VYPR
← Cisco Systems, Inc.

Vendor CVEs

Cisco Systems, Inc.

All CVEs

7,230 total · sorted by risk
  • CVE-2013-1180Apr 25, 2013
    Cisco Systems, Inc.
    Mds 9000
    risk 0.00cvss —epss 0.03

    Buffer overflow in the SNMP implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(5) and 6.x before 6.1(1) and MDS 9000 devices 4.x and 5.x before 5.2(5) allows remote authenticated users to execute arbitrary code via a crafted SNMP request, aka Bug ID…

  • CVE-2013-1179Apr 25, 2013
    Cisco Systems, Inc.
    Mds 9000
    risk 0.00cvss —epss 0.03

    Multiple buffer overflows in the (1) SNMP and (2) License Manager implementations in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(5) and 6.x before 6.1(1) and MDS 9000 devices 4.x and 5.x before 5.2(5) allow remote authenticated users to execute arbitrary code via a…

  • CVE-2013-1178Apr 25, 2013
    Cisco Systems, Inc.
    Mds 9000
    risk 0.00cvss —epss 0.01

    Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x before 6.1(1), Nexus 5000 and 5500 devices 4.x and 5.x before 5.1(3)N1(1), Nexus 4000 devices before 4.1(2)E1(1h), Nexus 3000…

  • CVE-2013-1217Apr 24, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    The generic input/output control implementation in Cisco IOS does not properly manage buffers, which allows remote authenticated users to cause a denial of service (device reload) by sending many SNMP requests at the same time, aka Bug ID CSCub41105.

  • CVE-2013-1214Apr 24, 2013
    Cisco Systems, Inc.
    Unified Contact Center Express
    risk 0.00cvss —epss 0.01

    The scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly manage privileges for anonymous logins, which allows remote attackers to read arbitrary scripts by visiting the scripts repository directory, aka Bug ID CSCuf77546.

  • CVE-2013-1195Apr 24, 2013
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.01

    The time-based ACL implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does not properly handle periodic statements for the time-range command, which allows remote attackers to bypass intended access restrictions by…

  • CVE-2013-1199Apr 18, 2013
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.01

    Race condition in the CIFS implementation in the rewriter module in the Clientless SSL VPN component on Cisco Adaptive Security Appliances (ASA) devices allows remote authenticated users to cause a denial of service (device reload) by accessing resources within multiple…

  • CVE-2013-1194Apr 18, 2013
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.01

    The ISAKMP implementation on Cisco Adaptive Security Appliances (ASA) devices generates different responses for IKE aggressive-mode messages depending on whether invalid VPN groups are specified, which allows remote attackers to enumerate groups via a series of messages, aka Bug…

  • CVE-2013-1177Apr 18, 2013
    Cisco Systems, Inc.
    Network Admission Control Manager And Server System Software
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095.

  • CVE-2013-1176Apr 18, 2013
    Cisco Systems, Inc.
    Telepresence Mcu Mse 8510
    risk 0.00cvss —epss 0.01

    The DSP card on Cisco TelePresence MCU 4500 and 4501 devices before 4.3(2.30), TelePresence MCU MSE 8510 devices before 4.3(2.30), and TelePresence Server before 2.3(1.55) does not properly validate H.264 data, which allows remote attackers to cause a denial of service (device…

  • CVE-2013-1197Apr 16, 2013
    Cisco Systems, Inc.
    Unified Presence Server
    risk 0.00cvss —epss 0.01

    The XML parser in the server in Cisco Unified Presence (CUP) allows remote authenticated users to cause a denial of service (jabberd daemon crash) via crafted XML content in an XMPP message, aka Bug ID CSCue13912.

