VYPR
← Cisco Systems, Inc.

Vendor CVEs

Cisco Systems, Inc.

All CVEs

7,231 total · sorted by risk
  • CVE-2009-1167Jul 29, 2009
    Cisco Systems, Inc.
    Catalyst 3750g
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for…

  • CVE-2009-1166Jul 29, 2009
    Cisco Systems, Inc.
    Catalyst
    risk 0.00cvss —epss 0.02

    The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for…

  • CVE-2009-1165Jul 29, 2009
    Cisco Systems, Inc.
    Catalyst 3750g
    risk 0.00cvss —epss 0.02

    Memory leak on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0, 5.1 before 5.1.163.0, and 5.0 and 5.2 before 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC…

  • CVE-2009-1164Jul 29, 2009
    Cisco Systems, Inc.
    Catalyst 3750g
    risk 0.00cvss —epss 0.01

    The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.2 before 4.2.205.0 and 5.x before 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for…

  • CVE-2009-2048Jul 16, 2009
    Cisco Systems, Inc.
    Crs
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to inject arbitrary web script or HTML into the CCX…

  • CVE-2009-2047Jul 16, 2009
    Cisco Systems, Inc.
    Crs
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to read, modify, or delete arbitrary files via unspecified…

  • CVE-2009-1202Jun 25, 2009
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass certain protection mechanisms involving URL rewriting and HTML rewriting, and conduct cross-site scripting (XSS) attacks, by modifying the first…

  • CVE-2009-2046Jun 25, 2009
    Cisco Systems, Inc.
    Video Surveillance 2500 Series IP Camera
    risk 0.00cvss —epss 0.01

    The embedded web server on the Cisco Video Surveillance 2500 Series IP Camera with firmware before 2.1 allows remote attackers to read arbitrary files via a (1) http or (2) https request, related to the (a) SD Camera Web Server and the (b) Wireless Camera HTTP Server, aka Bug…

  • CVE-2009-2045Jun 25, 2009
    Cisco Systems, Inc.
    Video Surveillance Stream Manager
    risk 0.00cvss —epss 0.02

    The Cisco Video Surveillance Stream Manager firmware before 5.3, as used on Cisco Video Surveillance Services Platforms and Video Surveillance Integrated Services Platforms, allows remote attackers to cause a denial of service (reboot) via a malformed payload in a UDP packet to…

  • CVE-2009-1163Jun 25, 2009
    Cisco Systems, Inc.
    Physical Access Gateway
    risk 0.00cvss —epss 0.02

    Memory leak on the Cisco Physical Access Gateway with software before 1.1 allows remote attackers to cause a denial of service (memory consumption) via unspecified TCP packets.

  • CVE-2009-2073Jun 15, 2009
    Linksys
    WRT160N
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Linksys WRT160N wireless router hardware 1 and firmware 1.02.2 allows remote attackers to hijack the authentication of other users for unspecified requests via unknown vectors, as demonstrated using administrator privileges and…

  • CVE-2009-1162Jun 5, 2009
    Cisco Systems, Inc.
    Ironport Asyncos
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Spam Quarantine login page in Cisco IronPort AsyncOS before 6.5.2 on Series C, M, and X appliances allows remote attackers to inject arbitrary web script or HTML via the referrer parameter.

  • CVE-2009-1560May 6, 2009
    Cisco Systems, Inc.
    Wvc54gca
    risk 0.00cvss —epss 0.02

    The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 stores passwords and wireless-network keys in cleartext in (1) pass_wd.htm and (2) Wsecurity.htm, which allows remote attackers to obtain sensitive information by reading the HTML source code.

  • CVE-2009-1559May 6, 2009
    Cisco Systems, Inc.
    Wvc54gca
    risk 0.00cvss —epss 0.02

    Absolute path traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R24 and possibly 1.00R22 allows remote attackers to read arbitrary files via an absolute pathname in the this_file parameter. NOTE: traversal via a ..…

  • CVE-2009-1556May 6, 2009
    Cisco Systems, Inc.
    Wvc54gca
    risk 0.00cvss —epss 0.01

    img/main.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote authenticated users to read arbitrary files in img/ via a filename in the next_file parameter, as demonstrated by reading .htpasswd to obtain the admin password, a…

  • CVE-2009-1555May 6, 2009
    Cisco Systems, Inc.
    Wvc54gca
    risk 0.00cvss —epss 0.01

    The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 sends configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by reading the SetupWizard.exe…

  • CVE-2009-1160Apr 9, 2009
    Cisco Systems, Inc.
    Pix
    risk 0.00cvss —epss 0.01

    Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 before 7.1(2)74, 7.2 before 7.2(4)9, and 8.0 before 8.0(4)5 do not properly implement the implicit deny statement, which might allow remote attackers to successfully send…

