VYPR
← Cisco Systems, Inc.

Vendor CVEs

Cisco Systems, Inc.

All CVEs

7,228 total · sorted by risk
  • CVE-2015-0765Jun 4, 2015
    Cisco Systems, Inc.
    Ons 15454 System Software
    risk 0.00cvss —epss 0.02

    Cisco ONS 15454 System Software 10.30 and 10.301 allows remote attackers to cause a denial of service (tNetTask CPU consumption or card reset) via a flood of (1) IP or (2) Ethernet traffic, aka Bug ID CSCus57263.

  • CVE-2015-0764Jun 4, 2015
    Cisco Systems, Inc.
    Unified Meetingplace
    risk 0.00cvss —epss 0.02

    Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via a crafted resource request, aka Bug ID CSCus95603.

  • CVE-2015-0763Jun 4, 2015
    Cisco Systems, Inc.
    Unified Meetingplace
    risk 0.00cvss —epss 0.02

    Cisco Unified MeetingPlace 8.6(1.2) does not properly validate session IDs in http URLs, which allows remote attackers to obtain sensitive session information via a crafted URL, aka Bug ID CSCuu60338.

  • CVE-2015-0762Jun 4, 2015
    Cisco Systems, Inc.
    Unified Meetingplace
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) for Microsoft Outlook allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCuu51400.

  • CVE-2015-0761Jun 4, 2015
    Cisco Systems, Inc.
    Anyconnect Secure Mobility Client
    risk 0.00cvss —epss 0.00

    Cisco AnyConnect Secure Mobility Client before 3.1(8009) and 4.x before 4.0(2052) on Linux does not properly implement unspecified internal functions, which allows local users to obtain root privileges via crafted vpnagent options, aka Bug ID CSCus86790.

  • CVE-2015-0760Jun 4, 2015
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    The IKEv1 implementation in Cisco ASA Software 7.x, 8.0.x, 8.1.x, and 8.2.x before 8.2.2.13 allows remote authenticated users to bypass XAUTH authentication via crafted IKEv1 packets, aka Bug ID CSCus47259.

  • CVE-2015-0759Jun 2, 2015
    Cisco Systems, Inc.
    Headend Digital Broadband Delivery System
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Cisco Headend Digital Broadband Delivery System allows remote attackers to hijack the authentication of arbitrary users.

  • CVE-2015-0758May 30, 2015
    Cisco Systems, Inc.
    Unified Meetingplace
    risk 0.00cvss —epss 0.02

    The web-based user interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID…

  • CVE-2015-0747May 30, 2015
    Cisco Systems, Inc.
    Headend System Release
    risk 0.00cvss —epss 0.02

    Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408.

  • CVE-2015-0745May 30, 2015
    Cisco Systems, Inc.
    Headend System Release
    risk 0.00cvss —epss 0.02

    Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug ID CSCus44909.

  • CVE-2015-0744May 30, 2015
    Cisco Systems, Inc.
    Headend System Release
    risk 0.00cvss —epss 0.03

    Cisco DTA Control System (DTACS) 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service (CPU and memory consumption, and TCP service outage) via (1) a SYN flood or (2) another type of TCP traffic flood, aka Bug IDs CSCus50642, CSCus50662,…

  • CVE-2015-0743May 30, 2015
    Cisco Systems, Inc.
    Headend System Release
    risk 0.00cvss —epss 0.02

    Cisco Headend System Release allows remote attackers to cause a denial of service (DHCP and TFTP outage) via a flood of crafted UDP traffic, aka Bug ID CSCus04097.

  • CVE-2015-0733May 30, 2015
    Cisco Systems, Inc.
    Headend Digital Broadband Delivery System
    risk 0.00cvss —epss 0.02

    CRLF injection vulnerability in the HTTP Header Handler in Digital Broadband Delivery System in Cisco Headend System Release allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks, via a crafted…

  • CVE-2015-0757May 29, 2015
    Cisco Systems, Inc.
    Identity Services Engine Software
    risk 0.00cvss —epss 0.02

    The web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does not properly implement session handlers, which allows remote attackers to obtain sensitive information by reading web pages, as demonstrated by MnT reports, aka Bug ID CSCuq23140.

  • CVE-2015-0756May 29, 2015
    Cisco Systems, Inc.
    Wireless Lan Controller Software
    risk 0.00cvss —epss 0.01

    Cisco Wireless LAN Controller (WLC) devices with software 7.4(1.1) allow remote attackers to cause a denial of service (wireless-networking outage) via crafted TCP traffic on the local network, aka Bug ID CSCug67104.