  • CVE-2013-1193Apr 16, 2013
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.01

    The Secure Shell (SSH) implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does not properly terminate sessions, which allows remote attackers to cause a denial of service (SSH service outage) by repeatedly…

  • CVE-2013-1187Apr 16, 2013
    Cisco Systems, Inc.
    Jabber Extensible Communications Platform
    risk 0.00cvss —epss 0.01

    The Connection Manager in Cisco Jabber Extensible Communications Platform (aka Jabber XCP) does not properly validate login data, which allows remote attackers to cause a denial of service (service crash) by sending a series of malformed login packets, aka Bug ID CSCts76762.

  • CVE-2012-5415Apr 16, 2013
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.01

    Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or device reload) by establishing multiple connections, leading to improper handling of hash lookups for secondary flows, aka Bug IDs…

  • CVE-2013-2779Apr 11, 2013
    Cisco Systems, Inc.
    iOS Xe
    risk 0.00cvss —epss 0.02

    Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows remote attackers to cause a denial of service (card reload)…

  • CVE-2013-1189Apr 11, 2013
    Cisco Systems, Inc.
    Ubr10012
    risk 0.00cvss —epss 0.01

    Cisco Universal Broadband (aka uBR) 10000 series routers, when an IPv4/IPv6 dual-stack modem is used, allow remote attackers to cause a denial of service (routing-engine reload) via unspecified changes to IP address assignments, aka Bug ID CSCue15313.

  • CVE-2013-1173Apr 11, 2013
    Cisco Systems, Inc.
    Anyconnect Secure Mobility Client
    risk 0.00cvss —epss 0.00

    Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14143.

  • CVE-2013-1172Apr 11, 2013
    Cisco Systems, Inc.
    Anyconnect Secure Mobility Client
    risk 0.00cvss —epss 0.00

    The Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) does not properly verify files, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14153.

  • CVE-2013-1170Apr 11, 2013
    Cisco Systems, Inc.
    Prime Network Control System
    risk 0.00cvss —epss 0.01

    The Cisco Prime Network Control System (NCS) appliance with software before 1.1.1.24 has a default password for the database user account, which makes it easier for remote attackers to change the configuration or cause a denial of service (service disruption) via unspecified…

  • CVE-2013-1169Apr 11, 2013
    Cisco Systems, Inc.
    Unified Meetingplace Web Conferencing Server
    risk 0.00cvss —epss 0.02

    Cisco Unified MeetingPlace Web Conferencing Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 2, and 8.5 before 8.5MR3 Patch 1, when the Remember Me option is used, does not properly verify cookies, which allows remote attackers to impersonate users via a crafted login…

  • CVE-2013-1168Apr 11, 2013
    Cisco Systems, Inc.
    Unified Meetingplace
    risk 0.00cvss —epss 0.02

    The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 does not invalidate a session upon a logout action, which makes it easier for remote attackers to hijack sessions by leveraging…

  • CVE-2013-1167Apr 11, 2013
    Cisco Systems, Inc.
    iOS Xe
    risk 0.00cvss —epss 0.02

    Cisco IOS XE 3.2 through 3.4 before 3.4.2S, and 3.5, on 1000 series Aggregation Services Routers (ASR), when bridge domain interface (BDI) is enabled, allows remote attackers to cause a denial of service (card reload) via packets that are not properly handled during the…

  • CVE-2013-1166Apr 11, 2013
    Cisco Systems, Inc.
    iOS Xe
    risk 0.00cvss —epss 0.02

    Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR), when VRF-aware NAT and SIP ALG are enabled, allows remote attackers to cause a denial of service (card reload) by sending many SIP packets, aka Bug…

  • CVE-2013-1165Apr 11, 2013
    Cisco Systems, Inc.
    iOS Xe
    risk 0.00cvss —epss 0.02

    Cisco IOS XE 2.x and 3.x before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) allows remote attackers to cause a denial of service (card reload) by sending many crafted L2TP packets, aka Bug ID CSCtz23293.