  • CVE-2009-1159Apr 9, 2009
    Cisco Systems, Inc.
    Pix
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2 before 7.2(4)26, 8.0 before 8.0(4)22, and 8.1 before 8.1(2)12, when SQL*Net inspection is enabled, allows remote attackers to cause a denial of service (traceback…

  • CVE-2009-1158Apr 9, 2009
    Cisco Systems, Inc.
    Pix
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)26, 8.0 before 8.0(4)24, and 8.1 before 8.1(2)14, when H.323 inspection is enabled, allows remote attackers to cause a denial of…

  • CVE-2009-1157Apr 9, 2009
    Cisco Systems, Inc.
    Pix
    risk 0.00cvss —epss 0.03

    Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)30, 8.0 before 8.0(4)28, and 8.1 before 8.1(2)19 allows remote attackers to cause a denial of service (memory consumption or…

  • CVE-2009-1156Apr 9, 2009
    Cisco Systems, Inc.
    Pix
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 8.0 before 8.0(4)25 and 8.1 before 8.1(2)15, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service (device reload) via a crafted (1) SSL or (2)…

  • CVE-2009-1155Apr 9, 2009
    Cisco Systems, Inc.
    Pix
    risk 0.00cvss —epss 0.02

    Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7.2 before 7.2(4)27, 8.0 before 8.0(4)25, and 8.1 before 8.1(2)15, when AAA override-account-disable is entered in a general-attributes field, allow remote attackers to…

  • CVE-2009-0637Mar 27, 2009
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    The SCP server in Cisco IOS 12.2 through 12.4, when Role-Based CLI Access is enabled, does not enforce the CLI view configuration for file transfers, which allows remote authenticated users with an attached CLI view to (1) read or (2) overwrite arbitrary files via an SCP command.

  • CVE-2009-0636Mar 27, 2009
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when SIP voice services are enabled, allows remote attackers to cause a denial of service (device crash) via a valid SIP message.

  • CVE-2009-0635Mar 27, 2009
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Memory leak in the Cisco Tunneling Control Protocol (cTCP) encapsulation feature in Cisco IOS 12.4, when an Easy VPN (aka EZVPN) server is enabled, allows remote attackers to cause a denial of service (memory consumption and device crash) via a sequence of TCP packets.

  • CVE-2009-0634Mar 27, 2009
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Multiple unspecified vulnerabilities in the home agent (HA) implementation in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service (input queue wedge and interface outage) via an…

  • CVE-2009-0633Mar 27, 2009
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Multiple unspecified vulnerabilities in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service (input queue wedge and interface outage) via MIPv6 packets, aka Bug ID CSCsm97220.

  • CVE-2009-0630Mar 27, 2009
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    The (1) Cisco Unified Communications Manager Express; (2) SIP Gateway Signaling Support Over Transport Layer Security (TLS) Transport; (3) Secure Signaling and Media Encryption; (4) Blocks Extensible Exchange Protocol (BEEP); (5) Network Admission Control HTTP Authentication…

  • CVE-2009-0629Mar 27, 2009
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.04

    The (1) Airline Product Set (aka ALPS), (2) Serial Tunnel Code (aka STUN), (3) Block Serial Tunnel Code (aka BSTUN), (4) Native Client Interface Architecture (NCIA) support, (5) Data-link switching (aka DLSw), (6) Remote Source-Route Bridging (RSRB), (7) Point to Point Tunneling…

  • CVE-2009-0628Mar 27, 2009
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (memory consumption and device crash) by disconnecting an SSL session in an abnormal manner, leading to a Transmission Control Block (TCB) leak.

  • CVE-2009-0626Mar 27, 2009
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (device reload or hang) via a crafted HTTPS packet.

  • CVE-2009-0631Mar 27, 2009
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when configured with (1) IP Service Level Agreements (SLAs) Responder, (2) Session Initiation Protocol (SIP), (3) H.323 Annex E Call Signaling Transport, or (4) Media Gateway Control Protocol (MGCP) allows remote…

  • CVE-2009-0632Mar 12, 2009
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.03

    The IP Phone Personal Address Book (PAB) Synchronizer feature in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.1, 4.2 before 4.2(3)SR4b, 4.3 before 4.3(2)SR1b, 5.x before 5.1(3e), 6.x before 6.1(3), and 7.0 before 7.0(2) sends privileged…

  • CVE-2009-0619Mar 5, 2009
    Cisco Systems, Inc.
    Session Border Controller
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Session Border Controller (SBC) before 3.0(2) for Cisco 7600 series routers allows remote attackers to cause a denial of service (SBC card reload) via crafted packets to TCP port 2000.