  • CVE-2015-0755May 29, 2015
    Cisco Systems, Inc.
    Anyconnect Secure Mobility Client
    risk 0.00cvss —epss 0.00

    The Posture module for Cisco Identity Services Engine (ISE), as distributed in Cisco AnyConnect Secure Mobility Client 4.0(64), allows local users to gain privileges via unspecified commands, aka Bug ID CSCut05797.

  • CVE-2015-0754May 29, 2015
    Cisco Systems, Inc.
    Finesse
    risk 0.00cvss —epss 0.02

    Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause a denial of service (CPU and memory consumption) via a crafted XML document, aka Bug ID CSCut95810.

  • CVE-2015-0753May 29, 2015
    Cisco Systems, Inc.
    Unified Web Interaction Manager (WIM)
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) 9.0(2) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu30028.

  • CVE-2015-0752May 29, 2015
    Cisco Systems, Inc.
    Telepresence Video Communication Server
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27635.

  • CVE-2015-0751May 29, 2015
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.02

    Cisco IP Phone 7861, when firmware from Cisco Unified Communications Manager 10.3(1) is used, allows remote attackers to cause a denial of service via crafted packets, aka Bug ID CSCus81800.

  • CVE-2015-0722May 25, 2015
    Cisco Systems, Inc.
    TelePresence T
    risk 0.00cvss —epss 0.02

    The network drivers in Cisco TelePresence T, Cisco TelePresence TE, and Cisco TelePresence TC before 7.3.2 allow remote attackers to cause a denial of service (process restart or device reload) via a flood of crafted IP packets, aka Bug ID CSCuj68952.

  • CVE-2015-0713May 25, 2015
    Cisco Systems, Inc.
    Telepresence Server Software
    risk 0.00cvss —epss 0.03

    The web framework in Cisco TelePresence Advanced Media Gateway Series Software before 1.1(1.40), Cisco TelePresence IP Gateway Series Software, Cisco TelePresence IP VCR Series Software before 3.0(1.27), Cisco TelePresence ISDN Gateway Software before 2.2(1.94), Cisco…

  • CVE-2014-2174May 25, 2015
    Cisco Systems, Inc.
    Telepresence Tc Software
    risk 0.00cvss —epss 0.01

    Cisco TelePresence T, TelePresence TE, and TelePresence TC before 7.1 do not properly implement access control, which allows remote attackers to obtain root privileges by sending packets on the local network and allows physically proximate attackers to obtain root privileges via…

  • CVE-2015-0750May 23, 2015
    Cisco Systems, Inc.
    Hosted Collaboration Solution
    risk 0.00cvss —epss 0.01

    The administrative web interface in Cisco Hosted Collaboration Solution (HCS) 10.6(1) and earlier allows remote authenticated users to execute arbitrary commands via crafted input to unspecified fields, aka Bug ID CSCut02786.

  • CVE-2015-0746May 22, 2015
    Cisco Systems, Inc.
    Secure Access Control Server
    risk 0.00cvss —epss 0.01

    The REST API in Cisco Access Control Server (ACS) 5.5(0.46.2) allows remote attackers to cause a denial of service (API outage) by sending many requests, aka Bug ID CSCut62022.

  • CVE-2015-0742May 21, 2015
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.03

    The Protocol Independent Multicast (PIM) application in Cisco Adaptive Security Appliance (ASA) Software 9.2(0.0), 9.2(0.104), 9.2(3.1), 9.2(3.4), 9.3(1.105), 9.3(2.100), 9.4(0.115), 100.13(0.21), 100.13(20.3), 100.13(21.9), and 100.14(1.1) does not properly implement…

  • CVE-2015-0741May 21, 2015
    Cisco Systems, Inc.
    Hosted Collaboration Solution
    risk 0.00cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(1) and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut04596.

  • CVE-2015-0740May 20, 2015
    Cisco Systems, Inc.
    Unified Intelligence Center
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center 10.6(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826.

  • CVE-2015-0739May 19, 2015
    Cisco Systems, Inc.
    Firesight System Software
    risk 0.00cvss —epss 0.02

    The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938.

  • CVE-2015-0738May 17, 2015
    Cisco Systems, Inc.
    Web Security Appliance
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Web Tracking Report page on Cisco Web Security Appliance (WSA) devices 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified field, aka Bug ID CSCuu16008.

  • CVE-2015-0735May 17, 2015
    Cisco Systems, Inc.
    Unified Customer Voice Portal
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Cisco Unified Customer Voice Portal (CVP) 10.5(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut93970.

  • CVE-2015-0730May 16, 2015
    Cisco Systems, Inc.
    Wide Area Application Services
    risk 0.00cvss —epss 0.01

    The SMB module in Cisco Wide Area Application Services (WAAS) 6.0(1) allows remote attackers to cause a denial of service (module reload) via an invalid field in a Negotiate Protocol request, aka Bug ID CSCuo75645.