  • CVE-2013-1164Apr 11, 2013
    Cisco Systems, Inc.
    iOS Xe
    risk 0.00cvss —epss 0.02

    Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows remote attackers to cause a denial of service (card reload) via fragmented IPv6…

  • CVE-2013-1155Apr 11, 2013
    Cisco Systems, Inc.
    Firewall Services Module
    risk 0.00cvss —epss 0.01

    The auth-proxy functionality in Cisco Firewall Services Module (FWSM) software 3.1 and 3.2 before 3.2(20.1), 4.0 before 4.0(15.2), and 4.1 before 4.1(5.1) allows remote attackers to cause a denial of service (device reload) via a crafted URL, aka Bug ID CSCtg02624.

  • CVE-2013-1152Apr 11, 2013
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.01

    Cisco Adaptive Security Appliances (ASA) devices with software 9.0 before 9.0(1.2) allow remote attackers to cause a denial of service (device reload) via a crafted field in a DNS message, aka Bug ID CSCuc80080.

  • CVE-2013-1151Apr 11, 2013
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.01

    Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.31), 8.1 and 8.2 before 8.2(5.38), 8.3 before 8.3(2.37), 8.4 before 8.4(5), 8.5 before 8.5(1.17), 8.6 before 8.6(1.10), and 8.7 before 8.7(1.3) allow remote attackers to cause a…

  • CVE-2013-1150Apr 11, 2013
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    The authentication-proxy implementation on Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.31), 8.1 and 8.2 before 8.2(5.38), 8.3 before 8.3(2.37), 8.4 before 8.4(5.3), 8.5 and 8.6 before 8.6(1.10), 8.7 before 8.7(1.4), 9.0…

  • CVE-2013-1149Apr 11, 2013
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.01

    Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.28), 8.1 and 8.2 before 8.2(5.35), 8.3 before 8.3(2.34), 8.4 before 8.4(4.11), 8.6 before 8.6(1.10), and 8.7 before 8.7(1.3), and Cisco Firewall Services Module (FWSM) software…

  • CVE-2013-1174Apr 5, 2013
    Cisco Systems, Inc.
    Hosted Collaboration Solution
    risk 0.00cvss —epss 0.01

    Cisco Tivoli Business Service Manager (TBSM) in Hosted Collaboration Mediation (HCM) in Cisco Hosted Collaboration Solution allows remote attackers to cause a denial of service (temporary service hang) by sending many TCP packets to certain ports, aka Bug ID CSCue03703.

  • CVE-2013-1171Apr 1, 2013
    Cisco Systems, Inc.
    Connected Grid Network Management System
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the element-list implementation in Cisco Connected Grid Network Management System (CG-NMS) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCue14517, CSCue38914,…

  • CVE-2013-1163Apr 1, 2013
    Cisco Systems, Inc.
    Connected Grid Network Management System
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in the device-management implementation in Cisco Connected Grid Network Management System (CG-NMS) allow remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCue14553 and CSCue38746.

  • CVE-2013-1148Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    The General Responder implementation in the IP Service Level Agreement (SLA) feature in Cisco IOS 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S allows remote attackers to cause a denial of service (device reload) via crafted (1) IPv4…

  • CVE-2013-1147Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    The Protocol Translation (PT) functionality in Cisco IOS 12.3 through 12.4 and 15.0 through 15.3, when one-step port-23 translation or a Telnet-to-PAD ruleset is configured, does not properly validate TCP connection information, which allows remote attackers to cause a denial of…

  • CVE-2013-1146Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    The Smart Install client functionality in Cisco IOS 12.2 and 15.0 through 15.3 on Catalyst switches allows remote attackers to cause a denial of service (device reload) via crafted image list parameters in Smart Install packets, aka Bug ID CSCub55790.

  • CVE-2013-1145Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    Memory leak in Cisco IOS 12.2, 12.4, 15.0, and 15.1, when Zone-Based Policy Firewall SIP application layer gateway inspection is enabled, allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed SIP messages, aka Bug ID CSCtl99174.

  • CVE-2013-1144Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Memory leak in the IKEv1 implementation in Cisco IOS 15.1 allows remote attackers to cause a denial of service (memory consumption) via unspecified (1) IPv4 or (2) IPv6 IKE packets, aka Bug ID CSCth81055.

