Skip to main content
CVE-2020-3187 May 06, 17:15 CRITICAL POC THREAT Emergency

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Cisco Adaptive Security Appliance Software Firepower Threat Defense Asa 5505 Firmware +11
NVD Exploit-DB VulDB
CVSS 3.1
9.1
EPSS
96.6%
Threat
6.2
CVE-2020-8899 May 06, 17:15 CRITICAL POC Act Now

There is a buffer overwrite vulnerability in the Quram qmg library of Samsung's Android OS versions O(8.x), P(9.0) and Q(10.0). Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Google Heap Overflow Samsung +1
NVD
CVSS 4.0
10.0
EPSS
5.7%
CVE-2020-3318 May 06, 17:15 CRITICAL Act Now

Multiple vulnerabilities in Cisco Firepower Management Center (FMC) Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an affected system with a. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Cisco Secure Firewall Management Center
NVD
CVSS 3.1
9.8
EPSS
1.0%
CVE-2020-3125 May 06, 17:15 CRITICAL Act Now

A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to impersonate the Kerberos key distribution. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Cisco Adaptive Security Appliance Software Asa 5505 Firmware Asa 5510 Firmware +10
NVD
CVSS 3.1
9.8
EPSS
2.4%
CVE-2020-7806 May 06, 13:15 CRITICAL Act Now

Tobesoft Xplatform 9.2.2.250 and earlier version have an arbitrary code execution vulnerability by using method supported by Xplatform ActiveX Control. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Xplatform Tobesoft
NVD
CVSS 3.1
9.8
EPSS
0.7%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy