco Catalyst SD-WAN Manager | Élevée7,8CVSS 3.1, Élevée12 % | ||
| CVE-2026-24858 | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel VulnerabilityFortinet FortiWeb, Fortinet FortiOS, Fortinet FortiAnalyzer, Fortinet FortiProxy, Fortinet FortiManager | Critique9,8CVSS 3.1, Critique86 % | ||
| CVE-2026-20045 | Cisco Unified Communications Products Remote Code Execution VulnerabilityCisco Cisco Unified Communications Manager, Cisco Cisco Unified Communications Manager IM and Presence Service | Critique9,8CVSS 3.1, Critique5 % | ||
| CVE-2025-20393 | Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution VulnerabilityCisco Cisco Secure Email, Cisco Cisco Secure Email and Web Manager | Critique10CVSS 3.1, Critique32 % | ||
| CVE-2025-59718 | Fortinet Multiple Products Improper Verification of Cryptographic Signature VulnerabilityFortinet FortiOS, Fortinet FortiProxy | Critique9,8CVSS 3.1, Critique68 % | ||
| CVE-2025-58034 | Fortinet FortiWeb OS Command Injection VulnerabilityFortinet FortiWeb | Élevée7,2CVSS 3.1, Élevée56 % | ||
| CVE-2025-64446 | Fortinet FortiWeb Path Traversal VulnerabilityFortinet FortiWeb | Critique9,8CVSS 3.1, Critique92 % | ||
| CVE-2025-20352 | Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution VulnerabilityCisco IOS, Cisco Cisco IOS XE Software | Élevée7,7CVSS 3.1, Élevée39 % | ||
| CVE-2025-20362 | Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization VulnerabilityCisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD) | Élevée8,6CVSS 3.1, Élevée87 % | ||
| CVE-2025-20333 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow VulnerabilityCisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD) | Critique9,9CVSS 3.1, Critique71 % | ||
| CVE-2025-20337 | Cisco ISE API Unauthenticated Remote Code Execution VulnerabilityCisco Cisco Identity Services Engine Software, Cisco Cisco ISE Passive Identity Connector | Critique10CVSS 3.1, Critique68 % | ||
| CVE-2025-20281 | Cisco ISE API Unauthenticated Remote Code Execution VulnerabilityCisco Cisco Identity Services Engine Software | Critique10CVSS 3.1, Critique98 % | ||
| CVE-2025-25257 | Fortinet FortiWeb SQL Injection VulnerabilityFortinet FortiWeb | Critique9,8CVSS 3.1, Critique100 % | ||
| CVE-2019-6693Usage par des rançongiciels connu | Fortinet FortiOS Use of Hard-Coded Credentials VulnerabilityFortinet FortiGate | Moyenne6,5CVSS 3.1, Moyenne6 % | ||
| CVE-2025-32756 | Fortinet Multiple Products Stack-Based Buffer Overflow VulnerabilityFortinet FortiNDR, Fortinet FortiCamera | Critique9,8CVSS 3.1, Critique30 % | ||
| CVE-2024-20439 | Cisco Smart Licensing Utility Static Credential VulnerabilityCisco Cisco Smart License Utility | Critique9,8CVSS 3.1, Critique97 % | ||
| CVE-2025-24472Usage par des rançongiciels connu | Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityFortinet FortiOS, Fortinet FortiProxy | Élevée8,1CVSS 3.1, Élevée7 % | ||
| CVE-2023-20118 | Cisco Small Business RV Series Routers Command Injection VulnerabilityCisco Cisco Small Business RV Series Router Firmware | Élevée7,2CVSS 3.1, Élevée54 % | ||
| CVE-2025-0111 | PAN-OS: Authenticated File Read Vulnerability in the Management Web InterfacePalo Alto Networks PAN-OS | Moyenne6,5CVSS 3.1, Moyenne2 % | ||
| CVE-2025-0108 | PAN-OS: Authentication Bypass in the Management Web InterfacePalo Alto Networks PAN-OS | Critique9,1CVSS 3.1, Critique98 % | ||
| CVE-2024-55591Usage par des rançongiciels connu | Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityFortinet FortiOS, Fortinet FortiProxy | Critique9,8CVSS 3.1, Critique94 % | ||
| CVE-2024-3393 | PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted PacketPalo Alto Networks PAN-OS | Élevée7,5CVSS 3.1, Élevée28 % | ||
| CVE-2024-9474Usage par des rançongiciels connu | PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management InterfacePalo Alto Networks PAN-OS | Élevée7,2CVSS 3.1, Élevée95 % | ||