  • CVE-2013-1143Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S, when MPLS-TE is enabled, allows remote attackers to cause a denial of service (incorrect memory access and device…

  • CVE-2013-1142Mar 28, 2013
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    Race condition in the VRF-aware NAT feature in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 allows remote attackers to cause a denial of service (memory consumption) via IPv4 packets, aka Bug IDs CSCtg47129 and CSCtz96745.

  • CVE-2013-1162Mar 26, 2013
    Cisco Systems, Inc.
    iOS Xr
    risk 0.00cvss —epss 0.01

    The traffic engineering (TE) processing subsystem in Cisco IOS XR allows remote attackers to cause a denial of service (process restart) via crafted TE packets, aka Bug ID CSCue04000.

  • CVE-2013-1161Mar 26, 2013
    Cisco Systems, Inc.
    Jabber
    risk 0.00cvss —epss 0.01

    The XML parser in the Cisco Jabber IM application for Android allows remote authenticated users to cause a denial of service (blocked connection) by leveraging an entry on a Buddy list and sending a crafted XMPP presence update message, aka Bug ID CSCue38383.

  • CVE-2013-1154Mar 7, 2013
    Cisco Systems, Inc.
    200 Series Smart Switches
    risk 0.00cvss —epss 0.02

    The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series Managed Switch 1.2.7.76 and earlier, and Small Business 500 Series Stackable Managed Switch 1.2.7.76 and earlier allow remote attackers to cause a denial of service (SSL/TLS layer…

  • CVE-2013-1153Mar 7, 2013
    Cisco Systems, Inc.
    Prime Infrastructure
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in the web interface in Cisco Prime Infrastructure allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCue84676.

  • CVE-2013-1140Mar 6, 2013
    Cisco Systems, Inc.
    Security Monitoring Analysis And Response System
    risk 0.00cvss —epss 0.01

    The XML parser in Cisco Security Monitoring, Analysis, and Response System (MARS) allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCue55093.

  • CVE-2012-6026Mar 5, 2013
    Cisco Systems, Inc.
    Aironet Access Point Software
    risk 0.00cvss —epss 0.01

    The HTTP Profiler on the Cisco Aironet Access Point with software 15.2 and earlier does not properly manage buffers, which allows remote attackers to cause a denial of service (device reload) via crafted HTTP requests, aka Bug ID CSCuc62460.

  • CVE-2013-1141Feb 28, 2013
    Cisco Systems, Inc.
    Wireless Lan Controller Software
    risk 0.00cvss —epss 0.01

    The mDNS snooping functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.4.1.54 and earlier does not properly manage buffers, which allows remote authenticated users to cause a denial of service (device reload) via crafted mDNS packets, aka Bug ID…

  • CVE-2013-1124Feb 28, 2013
    Cisco Systems, Inc.
    Network Admission Control
    risk 0.00cvss —epss 0.01

    The Cisco Network Admission Control (NAC) agent on Mac OS X does not verify the X.509 certificate of an Identity Services Engine (ISE) server during an SSL session, which allows man-in-the-middle attackers to spoof ISE servers via an arbitrary certificate, aka Bug ID CSCub24309.

  • CVE-2013-1137Feb 27, 2013
    Cisco Systems, Inc.
    Unified Presence Server
    risk 0.00cvss —epss 0.02

    Cisco Unified Presence Server (CUPS) 8.6, 9.0, and 9.1 before 9.1.1 allows remote attackers to cause a denial of service (CPU consumption) via crafted packets to the SIP TCP port, aka Bug ID CSCua89930.

  • CVE-2013-1135Feb 27, 2013
    Cisco Systems, Inc.
    Prime Central For Hosted Collaboration Solution Assurance
    risk 0.00cvss —epss 0.01

    Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.0 allows remote attackers to cause a denial of service (CPU consumption and monitoring outage) via malformed TLS messages to TCP port (1) 9043 or (2) 9443, aka Bug ID CSCuc07155.

Page 124 of 145