cisco Vulnerability Advisory Catalog

Total 6,579 security vulnerabilities recorded for cisco software and firmware.

← Back to All Vendors
Component: identity_services_engine_passive_identity_connector

A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attack...

📅 2026-07-15
CVSS 5.5 Dossier →
Component: rv130_firmware

An OS command injection vulnerability exists in the start_lltd() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W r...

📅 2026-07-08
CVSS 7.2 Dossier →
Component: rv130_firmware

An OS command injection vulnerability exists in the sub_34984() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W ro...

📅 2026-07-08
CVSS 7.2 Dossier →
Component: rv130_firmware

An OS command injection vulnerability exists in the save_syslog_to_file() function of the "httpd" binary in Cisco RV130/RV130W with firmware 1.0.3.55 ...

📅 2026-07-08
CVSS 7.2 Dossier →
Component: rv130_firmware

An OS command injection vulnerability exists in the start_bonjour() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110...

📅 2026-07-08
CVSS 7.2 Dossier →
Component: secure_endpoint

A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other ex...

📅 2026-07-01
CVSS 7.5 Dossier →
Component: secure_endpoint

A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other ex...

📅 2026-07-01
CVSS 7.5 Dossier →
Component: secure_endpoint

A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other...

📅 2026-07-01
CVSS 7.5 Dossier →
Component: secure_endpoint

A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affec...

📅 2026-07-01
CVSS 7.5 Dossier →
Component: secure_endpoint

A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other exp...

📅 2026-07-01
CVSS 7.5 Dossier →
Component: secure_endpoint

A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other ex...

📅 2026-07-01
CVSS 7.5 Dossier →
Component: secure_endpoint

A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other exp...

📅 2026-07-01
CVSS 7.5 Dossier →
Component: webex_web_app

A vulnerability in the browser-based version of Cisco Webex App could have allowed an unauthenticated, remote attacker to redirect users to a maliciou...

📅 2026-06-17
CVSS 4.3 Dossier →
Component: umbrella_virtual_appliance

A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to elevate privileges on an affect...

📅 2026-06-17
CVSS 6.0 Dossier →
Component: crosswork_network_controller

A vulnerability in the web-based management interface of Cisco Crosswork Network Controller could allow an authenticated, remote attacker to exec...

📅 2026-06-17
CVSS 6.3 Dossier →
Component: identity_services_engine

A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device. This ...

📅 2026-06-17
CVSS 7.5 Dossier →
CVE-2026-20181 CRITICAL
Component: identity_services_engine

A vulnerability in Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating syste...

📅 2026-06-17
CVSS 9.1 Dossier →
Component: catalyst_sd-wan_manager

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a fil...

📅 2026-06-15
CVSS 6.5 Dossier →
Component: catalyst_sd-wan_manager

A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Ci...

📅 2026-06-04
CVSS 7.8 Dossier →
Component: webex_meetings

A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site...

📅 2026-06-03
CVSS 6.1 Dossier →
Component: unified_communications_manager

A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM S...

📅 2026-06-03
CVSS 8.6 Dossier →
CVE-2026-20223 CRITICAL
Component: secure_workload

A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access...

📅 2026-05-20
CVSS 10.0 Dossier →
Component: thousandeyes_virtual_appliance

A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to execute comma...

📅 2026-05-20
CVSS 4.7 Dossier →
Component: catalyst_sd-wan_manager

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbit...

📅 2026-05-14
CVSS 8.6 Dossier →
Page 1 of 275 (6,579 Total Records)