| CVE-2024-0012Usage par des rançongiciels connu | PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)Palo Alto Networks PAN-OS | Critique9,8CVSS 3.1, Critique100 % | ||
| CVE-2024-9465 | Expedition: SQL Injection Leads to Firewall Admin Credential DisclosurePalo Alto Networks Expedition | Critique9,1CVSS 3.1, Critique100 % | ||
| CVE-2024-9463 | Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential DisclosurePalo Alto Networks Expedition | Élevée7,5CVSS 3.1, Élevée99 % | ||
| CVE-2014-2120 | Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerabilityn/a n/a | Moyenne6,1CVSS 3.1, Moyenne23 % | ||
| CVE-2024-5910 | Expedition: Missing Authentication Leads to Admin Account TakeoverPalo Alto Networks Expedition | Critique9,8CVSS 3.1, Critique92 % | ||
| CVE-2024-20481 | Cisco ASA and FTD Denial-of-Service VulnerabilityCisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD) | Moyenne5,8CVSS 3.1, Moyenne16 % | ||
| CVE-2024-47575 | Fortinet FortiManager Missing Authentication VulnerabilityFortinet FortiManager | Critique9,8CVSS 3.1, Critique95 % | ||
| CVE-2024-23113 | Fortinet Multiple Products Format String VulnerabilityFortinet FortiOS, Fortinet FortiProxy | Critique9,8CVSS 3.1, Critique62 % | ||
| CVE-2024-20399 | Cisco NX-OS Software CLI Command Injection VulnerabilityCisco Cisco NX-OS Software | Moyenne6,7CVSS 3.1, Moyenne4 % | ||
| CVE-2024-24919Usage par des rançongiciels connu | Information disclosureCheck Point Quantum Security Gateway | Élevée8,6CVSS 3.1, Élevée100 % | ||
| CVE-2024-20359 | Cisco ASA and FTD Privilege Escalation VulnerabilityCisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD) | Moyenne6CVSS 3.1, Moyenne19 % | ||
| CVE-2024-20353 | Cisco ASA and FTD Denial of Service VulnerabilityCisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD) | Élevée8,6CVSS 3.1, Élevée71 % | ||
| CVE-2024-3400Usage par des rançongiciels connu | PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtectPalo Alto Networks PAN-OS | Critique10CVSS 3.1, Critique100 % | ||
| CVE-2023-48788Usage par des rançongiciels connu | Fortinet FortiClient EMS SQL Injection VulnerabilityFortinet FortiClient EMS | Critique9,8CVSS 3.1, Critique98 % | ||
| CVE-2020-3259Usage par des rançongiciels connu | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure VulnerabilityCisco Cisco Adaptive Security Appliance (ASA) Software | Élevée7,5CVSS 3.1, Élevée72 % | ||
| CVE-2024-21762Usage par des rançongiciels connu | Fortinet FortiOS Out-of-Bound Write VulnerabilityFortinet FortiProxy, Fortinet FortiOS | Critique9,8CVSS 3.1, Critique83 % | ||
| CVE-2023-20273 | Cisco IOS XE Web UI Command Injection VulnerabilityCisco Cisco IOS XE Software | Élevée7,2CVSS 3.1, Élevée90 % | ||
| CVE-2023-20198 | Cisco IOS XE Web UI Privilege Escalation VulnerabilityCisco Cisco IOS XE Software | Critique10CVSS 3.1, Critique100 % | ||
| CVE-2023-20109 | Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write VulnerabilityCisco IOS, Cisco Cisco IOS XE Software | Moyenne6,6CVSS 3.1, Moyenne2 % | ||
| CVE-2023-20269Usage par des rançongiciels connu | Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access VulnerabilityCisco Secure Firewall ASA, Cisco Secure Firewall Threat Defense (FTD) | Critique9,1CVSS 3.1, Critique25 % | ||
| CVE-2023-27997Usage par des rançongiciels connu | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow VulnerabilityFortinet FortiProxy, Fortinet FortiOS | Critique9,8CVSS 3.1, Critique86 % | ||
| CVE-2016-6415 | Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerabilityn/a n/a | Élevée7,5CVSS 3.1, Élevée88 % | ||
| CVE-2004-1464 | Cisco IOS Denial-of-Service Vulnerabilityn/a n/a | Moyenne5,9CVSS 3.1, Moyenne5 % | ||
