VYPR
← Cisco Systems, Inc.

Vendor CVEs

Cisco Systems, Inc.

All CVEs

6,961 total · sorted by risk
  • CVE-2013-1170Apr 11, 2013
    Cisco Systems, Inc.
    Prime Network Control System
    risk 0.00cvss —epss 0.01

    The Cisco Prime Network Control System (NCS) appliance with software before 1.1.1.24 has a default password for the database user account, which makes it easier for remote attackers to change the configuration or cause a denial of service (service disruption) via unspecified…

  • CVE-2013-1169Apr 11, 2013
    Cisco Systems, Inc.
    Unified Meetingplace Web Conferencing Server
    risk 0.00cvss —epss 0.02

    Cisco Unified MeetingPlace Web Conferencing Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 2, and 8.5 before 8.5MR3 Patch 1, when the Remember Me option is used, does not properly verify cookies, which allows remote attackers to impersonate users via a crafted login…

  • CVE-2013-1168Apr 11, 2013
    Cisco Systems, Inc.
    Unified Meetingplace
    risk 0.00cvss —epss 0.02

    The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote attackers to hijack sessions by leveraging…

  • CVE-2013-1167Apr 11, 2013
    Cisco Systems, Inc.
    iOS Xe
    risk 0.00cvss —epss 0.02

    Cisco IOS XE 3.2 through 3.4 before 3.4.2S, and 3.5, on 1000 series Aggregation Services Routers (ASR), when bridge domain interface (BDI) is enabled, allows remote attackers to cause a denial of service (card reload) via packets that are not properly handled during the…

  • CVE-2013-1166Apr 11, 2013
    Cisco Systems, Inc.
    iOS Xe
    risk 0.00cvss —epss 0.02

    Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR), when VRF-aware NAT and SIP ALG are enabled, allows remote attackers to cause a denial of service (card reload) by sending many SIP packets, aka Bug…

  • CVE-2013-1165Apr 11, 2013
    Cisco Systems, Inc.
    iOS Xe
    risk 0.00cvss —epss 0.02

    Cisco IOS XE 2.x and 3.x before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) allows remote attackers to cause a denial of service (card reload) by sending many crafted L2TP packets, aka Bug ID CSCtz23293.

  • CVE-2013-1164Apr 11, 2013
    Cisco Systems, Inc.
    iOS Xe
    risk 0.00cvss —epss 0.02

    Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows remote attackers to cause a denial of service (card reload) via fragmented IPv6…

  • CVE-2013-1155Apr 11, 2013
    Cisco Systems, Inc.
    Firewall Services Module
    risk 0.00cvss —epss 0.01

    The auth-proxy functionality in Cisco Firewall Services Module (FWSM) software 3.1 and 3.2 before 3.2(20.1), 4.0 before 4.0(15.2), and 4.1 before 4.1(5.1) allows remote attackers to cause a denial of service (device reload) via a crafted URL, aka Bug ID CSCtg02624.

  • CVE-2013-1152Apr 11, 2013
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    Cisco Adaptive Security Appliances (ASA) devices with software 9.0 before 9.0(1.2) allow remote attackers to cause a denial of service (device reload) via a crafted field in a DNS message, aka Bug ID CSCuc80080.

  • CVE-2013-1151Apr 11, 2013
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.01

    Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.31), 8.1 and 8.2 before 8.2(5.38), 8.3 before 8.3(2.37), 8.4 before 8.4(5), 8.5 before 8.5(1.17), 8.6 before 8.6(1.10), and 8.7 before 8.7(1.3) allow remote attackers to cause a…

  • CVE-2013-1150Apr 11, 2013
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    The authentication-proxy implementation on Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.31), 8.1 and 8.2 before 8.2(5.38), 8.3 before 8.3(2.37), 8.4 before 8.4(5.3), 8.5 and 8.6 before 8.6(1.10), 8.7 before 8.7(1.4), 9.0…

  • CVE-2013-1149Apr 11, 2013
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.01

    Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.28), 8.1 and 8.2 before 8.2(5.35), 8.3 before 8.3(2.34), 8.4 before 8.4(4.11), 8.6 before 8.6(1.10), and 8.7 before 8.7(1.3), and Cisco Firewall Services Module (FWSM) software…

  • CVE-2013-1174Apr 5, 2013
    Cisco Systems, Inc.
    Hosted Collaboration Solution
    risk 0.00cvss —epss 0.01

    Cisco Tivoli Business Service Manager (TBSM) in Hosted Collaboration Mediation (HCM) in Cisco Hosted Collaboration Solution allows remote attackers to cause a denial of service (temporary service hang) by sending many TCP packets to certain ports, aka Bug ID CSCue03703.

  • CVE-2013-1171Apr 1, 2013
    Cisco Systems, Inc.
    Connected Grid Network Management System
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the element-list implementation in Cisco Connected Grid Network Management System (CG-NMS) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCue14517, CSCue38914,…

  • CVE-2013-1163Apr 1, 2013
    Cisco Systems, Inc.
    Connected Grid Network Management System
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in the device-management implementation in Cisco Connected Grid Network Management System (CG-NMS) allow remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCue14553 and CSCue38746.

  • CVE-2013-1148Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    The General Responder implementation in the IP Service Level Agreement (SLA) feature in Cisco IOS 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S allows remote attackers to cause a denial of service (device reload) via crafted (1) IPv4…

  • CVE-2013-1147Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    The Protocol Translation (PT) functionality in Cisco IOS 12.3 through 12.4 and 15.0 through 15.3, when one-step port-23 translation or a Telnet-to-PAD ruleset is configured, does not properly validate TCP connection information, which allows remote attackers to cause a denial of…

  • CVE-2013-1146Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    The Smart Install client functionality in Cisco IOS 12.2 and 15.0 through 15.3 on Catalyst switches allows remote attackers to cause a denial of service (device reload) via crafted image list parameters in Smart Install packets, aka Bug ID CSCub55790.

  • CVE-2013-1145Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    Memory leak in Cisco IOS 12.2, 12.4, 15.0, and 15.1, when Zone-Based Policy Firewall SIP application layer gateway inspection is enabled, allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed SIP messages, aka Bug ID CSCtl99174.

  • CVE-2013-1144Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Memory leak in the IKEv1 implementation in Cisco IOS 15.1 allows remote attackers to cause a denial of service (memory consumption) via unspecified (1) IPv4 or (2) IPv6 IKE packets, aka Bug ID CSCth81055.

  • CVE-2013-1143Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S, when MPLS-TE is enabled, allows remote attackers to cause a denial of service (incorrect memory access and device…

  • CVE-2013-1142Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    Race condition in the VRF-aware NAT feature in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 allows remote attackers to cause a denial of service (memory consumption) via IPv4 packets, aka Bug IDs CSCtg47129 and CSCtz96745.

  • CVE-2013-1162Mar 26, 2013
    Cisco Systems, Inc.
    iOS Xr
    risk 0.00cvss —epss 0.01

    The traffic engineering (TE) processing subsystem in Cisco IOS XR allows remote attackers to cause a denial of service (process restart) via crafted TE packets, aka Bug ID CSCue04000.

  • CVE-2013-1161Mar 26, 2013
    Cisco Systems, Inc.
    Jabber
    risk 0.00cvss —epss 0.01

    The XML parser in the Cisco Jabber IM application for Android allows remote authenticated users to cause a denial of service (blocked connection) by leveraging an entry on a Buddy list and sending a crafted XMPP presence update message, aka Bug ID CSCue38383.

  • CVE-2013-1154Mar 7, 2013
    Cisco Systems, Inc.
    200 Series Smart Switches
    risk 0.00cvss —epss 0.02

    The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series Managed Switch 1.2.7.76 and earlier, and Small Business 500 Series Stackable Managed Switch 1.2.7.76 and earlier allow remote attackers to cause a denial of service (SSL/TLS layer…

  • CVE-2013-1153Mar 7, 2013
    Cisco Systems, Inc.
    Prime Infrastructure
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in the web interface in Cisco Prime Infrastructure allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCue84676.

