VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

Severity

KritischHochMittelNiedrigExploited in the wild (KEV)

Language / ecosystem

JavaScript / TypeScript (npm)Python (PyPI)PHP (Packagist)Java / Kotlin (Maven)GoRuby (RubyGems).NET (NuGet)

Stack

JavaScript / Node.js

Next.jsNuxtReactAngularSvelte / SvelteKitAstroRemixViteExpressNestJSFastifyNode.jsaxios

PHP

LaravelSymfonyPHP

Python

DjangoFlaskFastAPI / Starlette

Ruby

Ruby on Rails

Java

Spring

GinFiber

CMS

WordPressWooCommerceDrupalGhostStrapi

Servers & databases

nginxApache HTTP ServerMySQLPostgreSQLRedis

Vendor1

ciscooracleibmgoogleadobemicrosoftmozillaapacheappleredhatjenkinshpAll vendors →

cisco products

secure firewall threat defense 272unified communications manager 208identity services engine 186secure firewall management center 183webex meetings server 106prime infrastructure 83application extension platform 79catalyst sd-wan manager 75unified computing system 74data center network manager 67anyconnect secure mobility client 66

404.993 vulnerabilities · 1.769 actively exploited (CISA KEV)

cisco ✕Clear filters

3.507 results

ID	Severity	Summary	Published
CVE-2016-6394	KRITISCH9.1	Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attackers to hijack web sessions via a session identifier, aka Bug ID CSCuz80503.	12/09/2016
CVE-2016-6371	HOCH7.5	Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote attackers to write to arbitrary files via a crafted URL, aka Bug ID CSCuz64717.	12/09/2016
CVE-2016-6370	MITTEL4.3	Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote authenticated users to read arbitrary files via a crafted pathname in an HTTP request, aka Bug ID CSCuz27255.