| CVE-2017-6742 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco Cisco IOS XE Software, IntelliShield Universal Product | Élevée8,8CVSS 3.1, Élevée21 % | ||
| CVE-2022-41328 | Fortinet FortiOS Path Traversal VulnerabilityFortinet FortiOS | Élevée7,1CVSS 3.1, Élevée11 % | ||
| CVE-2022-42475Usage par des rançongiciels connu | Fortinet FortiOS Heap-Based Buffer Overflow VulnerabilityFortinet FortiProxy, Fortinet FortiOS | Critique9,8CVSS 3.1, Critique99 % | ||
| CVE-2020-3433Usage par des rançongiciels connu | Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityCisco Cisco AnyConnect Secure Mobility Client | Élevée7,8CVSS 3.1, Élevée10 % | ||
| CVE-2020-3153Usage par des rançongiciels connu | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityCisco Cisco AnyConnect Secure Mobility Client | Moyenne6,5CVSS 3.1, Moyenne28 % | ||
| CVE-2022-40684Usage par des rançongiciels connu | Fortinet Multiple Products Authentication Bypass VulnerabilityFortinet Fortinet FortiOS, FortiProxy, FortiSwitchManager | Critique9,8CVSS 3.1, Critique100 % | ||
| CVE-2018-13374Usage par des rançongiciels connu | Fortinet FortiOS and FortiADC Improper Access Control VulnerabilityFortinet Fortinet FortiOS, fortiADC | Moyenne4,3CVSS 3.1, Moyenne38 % | ||
| CVE-2022-0028 | PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL FilteringPalo Alto Networks PAN-OS | Élevée8,6CVSS 3.1, Élevée2 % | ||
| CVE-2017-15944 | Palo Alto Networks PAN-OS Remote Code Execution Vulnerabilityn/a n/a | Critique9,8CVSS 3.1, Critique98 % | ||
| CVE-2019-15271 | Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution VulnerabilityCisco Cisco Small Business RV Series Router Firmware | Élevée8,8CVSS 3.1, Élevée5 % | ||
| CVE-2016-6367 | Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerabilityn/a n/a | Élevée7,8CVSS 3.1, Élevée23 % | ||
| CVE-2016-6366 | Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerabilityn/a n/a | Élevée8,8CVSS 3.1, Élevée88 % | ||
| CVE-2022-20821 | Cisco IOS XR Software Health Check Open Port VulnerabilityCisco Cisco IOS XR Software | Moyenne6,5CVSS 3.1, Moyenne11 % | ||
| CVE-2020-2021Usage par des rançongiciels connu | PAN-OS: Authentication Bypass in SAML AuthenticationPalo Alto Networks PAN-OS | Critique10CVSS 3.1, Critique4 % | ||
| CVE-2018-0147 | Cisco Secure Access Control System Java Deserialization Vulnerabilityn/a Cisco Secure Access Control System | Critique9,8CVSS 3.1, Critique18 % | ||
| CVE-2018-0125 | Cisco VPN Routers Remote Code Execution Vulnerabilityn/a Cisco RV132W and RV134W | Critique9,8CVSS 3.1, Critique55 % | ||
| CVE-2017-3881 | Cisco IOS and IOS XE Remote Code Execution Vulnerabilityn/a Cisco IOS and IOS XE Software | Critique9,8CVSS 3.1, Critique99 % | ||
| CVE-2015-0666 | Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerabilityn/a n/a | Élevée7,5CVSS 3.1, Élevée40 % | ||
| CVE-2010-3035 | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerabilityn/a n/a | Élevée7,5CVSS 3.1, Élevée6 % | ||
| CVE-2009-2055 | Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerabilityn/a n/a | Moyenne5,9CVSS 3.1, Moyenne3 % | ||
| CVE-2022-20708 | Cisco Small Business RV Series Routers VulnerabilitiesCisco Cisco Small Business RV Series Router Firmware | Élevée8CVSS 3.1, Élevée15 % | ||
| CVE-2022-20703 | Cisco Small Business RV Series Routers VulnerabilitiesCisco Cisco Small Business RV Series Router Firmware | Élevée8CVSS 3.1, Élevée9 % | ||
| CVE-2022-20701 | Cisco Small Business RV Series Routers VulnerabilitiesCisco Cisco Small Business RV Series Router Firmware | Élevée7,8CVSS 3.1, Élevée10 % | ||
| CVE-2022-20700 | Cisco Small Business RV Series Routers VulnerabilitiesCisco Cisco Small Business RV Series Router Firmware | Critique9,8CVSS 3.1, Critique6 % | ||
| CVE-2022-20699 | Cisco Small Business RV Series Routers VulnerabilitiesCisco Cisco Small Business RV Series Router Firmware | Critique9,8CVSS 3.1, Critique72 % | ||