  • CVE-2013-1140Mar 6, 2013
    Cisco Systems, Inc.
    Security Monitoring Analysis And Response System
    risk 0.00cvss —epss 0.01

    The XML parser in Cisco Security Monitoring, Analysis, and Response System (MARS) allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCue55093.

  • CVE-2012-6026Mar 5, 2013
    Cisco Systems, Inc.
    Aironet Access Point Software
    risk 0.00cvss —epss 0.01

    The HTTP Profiler on the Cisco Aironet Access Point with software 15.2 and earlier does not properly manage buffers, which allows remote attackers to cause a denial of service (device reload) via crafted HTTP requests, aka Bug ID CSCuc62460.

  • CVE-2013-1141Feb 28, 2013
    Cisco Systems, Inc.
    Wireless Lan Controller Software
    risk 0.00cvss —epss 0.01

    The mDNS snooping functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.4.1.54 and earlier does not properly manage buffers, which allows remote authenticated users to cause a denial of service (device reload) via crafted mDNS packets, aka Bug ID…

  • CVE-2013-1124Feb 28, 2013
    Cisco Systems, Inc.
    Network Admission Control
    risk 0.00cvss —epss 0.01

    The Cisco Network Admission Control (NAC) agent on Mac OS X does not verify the X.509 certificate of an Identity Services Engine (ISE) server during an SSL session, which allows man-in-the-middle attackers to spoof ISE servers via an arbitrary certificate, aka Bug ID CSCub24309.

  • CVE-2013-1137Feb 27, 2013
    Cisco Systems, Inc.
    Unified Presence Server
    risk 0.00cvss —epss 0.02

    Cisco Unified Presence Server (CUPS) 8.6, 9.0, and 9.1 before 9.1.1 allows remote attackers to cause a denial of service (CPU consumption) via crafted packets to the SIP TCP port, aka Bug ID CSCua89930.

  • CVE-2013-1135Feb 27, 2013
    Cisco Systems, Inc.
    Prime Central For Hosted Collaboration Solution Assurance
    risk 0.00cvss —epss 0.01

    Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.0 allows remote attackers to cause a denial of service (CPU consumption and monitoring outage) via malformed TLS messages to TCP port (1) 9043 or (2) 9443, aka Bug ID CSCuc07155.

  • CVE-2013-1134Feb 27, 2013
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.01

    The Location Bandwidth Manager (LBM) Intracluster-communication feature in Cisco Unified Communications Manager (CUCM) 9.x before 9.1(1) does not require authentication from the remote LBM Hub node, which allows remote attackers to conduct cache-poisoning attacks against…

  • CVE-2013-1133Feb 27, 2013
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.01

    Cisco Unified Communications Manager (CUCM) 8.6 before 8.6(2a)su2, 8.6 BE3k before 8.6(4) BE3k, and 9.x before 9.0(1) allows remote attackers to cause a denial of service (CPU consumption and GUI and voice outages) via malformed packets to unused UDP ports, aka Bug ID CSCtx43337.

  • CVE-2013-1139Feb 27, 2013
    Cisco Systems, Inc.
    Cloud Portal
    risk 0.00cvss —epss 0.01

    The nsAPI interface in Cisco Cloud Portal 9.1 SP1 and SP2, and 9.3 through 9.3.2, does not properly check privileges, which allows remote authenticated users to obtain sensitive information via a crafted URL, aka Bug ID CSCud81134.

  • CVE-2013-1138Feb 25, 2013
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.01

    The NAT process on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (connections-table memory consumption) via crafted packets, aka Bug ID CSCue46386.

