VYPR
← Cisco Systems, Inc.

Vendor CVEs

Cisco Systems, Inc.

All CVEs

6,961 total · sorted by risk
  • CVE-2014-3274May 26, 2014
    Cisco Systems, Inc.
    Telepresence System Software
    risk 0.00cvss —epss 0.01

    Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified…

  • CVE-2014-3272May 26, 2014
    Cisco Systems, Inc.
    Tidal Enterprise Scheduler
    risk 0.00cvss —epss 0.00

    The Agent in Cisco Tidal Enterprise Scheduler (TES) 6.1 and earlier allows local users to gain privileges via crafted Tidal Job Buffers (TJB) parameters, aka Bug ID CSCuo33074.

  • CVE-2014-3267May 26, 2014
    Cisco Systems, Inc.
    Security Manager
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make unspecified changes, aka Bug ID CSCuo46427.

  • CVE-2014-3266May 26, 2014
    Cisco Systems, Inc.
    Security Manager
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun65189.

  • CVE-2014-2196May 26, 2014
    Cisco Systems, Inc.
    Wide Area Application Services
    risk 0.00cvss —epss 0.02

    Cisco Wide Area Application Services (WAAS) 5.1.1 before 5.1.1e, when SharePoint prefetch optimization is enabled, allows remote SharePoint servers to execute arbitrary code via a malformed response, aka Bug ID CSCue18479.

  • CVE-2014-3284May 25, 2014
    Cisco Systems, Inc.
    iOS Xe
    risk 0.00cvss —epss 0.01

    Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed PPPoE packet, aka Bug ID CSCuo55180.

  • CVE-2014-3273May 20, 2014
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    The LLDP implementation in Cisco IOS allows remote attackers to cause a denial of service (device reload) via a malformed packet, aka Bug ID CSCum96282.

  • CVE-2014-3271May 20, 2014
    Cisco Systems, Inc.
    iOS Xr
    risk 0.00cvss —epss 0.02

    The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug IDs CSCum85558, CSCum20949, CSCul61849, and CSCul71149.

  • CVE-2014-3270May 20, 2014
    Cisco Systems, Inc.
    iOS Xr
    risk 0.00cvss —epss 0.02

    The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (process hang) via a malformed packet, aka Bug ID CSCul80924.

  • CVE-2014-3269May 20, 2014
    Cisco Systems, Inc.
    iOS Xe
    risk 0.00cvss —epss 0.01

    The SNMP module in Cisco IOS XE 3.5E allows remote authenticated users to cause a denial of service (device reload) by polling frequently, aka Bug ID CSCug65204.

  • CVE-2014-3268May 20, 2014
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    Cisco IOS 15.2(4)M4 on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service (input-queue consumption and traffic-processing outage) via crafted RTCP packets, aka Bug ID CSCuj72215.

  • CVE-2014-3265May 20, 2014
    Cisco Systems, Inc.
    Security Manager
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Auto Update Server (AUS) web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuo06900.

  • CVE-2014-3264May 20, 2014
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.01

    Cisco Adaptive Security Appliance (ASA) Software 9.1(.5) and earlier allows remote authenticated users to cause a denial of service (device reload) via crafted attributes in a RADIUS packet, aka Bug ID CSCun69561.

  • CVE-2014-2199May 20, 2014
    Cisco Systems, Inc.
    Webex Meeting Center
    risk 0.00cvss —epss 0.02

    meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote…

  • CVE-2014-2195May 20, 2014
    Cisco Systems, Inc.
    Content Security Management Appliance
    risk 0.00cvss —epss 0.01

    Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is enabled, does not properly handle group names, which allows remote attackers to gain role privileges by leveraging group-name similarity, aka Bug ID…

  • CVE-2014-2194May 20, 2014
    Cisco Systems, Inc.
    Unified Web And E Mail Interaction Manager
    risk 0.00cvss —epss 0.01

    system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity.