| CVE-2019-1652 | Cisco Small Business RV320 and RV325 Routers Command Injection VulnerabilityCisco Cisco Small Business RV Series Router Firmware | Élevée7,2CVSS 3.1, Élevée96 % | ||
| CVE-2018-0180 | Cisco IOS Software Denial-of-Service Vulnerabilityn/a Cisco IOS | Moyenne5,9CVSS 3.1, Moyenne5 % | ||
| CVE-2018-0179 | Cisco IOS Software Denial-of-Service Vulnerabilityn/a Cisco IOS | Moyenne5,9CVSS 3.1, Moyenne5 % | ||
| CVE-2018-0175 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerabilityn/a Cisco IOS, IOS XE, and IOS XR | Élevée8CVSS 3.1, Élevée3 % | ||
| CVE-2018-0174 | Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerabilityn/a Cisco IOS and IOS XE | Élevée8,6CVSS 3.1, Élevée8 % | ||
| CVE-2018-0173 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerabilityn/a Cisco IOS and IOS XE | Élevée8,6CVSS 3.1, Élevée8 % | ||
| CVE-2018-0172 | Cisco IOS and IOS XE Software Improper Input Validation Vulnerabilityn/a Cisco IOS and IOS XE | Élevée8,6CVSS 3.1, Élevée8 % | ||
| CVE-2018-0167 | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerabilityn/a Cisco IOS, IOS XE, and IOS XR | Élevée8,8CVSS 3.1, Élevée3 % | ||
| CVE-2018-0161 | Cisco IOS Software Resource Management Errors Vulnerabilityn/a Cisco IOS | Moyenne6,3CVSS 3.1, Moyenne4 % | ||
| CVE-2018-0159 | Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerabilityn/a Cisco IOS and IOS XE | Élevée7,5CVSS 3.1, Élevée7 % | ||
| CVE-2018-0158 | Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerabilityn/a Cisco IOS and IOS XE | Élevée8,6CVSS 3.1, Élevée7 % | ||
| CVE-2018-0156 | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerabilityn/a Cisco IOS and IOS XE | Élevée7,5CVSS 3.1, Élevée9 % | ||
| CVE-2018-0155 | Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerabilityn/a Cisco IOS and IOS XE | Élevée8,6CVSS 3.1, Élevée8 % | ||
| CVE-2018-0154 | Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerabilityn/a Cisco IOS | Élevée7,5CVSS 3.1, Élevée7 % | ||
| CVE-2018-0151 | Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerabilityn/a Cisco IOS and IOS XE | Critique9,8CVSS 3.1, Critique14 % | ||
| CVE-2017-6744 | Cisco IOS Software SNMP Remote Code Execution VulnerabilityCisco IOS, IntelliShield Universal Product | Élevée8,8CVSS 3.1, Élevée7 % | ||
| CVE-2017-6743 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco IOS, IntelliShield Universal Product | Élevée8,8CVSS 3.1, Élevée11 % | ||
| CVE-2017-6740 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco IOS, IntelliShield Universal Product | Élevée8,8CVSS 3.1, Élevée11 % | ||
| CVE-2017-6739 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityIntelliShield Universal Product | Élevée8,8CVSS 3.1, Élevée11 % | ||
| CVE-2017-6738 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco IOS, Cisco Cisco IOS XE Software | Élevée8,8CVSS 3.1, Élevée11 % | ||
| CVE-2017-6737 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco IOS | Élevée8,8CVSS 3.1, Élevée45 % | ||
| CVE-2017-6736 | Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityCisco IOS, IntelliShield Universal Product | Élevée8,8CVSS 3.1, Élevée70 % | ||
| CVE-2017-6663 | Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerabilityn/a Cisco IOS and IOS XE | Moyenne6,5CVSS 3.1, Moyenne2 % | ||
| CVE-2017-6627 | Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerabilityn/a Cisco IOS and Cisco IOS XE | Élevée7,5CVSS 3.1, Élevée6 % | ||
| CVE-2017-12319 | Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerabilityn/a Cisco IOS XE | Moyenne5,9CVSS 3.1, Moyenne5 % | ||
| CVE-2017-12240 | Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerabilityn/a Cisco IOS and IOS XE | Critique9,8CVSS 3.1, Critique14 % | ||
| CVE-2017-12238 | Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerabilityn/a Cisco IOS | Moyenne6,5CVSS 3.1, Moyenne2 % | ||
