cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2020-3220,https://securityvulnerability.io/vulnerability/CVE-2020-3220,Cisco IOS XE Software IPsec VPN Denial of Service Vulnerability,"A vulnerability in the hardware crypto driver of Cisco IOS XE Software for Cisco 4300 Series Integrated Services Routers and Cisco Catalyst 9800-L Wireless Controllers could allow an unauthenticated, remote attacker to disconnect legitimate IPsec VPN sessions to an affected device. The vulnerability is due to insufficient verification of authenticity of received Encapsulating Security Payload (ESP) packets. An attacker could exploit this vulnerability by tampering with ESP cleartext values as a man-in-the-middle.",Cisco,Cisco iOS Xe Software 16.4.1,6.8,MEDIUM,0.0012499999720603228,false,,false,false,true,2024-08-04T08:16:30.000Z,,false,false,,2020-06-03T00:00:00.000Z,0
CVE-2019-12666,https://securityvulnerability.io/vulnerability/CVE-2019-12666,Cisco IOS XE Software Path Traversal Vulnerability,"A vulnerability in the Guest Shell of Cisco IOS XE Software could allow an authenticated, local attacker to perform directory traversal on the base Linux operating system of Cisco IOS XE Software. The vulnerability is due to incomplete validation of certain commands. An attacker could exploit this vulnerability by first accessing the Guest Shell and then entering specific commands. A successful exploit could allow the attacker to execute arbitrary code on the base Linux operating system.",Cisco,Cisco iOS Xe Software 16.4.1,6.7,MEDIUM,0.0004400000034365803,false,,false,false,true,2024-09-16T20:17:51.000Z,,false,false,,2019-09-25T00:00:00.000Z,0
CVE-2019-12667,https://securityvulnerability.io/vulnerability/CVE-2019-12667,Cisco IOS XE Software Stored Cross-Site Scripting Vulnerability,"A vulnerability in the web framework code of Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of the affected software. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected software. An attacker could exploit this vulnerability by convincing a user of the web interface to access a malicious link or by intercepting a user request for the affected web interface and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information.",Cisco,Cisco iOS Xe Software 16.4.1,5.5,MEDIUM,0.0006600000197067857,false,,false,false,true,2024-09-17T01:15:06.000Z,,false,false,,2019-09-25T00:00:00.000Z,0