VYPR
← Cisco Systems, Inc.

Vendor CVEs

Cisco Systems, Inc.

All CVEs

7,231 total · sorted by risk
  • CVE-2010-2837Aug 26, 2010
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.01

    The SIPStationInit implementation in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.1SU before 6.1(5)SU1, 7.0SU before 7.0(2a)SU3, 7.1SU before 7.1(3b)SU2, 7.1 before 7.1(5), and 8.0 before 8.0(1) allows remote attackers to cause a denial of service…

  • CVE-2010-2826Aug 17, 2010
    Cisco Systems, Inc.
    Wireless Control System
    risk 0.00cvss —epss 0.01

    SQL injection vulnerability in Cisco Wireless Control System (WCS) 6.0.x before 6.0.196.0 allows remote authenticated users to execute arbitrary SQL commands via vectors related to the ORDER BY clause of the Client List screens, aka Bug ID CSCtf37019.

  • CVE-2010-2825Aug 17, 2010
    Cisco Systems, Inc.
    Application Control Engine (ACE) 4710 Appliance
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the SIP inspection feature on the Cisco Application Control Engine (ACE) Module with software A2(1.x) before A2(1.6), A2(2.x) before A2(2.3), and A2(3.x) before A2(3.1) for Catalyst 6500 series switches and 7600 series routers, and the Cisco…

  • CVE-2010-2824Aug 17, 2010
    Cisco Systems, Inc.
    Ace Module
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability on the Cisco Application Control Engine (ACE) Module with software A2(1.x) before A2(1.6), A2(2.x) before A2(2.3), and A2(3.x) before A2(3.1) for Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service…

  • CVE-2010-2823Aug 17, 2010
    Cisco Systems, Inc.
    Ace 4710
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the deep packet inspection feature on the Cisco Application Control Engine (ACE) 4710 appliance with software before A3(2.6) allows remote attackers to cause a denial of service (device reload) via crafted HTTP packets, related to HTTP, RTSP, and SIP…

  • CVE-2010-2822Aug 17, 2010
    Cisco Systems, Inc.
    Application Control Engine (ACE) 4710 Appliance
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the RTSP inspection feature on the Cisco Application Control Engine (ACE) Module with software before A2(3.2) for Catalyst 6500 series switches and 7600 series routers, and the Cisco Application Control Engine (ACE) 4710 appliance with software…

  • CVE-2010-2827Aug 16, 2010
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Cisco IOS 15.1(2)T allows remote attackers to cause a denial of service (resource consumption and TCP outage) via spoofed TCP packets, related to embryonic TCP connections that remain in the SYN_RCVD or SYN_SENT state, aka Bug ID CSCti18193.

  • CVE-2010-2988Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCtf35333.

  • CVE-2010-2987Aug 10, 2010
    Cisco Systems, Inc.
    Wireless Control System
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Wireless Control System (WCS) 7.x before 7.0.164, as used in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka…

  • CVE-2010-2986Aug 10, 2010
    Cisco Systems, Inc.
    Wireless Control System
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in webacs/QuickSearchAction.do in the search feature in the web interface in Cisco Wireless Control System (WCS) before 6.0(194.0) and 7.x before 7.0.164 allows remote attackers to inject arbitrary web script or HTML via the searchText…

  • CVE-2010-2984Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.03

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 4404 series controllers does not properly implement the WEBAUTH_REQD state, which allows remote attackers to bypass intended access restrictions via WLAN traffic, aka Bug ID CSCtb75305.

  • CVE-2010-2983Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.01

    The workgroup bridge (aka WGB) functionality in Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service (dropped connection) via a series of spoofed EAPoL-Logoff frames, related to an "EAPoL logoff attack," aka Bug…

  • CVE-2010-2982Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.01

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to discover a group password via a series of SNMP requests, as demonstrated by an SNMP walk, aka Bug ID CSCtb74037.

  • CVE-2010-2981Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.01

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service (device crash) by pinging a virtual interface, aka Bug ID CSCte55370.