| CVE-2017-12237 | Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerabilityn/a Cisco IOS and IOS XE | Élevée7,5CVSS 3.1, Élevée7 % | ||
| CVE-2017-12235 | Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerabilityn/a Cisco IOS | Élevée7,5CVSS 3.1, Élevée7 % | ||
| CVE-2017-12234 | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerabilityn/a Cisco IOS | Élevée7,5CVSS 3.1, Élevée7 % | ||
| CVE-2017-12233 | Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerabilityn/a Cisco IOS | Élevée7,5CVSS 3.1, Élevée7 % | ||
| CVE-2017-12232 | Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerabilityn/a Cisco IOS | Moyenne6,5CVSS 3.1, Moyenne2 % | ||
| CVE-2017-12231 | Cisco IOS Software Network Address Translation Denial-of-Service Vulnerabilityn/a Cisco IOS | Élevée7,5CVSS 3.1, Élevée7 % | ||
| CVE-2019-1579Usage par des rançongiciels connu | Palo Alto Networks PAN-OS Remote Code Execution Vulnerabilityn/a Palo Alto Networks GlobalProtect Portal/Gateway Interface | Élevée8,1CVSS 3.1, Élevée46 % | ||
| CVE-2018-13383Usage par des rançongiciels connu | Fortinet FortiOS and FortiProxy Out-of-bounds WriteFortinet Fortinet FortiOS and FortiProxy | Moyenne6,5CVSS 3.1, Moyenne34 % | ||
| CVE-2018-13382Usage par des rançongiciels connu | Fortinet FortiOS and FortiProxy Improper AuthorizationFortinet Fortinet FortiOS, FortiProxy | Élevée7,5CVSS 3.1, Élevée82 % | ||
| CVE-2021-44168 | Fortinet FortiOS Arbitrary File DownloadFortinet Fortinet FortiOS | Élevée7,8CVSS 3.1, Élevée0,87 % | ||
| CVE-2021-1498 | Cisco HyperFlex HX Command Injection VulnerabilitiesCisco Cisco HyperFlex HX Data Platform | Critique9,8CVSS 3.1, Critique100 % | ||
| CVE-2021-1497 | Cisco HyperFlex HX Command Injection VulnerabilitiesCisco Cisco HyperFlex HX Data Platform | Critique9,8CVSS 3.1, Critique100 % | ||
| CVE-2020-3580Usage par des rançongiciels connu | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting VulnerabilitiesCisco Cisco Adaptive Security Appliance (ASA) Software | Moyenne6,1CVSS 3.1, Moyenne86 % | ||
| CVE-2020-3569 | Cisco IOS XR Software DVMRP Memory Exhaustion VulnerabilitiesCisco Cisco IOS XR Software | Élevée8,6CVSS 3.1, Élevée3 % | ||
| CVE-2020-3566 | Cisco IOS XR Software DVMRP Memory Exhaustion VulnerabilityCisco Cisco IOS XR Software | Élevée8,6CVSS 3.1, Élevée4 % | ||
| CVE-2020-3452 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal VulnerabilityCisco Cisco Adaptive Security Appliance (ASA) Software | Élevée7,5CVSS 3.1, Élevée100 % | ||
| CVE-2020-3161 | Cisco IP Phones Web Server Remote Code Execution and Denial of Service VulnerabilityCisco Cisco IP phone | Critique9,8CVSS 3.1, Critique84 % | ||
| CVE-2020-3118 | Cisco IOS XR Software Cisco Discovery Protocol Format String VulnerabilityCisco Cisco IOS XR Software | Élevée8,8CVSS 3.1, Élevée12 % | ||
| CVE-2020-12812Usage par des rançongiciels connu | Fortinet FortiOS SSL VPN Improper Authentication Vulnerabilityn/a Fortinet FortiOS | Critique9,8CVSS 3.1, Critique49 % | ||
| CVE-2019-5591Usage par des rançongiciels connu | Fortinet FortiOS Default Configuration VulnerabilityFortinet Fortinet FortiOS | Moyenne6,5CVSS 3.1, Moyenne18 % | ||
| CVE-2019-1653 | Cisco Small Business RV320 and RV325 Routers Information Disclosure VulnerabilityCisco Cisco Small Business RV Series Router Firmware | Élevée7,5CVSS 3.1, Élevée100 % | ||
| CVE-2018-13379Usage par des rançongiciels connu | Fortinet FortiOS SSL VPN Path Traversal VulnerabilityFortinet Fortinet FortiOS, FortiProxy | Critique9,8CVSS 3.1, Critique100 % | ||
| CVE-2018-0296 | Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerabilityn/a Cisco Adaptive Security Appliance unknown | Élevée7,5CVSS 3.1, Élevée100 % | ||
| CVE-2018-0171 | Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerabilityn/a Cisco IOS and IOS XE | Critique9,8CVSS 3.1, Critique99 % |