CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 12:00 PM ET)

What this means for you

This week: 3,294 CVEs published, 270 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 3,294; Show in the list
Critical, last 7 days: 270; Show in the list
Healthcare-tagged, last 7 days: 10; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product cisco:adaptive_security_appliance_software. Show all products

40 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2014-2120 Known exploited	Medium 5.4	Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified… Assigned by cisco	Mar 18, 2014
CVE-2016-6367 Known exploited	High 7.8	Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or… Assigned by cisco	Aug 18, 2016
CVE-2016-6366 Known exploited	High 8.8	Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM de… Assigned by cisco	Aug 18, 2016
CVE-2018-0296 Known exploited	High 7.5	A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a… Assigned by cisco	Jun 7, 2018
CVE-2020-3259 Known exploited	High 7.5	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability Assigned by cisco	May 6, 2020
CVE-2020-3452 Known exploited	High 7.5	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability Assigned by cisco	Jul 22, 2020
CVE-2020-3580 Known exploited	Medium 6.1	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities Assigned by cisco	Oct 21, 2020
CVE-2023-20269 Known exploited	Medium 5.0	A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker… Assigned by cisco	Sep 6, 2023
CVE-2024-20353 Known exploited	High 8.6	A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote att… Assigned by cisco	Apr 24, 2024
CVE-2024-20359 Known exploited	Medium 6.0	A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower… Assigned by cisco	Apr 24, 2024

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.