  • CVE-2010-2980Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.01

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of service (pbuf exhaustion and device crash) via fragmented traffic, aka Bug ID CSCtd26794.

  • CVE-2010-2979Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.01

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of service (buffer leak and device crash) via ARP requests that trigger an ARP storm, aka Bug ID CSCte43508.

  • CVE-2010-2978Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.02

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not use an adequate message-digest algorithm for a self-signed certificate, which allows remote attackers to bypass intended access restrictions via vectors involving collisions, aka Bug ID CSCtd67660.

  • CVE-2010-2977Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.01

    Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 does not properly implement TLS and SSL, which has unspecified impact and remote attack vectors, aka Bug ID CSCtd01611.

  • CVE-2010-2976Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.02

    The controller in Cisco Unified Wireless Network (UWN) Solution 7.x through 7.0.98.0 has (1) a default SNMP read-only community of public, (2) a default SNMP read-write community of private, and a value of "default" for the (3) SNMP v3 username, (4) SNMP v3 authentication…

  • CVE-2010-2975Aug 10, 2010
    Cisco Systems, Inc.
    Unified Wireless Network Solution Software
    risk 0.00cvss —epss 0.00

    Cisco Unified Wireless Network (UWN) Solution 7.x through 7.0.98.0 does not properly handle multiple SSH sessions, which allows physically proximate attackers to read a password, related to an "arrow key failure," aka Bug ID CSCtg51544.

  • CVE-2010-2821Aug 9, 2010
    Cisco Systems, Inc.
    Firewall Services Module
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability on the Cisco Firewall Services Module (FWSM) with software 3.2 before 3.2(17.2), 4.0 before 4.0(11.1), and 4.1 before 4.1(1.2) for Catalyst 6500 series switches and 7600 series routers, when multi-mode is enabled, allows remote attackers to cause a…

  • CVE-2010-2820Aug 9, 2010
    Cisco Systems, Inc.
    Firewall Services Module
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2), 3.2 before 3.2(16.1), 4.0 before 4.0(10.1), and 4.1 before 4.1(1.1) for Catalyst 6500 series switches and 7600 series routers allows remote…

  • CVE-2010-2819Aug 9, 2010
    Cisco Systems, Inc.
    Firewall Services Module
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2), 3.2 before 3.2(16.1), 4.0 before 4.0(10.1), and 4.1 before 4.1(1.1) for Catalyst 6500 series switches and 7600 series routers allows remote…

  • CVE-2010-2818Aug 9, 2010
    Cisco Systems, Inc.
    Firewall Services Module
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2), 3.2 before 3.2(16.1), 4.0 before 4.0(10.1), and 4.1 before 4.1(1.1) for Catalyst 6500 series switches and 7600 series routers allows remote…

  • CVE-2010-2817Aug 9, 2010
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the IKE implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.10), and 8.3 before 8.3(1.1) and Cisco…

  • CVE-2010-2816Aug 9, 2010
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.17), 8.1 before 8.1(2.45), and 8.2 before 8.2(2.13) allows remote attackers to cause a denial of service (device reload) via…

  • CVE-2010-2815Aug 9, 2010
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.17), and 8.3 before 8.3(1.6) and Cisco PIX…

  • CVE-2010-2814Aug 9, 2010
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.17), and 8.3 before 8.3(1.6) and Cisco PIX…

  • CVE-2010-1581Aug 9, 2010
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.17), and 8.3 before 8.3(1.6) and Cisco PIX…

  • CVE-2010-1580Aug 9, 2010
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), and 8.2 before 8.2(2) and Cisco PIX Security Appliances 500 series devices…

  • CVE-2010-1579Aug 9, 2010
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), and 8.2 before 8.2(2) and Cisco PIX Security Appliances 500 series devices…

  • CVE-2010-1578Aug 9, 2010
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), and 8.2 before 8.2(2) and Cisco PIX Security Appliances 500 series devices…

  • CVE-2010-1577Jul 28, 2010
    Cisco Systems, Inc.
    Internet Streamer
    risk 0.00cvss —epss 0.03

    Directory traversal vulnerability in Cisco Internet Streamer, as used in Cisco Content Delivery System (CDS) 2.2.x, 2.3.x, 2.4.x, and 2.5.x before 2.5.7 allows remote attackers to read arbitrary files via a crafted URL.

