Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2015-0760: Announcement Regarding Non-Cisco Product Security Alerts

The IKEv1 implementation in Cisco ASA Software 7.x, 8.0.x, 8.1.x, and 8.2.x before 8.2.2.13 allows remote authenticated users to bypass XAUTH authentication via crafted IKEv1 packets, aka Bug ID CSCus47259.

CVE
#vulnerability#cisco#auth

On 2019 September 15, Cisco stopped publishing non-Cisco product alerts � alerts with vulnerability information about third-party software (TPS). Cisco will continue to publish Security Advisories to address both Cisco proprietary and TPS vulnerabilities per the Cisco Security Vulnerability Policy. Cisco uses Release Note Enclosures to disclose the majority of TPS vulnerabilities; exceptions to this method are outlined in the Third-Party Software Vulnerabilities section of the Cisco Security Vulnerability Policy. The following links provide additional information.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907