VYPR
← Cisco Systems, Inc.

Vendor CVEs

Cisco Systems, Inc.

All CVEs

7,231 total · sorted by risk
  • CVE-2006-4950Sep 23, 2006
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.06

    Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices, the VG224 Analog Phone Gateway, and the MWR 1900 and 1941 Mobile Wireless Edge Routers, is incorrectly identified as supporting DOCSIS, which allows remote…

  • CVE-2006-4909Sep 21, 2006
    Cisco Systems, Inc.
    Guard Ddos Mitigation Appliance
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Cisco Guard DDoS Mitigation Appliance before 5.1(6), when anti-spoofing is enabled, allows remote attackers to inject arbitrary web script or HTML via certain character sequences in a URL that are not properly handled when the…

  • CVE-2006-4910Sep 21, 2006
    Cisco Systems, Inc.
    Ids
    risk 0.00cvss —epss 0.04

    The web administration interface (mainApp) to Cisco IDS before 4.1(5c), and IPS 5.0 before 5.0(6p1) and 5.1 before 5.1(2) allows remote attackers to cause a denial of service (unresponsive device) via a crafted SSLv2 Client Hello packet.

  • CVE-2006-4911Sep 21, 2006
    Cisco Systems, Inc.
    IPS
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Cisco IPS 5.0 before 5.0(6p2) and 5.1 before 5.1(2), when running in inline or promiscuous mode, allows remote attackers to bypass traffic inspection via a "crafted sequence of fragmented IP packets".

  • CVE-2006-4775Sep 14, 2006
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.05

    The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) and CatOS allows remote attackers to cause a denial of service by sending a VTP update with a revision value of 0x7FFFFFFF, which is incremented to 0x80000000 and is interpreted as a negative number in a signed…

  • CVE-2006-4774Sep 14, 2006
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.05

    The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) allows remote attackers to cause a denial of service by sending a VTP version 1 summary frame with a VTP version field value of 2.

  • CVE-2006-4650Sep 9, 2006
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Cisco IOS 12.0, 12.1, and 12.2, when GRE IP tunneling is used and the RFC2784 compliance fixes are missing, does not verify the offset field of a GRE packet during decapsulation, which leads to an integer overflow that references data from incorrect memory locations, which…

  • CVE-2006-4430Aug 29, 2006
    Cisco Systems, Inc.
    Network Admission Control
    risk 0.00cvss —epss 0.02

    The Cisco Network Admission Control (NAC) 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access (CCA) Agent and bypass local and remote protection mechanisms by modifying (1) the HTTP User-Agent header or (2) the behavior of the TCP/IP…

  • CVE-2006-4352Aug 25, 2006
    Cisco Systems, Inc.
    Content Services Switch 11000
    risk 0.00cvss —epss 0.01

    The ArrowPoint cookie functionality for Cisco 11000 series Content Service Switches specifies an internal IP address if the administrator does not specify a string option, which allows remote attackers to obtain sensitive information.

  • CVE-2006-4312Aug 23, 2006
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.00

    Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user passwords, and the enable…

  • CVE-2006-4194Aug 17, 2006
    Cisco Systems, Inc.
    Pix Firewall Software
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032. NOTE: the…

  • CVE-2006-4032Aug 9, 2006
    Cisco Systems, Inc.
    Callmanager Express
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Cisco IOS CallManager Express (CME) allows remote attackers to gain sensitive information (user names) from the Session Initiation Protocol (SIP) user directory via certain SIP messages, aka bug CSCse92417.

  • CVE-2006-3906Jul 27, 2006
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.07

    Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it…

  • CVE-2006-3732Jul 21, 2006
    Cisco Systems, Inc.
    Cs Mars
    risk 0.00cvss —epss 0.01

    Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1 ships with an Oracle database that contains several default accounts and passwords, which allows attackers to obtain sensitive information.

  • CVE-2006-3593Jul 18, 2006
    Cisco Systems, Inc.
    Unified Callmanager
    risk 0.00cvss —epss 0.01

    The command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to overwrite arbitrary files by redirecting a command's output to a file or folder, aka bug CSCse31704.

  • CVE-2006-3595Jul 18, 2006
    Cisco Systems, Inc.
    Router Web Setup
    risk 0.00cvss —epss 0.04

    The default configuration of IOS HTTP server in Cisco Router Web Setup (CRWS) before 3.3.0 build 31 does not require credentials, which allows remote attackers to access the server with arbitrary privilege levels, aka bug CSCsa78190.

  • CVE-2006-3596Jul 18, 2006
    Cisco Systems, Inc.
    Intrusion Prevention System
    risk 0.00cvss —epss 0.02

    The device driver for Intel-based gigabit network adapters in Cisco Intrusion Prevention System (IPS) 5.1(1) through 5.1(p1), as installed on various Cisco Intrusion Prevention System 42xx appliances, allows remote attackers to cause a denial of service (kernel panic and…

  • CVE-2006-3594Jul 18, 2006
    Cisco Systems, Inc.
    Unified Callmanager
    risk 0.00cvss —epss 0.04

    Buffer overflow in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows remote attackers to execute arbitrary code via a long hostname in a SIP request, aka bug CSCsd96542.

  • CVE-2006-3592Jul 18, 2006
    Cisco Systems, Inc.
    Unified Callmanager
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to execute arbitrary commands with elevated privileges via unspecified vectors, involving "certain CLI commands," aka bug CSCse11005.