  • CVE-2013-1129Feb 19, 2013
    Cisco Systems, Inc.
    Unity Connection
    risk 0.00cvss —epss 0.01

    Memory leak in Cisco Unity Connection 9.x allows remote attackers to cause a denial of service (memory consumption and process crash) by sending many TCP requests, aka Bug ID CSCud59736.

  • CVE-2013-1125Feb 19, 2013
    Cisco Systems, Inc.
    Application Networking Manager
    risk 0.00cvss —epss 0.00

    The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified…

  • CVE-2013-1128Feb 15, 2013
    Cisco Systems, Inc.
    Unified Meetingplace
    risk 0.00cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in the server in Cisco Unified MeetingPlace before 7.1(2.2000) allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuc64903. NOTE: some of these details are…

  • CVE-2013-1123Feb 15, 2013
    Cisco Systems, Inc.
    Unified Meetingplace
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the server in Cisco Unified MeetingPlace 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuc65411 and CSCue18706.

  • CVE-2013-1131Feb 13, 2013
    Cisco Systems, Inc.
    Small Business Wireless Access Ppoints
    risk 0.00cvss —epss 0.01

    Cisco Small Business Wireless Access Points WAP200, WAP2000, WAP200E, and WET200 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SSID that is not properly handled during a site survey, aka Bug IDs CSCua86182,…

  • CVE-2013-1122Feb 13, 2013
    Cisco Systems, Inc.
    Nexus 7000
    risk 0.00cvss —epss 0.02

    Cisco NX-OS on the Nexus 7000, when a certain Overlay Transport Virtualization (OTV) configuration is used, allows remote attackers to cause a denial of service (M1-Series module reload) via crafted packets, aka Bug ID CSCud15673.

  • CVE-2013-1111Feb 13, 2013
    Cisco Systems, Inc.
    Ata 187 Analog Telephone Adaptor
    risk 0.00cvss —epss 0.01

    The Cisco ATA 187 Analog Telephone Adaptor with firmware 9.2.1.0 and 9.2.3.1 before ES build 4 does not properly implement access control, which allows remote attackers to execute operating-system commands via vectors involving a session on TCP port 7870, aka Bug ID CSCtz67038.

  • CVE-2013-1100Feb 13, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows remote attackers to cause a denial of service (device crash) via crafted packets on TCP port (1) 80 or (2) 443, aka Bug ID CSCuc53853.

  • CVE-2013-1107Feb 6, 2013
    Cisco Systems, Inc.
    Webex Social
    risk 0.00cvss —epss 0.01

    The search function in Cisco Webex Social (formerly Cisco Quad) allows remote authenticated users to read files via unspecified parameters, aka Bug ID CSCud40235.

  • CVE-2013-1113Jan 31, 2013
    Cisco Systems, Inc.
    Unified Communications Domain Manager
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager allows remote attackers to inject arbitrary web script or HTML via a crafted parameter value, aka Bug ID CSCue21042.

  • CVE-2013-1112Jan 31, 2013
    Cisco Systems, Inc.
    Carrier Routing System
    risk 0.00cvss —epss 0.02

    Cisco Carrier Routing System (CRS) allows remote attackers to cause a denial of service (packet loss) via short malformed packets that trigger inefficient processing, aka Bug ID CSCud79136.

  • CVE-2012-6029Jan 31, 2013
    Cisco Systems, Inc.
    Nac Appliance
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the web-authentication function on the Cisco NAC Appliance 4.9.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cm or (2) uri parameters to (a) perfigo_weblogin.jsp, or the (3) cm, (4)…

  • CVE-2013-1105Jan 24, 2013
    Cisco Systems, Inc.
    Wireless Lan Controller Software
    risk 0.00cvss —epss 0.03

    Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow remote authenticated users to bypass wireless-management settings and read or modify the device configuration via an SNMP request, aka Bug…

  • CVE-2013-1104Jan 24, 2013
    Cisco Systems, Inc.
    Wireless Lan Controller Software
    risk 0.00cvss —epss 0.04

    The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636.

Page 119 of 140