  • CVE-2010-1574Jul 8, 2010
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.05

    IOS 12.2(52)SE and 12.2(52)SE1 on Cisco Industrial Ethernet (IE) 3000 series switches has (1) a community name of public for RO access and (2) a community name of private for RW access, which makes it easier for remote attackers to modify the configuration or obtain potentially…

  • CVE-2010-2629Jul 6, 2010
    Cisco Systems, Inc.
    Content Services Switch 11500
    risk 0.00cvss —epss 0.01

    The Cisco Content Services Switch (CSS) 11500 with software 8.20.4.02 and the Application Control Engine (ACE) 4710 with software A2(3.0) do not properly handle LF header terminators in situations where the GET line is terminated by CRLF, which allows remote attackers to conduct…

  • CVE-2010-1576Jul 6, 2010
    Cisco Systems, Inc.
    Content Services Switch 11500
    risk 0.00cvss —epss 0.02

    The Cisco Content Services Switch (CSS) 11500 with software before 8.20.4.02 and the Application Control Engine (ACE) 4710 with software before A2(3.0) do not properly handle use of LF, CR, and LFCR as alternatives to the standard CRLF sequence between HTTP headers, which allows…

  • CVE-2010-1575Jul 6, 2010
    Cisco Systems, Inc.
    Content Services Switch 11500
    risk 0.00cvss —epss 0.02

    The Cisco Content Services Switch (CSS) 11500 with software 08.20.1.01 conveys authentication data through ClientCert-* headers but does not delete client-supplied ClientCert-* headers, which might allow remote attackers to bypass authentication via crafted header data, as…

  • CVE-2009-4923Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the DTLS implementation on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (traceback) via TLS fragments, aka Bug ID CSCso53162.

  • CVE-2009-4922Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote authenticated users to cause a denial of service (traceback) by establishing many IPsec L2L tunnels from remote peer IP addresses, aka Bug ID…

  • CVE-2009-4921Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.01

    Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow remote attackers to cause a denial of service (traceback) via malformed TCP packets, aka Bug ID CSCsm84110.

  • CVE-2009-4920Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in CTM on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software 8.1(2) allows remote attackers to cause a denial of service (watchdog traceback) via a large amount of small-packet data, aka Bug ID CSCsu11412.

  • CVE-2009-4919Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.02

    Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to have an unspecified impact via long IKE attributes, aka Bug ID CSCsu43121.

  • CVE-2009-4918Jun 29, 2010
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.01

    Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow remote attackers to cause a denial of service (IKE process hang) via malformed NAT-T packets, aka Bug ID CSCsr74439.

  • CVE-2009-4917Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (device reload) via a high volume of SIP traffic, aka Bug ID CSCsr65901.

  • CVE-2009-4916Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote authenticated users to cause a denial of service (console hang) via a login action during failover replication, aka Bug ID CSCsq80095.

  • CVE-2009-4915Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (device reload) via unknown network traffic, as demonstrated by a "connection stress test," aka Bug ID…

  • CVE-2009-4914Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.01

    Memory leak on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (memory consumption) via Subject Alternative Name fields in an X.509 certificate, aka Bug ID CSCsq17879.

  • CVE-2009-4913Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.02

    The IPv6 implementation on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) exposes IP services on the "far side of the box," which might allow remote attackers to bypass intended access restrictions via IPv6 packets, aka Bug ID CSCso58622.

  • CVE-2009-4912Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.03

    Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) complete an SSL handshake with an HTTPS client even if this client is unauthorized, which might allow remote attackers to bypass intended access restrictions via an HTTPS session, aka Bug ID…

  • CVE-2009-4911Jun 29, 2010
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to cause a denial of service (device crash) via vectors involving SSL VPN and PPPoE transactions, aka Bug ID CSCsm77958.

Page 132 of 145