  • CVE-2015-0729May 16, 2015
    Cisco Systems, Inc.
    Secure Access Control Server
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server Solution Engine (ACSE) 5.5(0.1) allows remote attackers to inject arbitrary web script or HTML via a file-inclusion attack, aka Bug ID CSCuu11005.

  • CVE-2015-0726May 16, 2015
    Cisco Systems, Inc.
    Wireless Lan Controller Software
    risk 0.00cvss —epss 0.03

    The web administration interface on Cisco Wireless LAN Controller (WLC) devices before 7.0.241, 7.1.x through 7.4.x before 7.4.122, and 7.5.x and 7.6.x before 7.6.120 allows remote authenticated users to cause a denial of service (device crash) via unspecified parameters, aka…

  • CVE-2015-0723May 16, 2015
    Cisco Systems, Inc.
    Wireless Lan Controller Software
    risk 0.00cvss —epss 0.01

    The wireless web-authentication subsystem on Cisco Wireless LAN Controller (WLC) devices 7.5.x and 7.6.x before 7.6.120 allows remote attackers to cause a denial of service (process crash and device restart) via a crafted value, aka Bug ID CSCum03269.

  • CVE-2015-0717May 16, 2015
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.00

    Cisco Unified Communications Manager 10.0(1.10000.12) allows local users to gain privileges via a command string in an unspecified parameter, aka Bug ID CSCut19546.

  • CVE-2015-0736May 16, 2015
    Cisco Systems, Inc.
    Mediasense
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Cisco MediaSense 10.5(1) and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu16728.

  • CVE-2015-0731May 16, 2015
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    The ISDN implementation in Cisco IOS 15.3S allows remote attackers to cause a denial of service (device reload) via malformed Q931 SETUP messages, aka Bug ID CSCut37890.

  • CVE-2015-0734May 15, 2015
    Cisco Systems, Inc.
    Email Security Appliance Firmware
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Email Security Appliance (ESA) 8.5.6-106 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug ID CSCut87743.

  • CVE-2015-0728May 15, 2015
    Cisco Systems, Inc.
    Secure Access Control System
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Cisco Access Control Server (ACS) 5.5(0.1) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuu11002.

  • CVE-2015-0727May 15, 2015
    Cisco Systems, Inc.
    Security Manager
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the HTTP module in Cisco Security Manager (CSM) 4.7(0)SP1(1) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27789.

  • CVE-2015-0724May 15, 2015
    Cisco Systems, Inc.
    Headend Digital Broadband Delivery System
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in dncs 7.0.0.12 in Cisco Headend Digital Broadband Delivery System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a (1) GET or (2) POST request, aka Bug ID CSCur25604.

  • CVE-2015-0634May 15, 2015
    Cisco Systems, Inc.
    Webex Meetings Server
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the administrative interface in Cisco WebEx Meetings Server 2.5 and 2.5.0.997 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuq86310.

  • CVE-2015-0716May 7, 2015
    Cisco Systems, Inc.
    Unity Connection
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in the CUCReports page in Cisco Unity Connection 11.0(0.98000.225) and 11.0(0.98000.332) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut33659.

  • CVE-2015-0715May 7, 2015
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCut33447 and CSCut33608.

  • CVE-2015-0701May 7, 2015
    Cisco Systems, Inc.
    UCS Central Software
    risk 0.00cvss —epss 0.05

    Cisco UCS Central Software before 1.3(1a) allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961.

  • CVE-2015-0714May 2, 2015
    Cisco Systems, Inc.
    Finesse
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse Server 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCut53595.

  • CVE-2015-0712May 1, 2015
    Cisco Systems, Inc.
    Staros
    risk 0.00cvss —epss 0.01

    The session-manager service in Cisco StarOS 12.0, 12.2(300), 14.0, and 14.0(600) on ASR 5000 devices allows remote attackers to cause a denial of service (service reload and packet loss) via malformed HTTP packets, aka Bug ID CSCud14217.

  • CVE-2015-0711Apr 29, 2015
    Cisco Systems, Inc.
    Staros
    risk 0.00cvss —epss 0.02

    The hamgr service in the IPv6 Proxy Mobile (PM) implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial of service (service reload and call-processing outage) via malformed PM packets, aka Bug ID CSCut94711.

  • CVE-2015-0710Apr 29, 2015
    Cisco Systems, Inc.
    iOS Xe
    risk 0.00cvss —epss 0.01

    The Overlay Transport Virtualization (OTV) implementation in Cisco IOS XE 3.10S allows remote attackers to cause a denial of service (device reload) via a series of packets that are considered oversized and trigger improper fragmentation handling, aka Bug IDs CSCup37676 and…

Page 106 of 145