  • CVE-2009-0743Feb 27, 2009
    Cisco Systems, Inc.
    Unified Meetingplace
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the edit account page in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote authenticated users to inject arbitrary web script or HTML via…

  • CVE-2009-0742Feb 26, 2009
    Cisco Systems, Inc.
    Application Control Engine Module
    risk 0.00cvss —epss 0.01

    The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers and Cisco ACE 4710 Application Control Engine Appliance stores a cleartext password by default, which allows context-dependent attackers to obtain sensitive…

  • CVE-2009-0625Feb 26, 2009
    Cisco Systems, Inc.
    Application Control Engine Module
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.2) and Cisco ACE 4710 Application Control Engine Appliance before A1(8.0) allows remote attackers to cause a denial of service (device reload) via a…

  • CVE-2009-0624Feb 26, 2009
    Cisco Systems, Inc.
    Application Control Engine Module
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the SNMPv2c implementation in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.3) and Cisco ACE 4710 Application Control Engine Appliance before A3(2.1) allows remote attackers to cause a denial of…

  • CVE-2009-0623Feb 26, 2009
    Cisco Systems, Inc.
    Application Control Engine Module
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.3) and Cisco ACE 4710 Application Control Engine Appliance before A3(2.1) allows remote attackers to cause a denial of service (device reload) via a…

  • CVE-2009-0622Feb 26, 2009
    Cisco Systems, Inc.
    Application Control Engine Module
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.2) and Cisco ACE 4710 Application Control Engine Appliance before A1(8a) allows remote authenticated users to execute arbitrary operating-system…

  • CVE-2009-0621Feb 26, 2009
    Cisco Systems, Inc.
    Ace 4710
    risk 0.00cvss —epss 0.02

    Cisco ACE 4710 Application Control Engine Appliance before A1(8a) uses default (1) usernames and (2) passwords for (a) the administrator, (b) web management, and (c) device management, which makes it easier for remote attackers to perform configuration changes to the Device…

  • CVE-2009-0620Feb 26, 2009
    Cisco Systems, Inc.
    Application Control Engine Module
    risk 0.00cvss —epss 0.02

    Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.1) uses default (1) usernames and (2) passwords for (a) the administrator and (b) web management, which makes it easier for remote attackers to perform configuration changes or…

  • CVE-2009-0618Feb 26, 2009
    Cisco Systems, Inc.
    Application Networking Manager
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Java agent in Cisco Application Networking Manager (ANM) before 2.0 Update A allows remote attackers to gain privileges, and cause a denial of service (service outage) by stopping processes, or obtain sensitive information by reading…

  • CVE-2009-0617Feb 26, 2009
    Cisco Systems, Inc.
    Application Networking Manager
    risk 0.00cvss —epss 0.02

    Cisco Application Networking Manager (ANM) before 2.0 uses a default MySQL root password, which makes it easier for remote attackers to execute arbitrary operating-system commands or change system files.

  • CVE-2009-0616Feb 26, 2009
    Cisco Systems, Inc.
    Application Networking Manager
    risk 0.00cvss —epss 0.02

    Cisco Application Networking Manager (ANM) before 2.0 uses default usernames and passwords, which makes it easier for remote attackers to access the application, or cause a denial of service via configuration changes, related to "default user credentials during installation."

  • CVE-2009-0615Feb 26, 2009
    Cisco Systems, Inc.
    Application Networking Manager
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in Cisco Application Networking Manager (ANM) before 2.0 and Application Control Engine (ACE) Device Manager before A3(2.1) allows remote authenticated users to read or modify arbitrary files via unspecified vectors, related to "invalid…

  • CVE-2009-0614Feb 26, 2009
    Cisco Systems, Inc.
    Unified Meetingplace Web Conferencing
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Web Server in Cisco Unified MeetingPlace Web Conferencing 6.0 before 6.0(517.0) (aka 6.0 MR4) and 7.0 before 7.0(2) (aka 7.0 MR1) allows remote attackers to bypass authentication and obtain administrative access via a crafted URL.

  • CVE-2009-0471Feb 6, 2009
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in the HTTP server in Cisco IOS 12.4(23) allows remote attackers to execute arbitrary commands, as demonstrated by executing the hostname command with a level/15/configure/-/hostname request.

  • CVE-2009-0062Feb 5, 2009
    Cisco Systems, Inc.
    Wireless Lan Controller Software
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the Cisco Wireless LAN Controller (WLC), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.2.173.0 allows remote authenticated users to gain privileges via unknown vectors,…

  • CVE-2009-0061Feb 5, 2009
    Cisco Systems, Inc.
    Wireless Lan Controller Software
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Wireless LAN Controller (WLC) TSEC driver in the Cisco 4400 WLC, Cisco Catalyst 6500 and 7600 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.1 allows…

Page 135 of 145