  • CVE-2014-2193May 20, 2014
    Cisco Systems, Inc.
    Unified Web And E Mail Interaction Manager
    risk 0.00cvss —epss 0.01

    Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid identifier, aka Bug ID CSCuj43084.

  • CVE-2014-2192May 20, 2014
    Cisco Systems, Inc.
    Unified Web And E Mail Interaction Manager
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj43033.

  • CVE-2013-6975May 20, 2014
    Cisco Systems, Inc.
    Nx OS
    risk 0.00cvss —epss 0.01

    Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.2(2a) and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217.

  • CVE-2014-3263May 16, 2014
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    The ScanSafe module in Cisco IOS 15.3(3)M allows remote attackers to cause a denial of service (device reload) via HTTPS packets that require tower processing, aka Bug ID CSCum97038.

  • CVE-2014-3262May 16, 2014
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.3(3)S and earlier and IOS XE does not properly validate parameters in ITR control messages, which allows remote attackers to cause a denial of service (CEF outage and packet drops) via malformed messages,…

  • CVE-2014-2136May 8, 2014
    Cisco Systems, Inc.
    Webex Recording Format Player
    risk 0.00cvss —epss 0.04

    Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file, aka…

  • CVE-2014-2135May 8, 2014
    Cisco Systems, Inc.
    Webex Recording Format Player
    risk 0.00cvss —epss 0.04

    Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file, aka…

  • CVE-2014-2134May 8, 2014
    Cisco Systems, Inc.
    Webex Recording Format Player
    risk 0.00cvss —epss 0.04

    Heap-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio…

  • CVE-2014-2133May 8, 2014
    Cisco Systems, Inc.
    Webex Recording Format Player
    risk 0.00cvss —epss 0.03

    Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file that…

  • CVE-2014-2132May 8, 2014
    Cisco Systems, Inc.
    Webex Recording Format Player
    risk 0.00cvss —epss 0.02

    Cisco WebEx Recording Format (WRF) player and Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allow remote attackers to cause a denial of service (application crash) via a crafted (1) .wrf or (2) .arf file that triggers a…

  • CVE-2014-2191May 7, 2014
    Cisco Systems, Inc.
    Broadcast Access Center for Telco and Wireless
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the web framework in Cisco Broadcast Access Center for Telco and Wireless (aka BAC-TW) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun91113.

  • CVE-2014-2190May 7, 2014
    Cisco Systems, Inc.
    Broadcast Access Center for Telco and Wireless
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Broadcast Access Center for Telco and Wireless (aka BAC-TW) allows remote attackers to hijack the authentication of arbitrary users for requests that make BAC-TW changes, aka Bug IDs CSCuo23804 and…

  • CVE-2014-2181May 7, 2014
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    Cisco Adaptive Security Appliance (ASA) Software allows remote authenticated users to read files by sending a crafted URL to the HTTP server, as demonstrated by reading the running configuration, aka Bug ID CSCun78551.

  • CVE-2014-0685May 7, 2014
    Cisco Systems, Inc.
    Cisco Nexus 1000v Intercloud
    risk 0.00cvss —epss 0.01

    Cisco Nexus 1000V InterCloud 5.2(1)IC1(1.2) and earlier for VMware allows remote attackers to bypass ACL deny statements via crafted (1) IGMPv2 or (2) IGMPv3 packets, aka Bug ID CSCug61691.

  • CVE-2014-0684May 7, 2014
    Cisco Systems, Inc.
    Nexus 7000
    risk 0.00cvss —epss 0.00

    Cisco NX-OS 6.2(2) on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136.

  • CVE-2014-2175May 2, 2014
    Cisco Systems, Inc.
    Telepresence Tc Software
    risk 0.00cvss —epss 0.01

    Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allow remote attackers to cause a denial of service (memory consumption) via crafted H.225 packets, aka Bug ID CSCtq78849.

  • CVE-2014-2173May 2, 2014
    Cisco Systems, Inc.
    Telepresence Tc Software
    risk 0.00cvss —epss 0.00

    Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 do not properly restrict access to the serial port, which allows local users to gain privileges via unspecified commands, aka Bug ID CSCub67692.

  • CVE-2014-2172May 2, 2014
    Cisco Systems, Inc.
    Telepresence Tc Software
    risk 0.00cvss —epss 0.00

    Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows local users to gain privileges by leveraging improper handling of the u-boot compiler flag for internal executable files, aka Bug ID CSCub67693.

  • CVE-2014-2171May 2, 2014
    Cisco Systems, Inc.
    Telepresence Tc Software
    risk 0.00cvss —epss 0.04

    Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets, aka Bug ID CSCud81796.

  • CVE-2014-2170May 2, 2014
    Cisco Systems, Inc.
    Telepresence Tc Software
    risk 0.00cvss —epss 0.02

    Cisco TelePresence TC Software 4.x and 5.x before 5.1.7 and 6.x before 6.0.1 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to tshell (aka tcsh) scripts, aka Bug ID CSCue60202.

  • CVE-2014-2169May 2, 2014
    Cisco Systems, Inc.
    Telepresence Tc Software
    risk 0.00cvss —epss 0.02

    Cisco TelePresence TC Software 4.x through 6.x before 6.2.0 and TE Software 4.x and 6.0 allow remote authenticated users to execute arbitrary commands by using the commands as arguments to internal system scripts, aka Bug ID CSCue60211.

  • CVE-2014-2168May 2, 2014
    Cisco Systems, Inc.
    Telepresence Tc Software
    risk 0.00cvss —epss 0.03

    Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to execute arbitrary code via crafted DNS response packets, aka Bug ID CSCty44804.

  • CVE-2014-2167May 2, 2014
    Cisco Systems, Inc.
    Telepresence Tc Software
    risk 0.00cvss —epss 0.01

    The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCua86589.

  • CVE-2014-2166May 2, 2014
    Cisco Systems, Inc.
    Telepresence Tc Software
    risk 0.00cvss —epss 0.01

    The SIP implementation in Cisco TelePresence TC Software 4.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCto70562.

  • CVE-2014-2165May 2, 2014
    Cisco Systems, Inc.
    Telepresence Tc Software
    risk 0.00cvss —epss 0.01

    The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCtq72699.

  • CVE-2014-2164May 2, 2014
    Cisco Systems, Inc.
    Telepresence Tc Software
    risk 0.00cvss —epss 0.01

    The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCuj94651.

  • CVE-2014-2163May 2, 2014
    Cisco Systems, Inc.
    Telepresence Tc Software
    risk 0.00cvss —epss 0.01

    The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCua64961.

  • CVE-2014-2162May 2, 2014
    Cisco Systems, Inc.
    Telepresence Tc Software
    risk 0.00cvss —epss 0.01

    The SIP implementation in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCud29566.

  • CVE-2014-2161May 2, 2014
    Cisco Systems, Inc.
    Telepresence System Software
    risk 0.00cvss —epss 0.02

    The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45731.

  • CVE-2014-2160May 2, 2014
    Cisco Systems, Inc.
    Telepresence System Software
    risk 0.00cvss —epss 0.02

    The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCty45745.

  • CVE-2014-2159May 2, 2014
    Cisco Systems, Inc.
    Telepresence System Software
    risk 0.00cvss —epss 0.02

    The H.225 subsystem in Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted packets, aka Bug ID CSCtq78722.

  • CVE-2014-2158May 2, 2014
    Cisco Systems, Inc.
    Telepresence System Software
    risk 0.00cvss —epss 0.01

    Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45720.

  • CVE-2014-2157May 2, 2014
    Cisco Systems, Inc.
    Telepresence System Software
    risk 0.00cvss —epss 0.01

    Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45733.

  • CVE-2014-2156May 2, 2014
    Cisco Systems, Inc.
    Telepresence System Software
    risk 0.00cvss —epss 0.01

    Cisco TelePresence System MXP Series Software before F9.3.1 allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCty45739.

Page 108 of 140