  • CVE-2006-3424Jul 7, 2006
    Webex Communications
    Webex Downloader Activex Control
    risk 0.00cvss —epss 0.03

    Multiple buffer overflows in WebEx Downloader ActiveX Control, possibly in versions before November 2005, allow remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2006-3289Jun 28, 2006
    Cisco Systems, Inc.
    Wireless Control System
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the login page of the HTTP interface for the Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a "malicious URL".

  • CVE-2006-3288Jun 28, 2006
    Cisco Systems, Inc.
    Wireless Control System
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the TFTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51), when configured to use a directory path name that contains a space character, allows remote authenticated users to read and overwrite arbitrary files via…

  • CVE-2006-3287Jun 28, 2006
    Cisco Systems, Inc.
    Wireless Control System
    risk 0.00cvss —epss 0.03

    Cisco Wireless Control System (WCS) for Linux and Windows 4.0(1) and earlier uses a default administrator username "root" and password "public," which allows remote attackers to gain access (aka bug CSCse21391).

  • CVE-2006-3286Jun 28, 2006
    Cisco Systems, Inc.
    Wireless Control System
    risk 0.00cvss —epss 0.03

    The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(63) stores a hard-coded username and password in plaintext within unspecified files, which allows remote authenticated users to access the database (aka bug CSCsd15951).

  • CVE-2006-3291Jun 28, 2006
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.04

    The web interface on Cisco IOS 12.3(8)JA and 12.3(8)JA1, as used on the Cisco Wireless Access Point and Wireless Bridge, reconfigures itself when it is changed to use the "Local User List Only (Individual Passwords)" setting, which removes all security and password…

  • CVE-2006-3290Jun 28, 2006
    Cisco Systems, Inc.
    Wireless Control System
    risk 0.00cvss —epss 0.02

    HTTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames and directory paths via a direct URL request.

  • CVE-2006-3285Jun 28, 2006
    Cisco Systems, Inc.
    Wireless Control System
    risk 0.00cvss —epss 0.03

    The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) uses an undocumented, hard-coded username and password, which allows remote authenticated users to read, and possibly modify, sensitive configuration data (aka bugs CSCsd15955).

  • CVE-2006-3226Jun 26, 2006
    Cisco Systems, Inc.
    Secure Access Control Server
    risk 0.00cvss —epss 0.02

    Cisco Secure Access Control Server (ACS) 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server port for an administration session, which allows remote attackers to bypass authentication via various methods, aka "ACS Weak…

  • CVE-2006-3073Jun 19, 2006
    Cisco Systems, Inc.
    Asa 5500
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in the WebVPN feature in the Cisco VPN 3000 Series Concentrators and Cisco ASA 5500 Series Adaptive Security Appliances (ASA), when in WebVPN clientless mode, allow remote attackers to inject arbitrary web script or HTML via…

  • CVE-2006-2679May 31, 2006
    Cisco Systems, Inc.
    VPN Client
    risk 0.00cvss —epss 0.00

    Unspecified vulnerability in the VPN Client for Windows Graphical User Interface (GUI) (aka the VPN client dialer) in Cisco VPN Client for Windows 4.8.00.* and earlier, except for 4.7.00.0533, allows local authenticated, interactive users to gain privileges, possibly due to…

  • CVE-2006-2322May 12, 2006
    Cisco Systems, Inc.
    Application Velocity System 3110
    risk 0.00cvss —epss 0.02

    The transparent proxy feature of the Cisco Application Velocity System (AVS) 3110 5.0 and 4.0 and earlier, and 3120 5.0.0 and earlier, has a default configuration that allows remote attackers to proxy arbitrary TCP connections, aka Bug ID CSCsd32143.

  • CVE-2006-0561May 10, 2006
    Cisco Systems, Inc.
    Secure Access Control Server
    risk 0.00cvss —epss 0.00

    Cisco Secure Access Control Server (ACS) 3.x for Windows stores ACS administrator passwords and the master key in the registry with insecure permissions, which allows local users and remote administrators to decrypt the passwords by using Microsoft's cryptographic API functions…

  • CVE-2006-2166May 4, 2006
    Cisco Systems, Inc.
    Unity Express
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2) and earlier, when running on any CUE Advanced Integration Module (AIM) or Network Module (NM), allows remote authenticated attackers to reset the password for any user with an expired…

  • CVE-2006-1961Apr 21, 2006
    Cisco Systems, Inc.
    Wireless Lan Solution Engine
    risk 0.00cvss —epss 0.03

    Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registration Tool (URT) before 20060419, and all versions of Ethernet Subscriber Solution Engine (ESSE) and CiscoWorks2000 Service Management Solution (SMS)…

  • CVE-2006-1927Apr 20, 2006
    Cisco Systems, Inc.
    iOS Xr
    risk 0.00cvss —epss 0.02

    Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 or Cisco 12000 series routers, allows remote attackers to cause a denial of service (Line card crash) via certain MPLS packets, as identified by Cisco bug ID CSCsc77475.

  • CVE-2006-1928Apr 20, 2006
    Cisco Systems, Inc.
    iOS Xr
    risk 0.00cvss —epss 0.02

    Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 routers, allows remote attackers to cause a denial of service (Modular Services Cards (MSC) crash or "MPLS packet handling problems") via certain MPLS packets, as identified by…

  • CVE-2006-1670Apr 7, 2006
    Cisco Systems, Inc.
    Optical Networking Systems Software
    risk 0.00cvss —epss 0.02

    Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memory exhaustion and possibly card reset) by sending an invalid response when the final ACK is expected, aka bug ID CSCei45910.

  • CVE-2006-1671Apr 7, 2006
    Cisco Systems, Inc.
    Optical Networking Systems Software
    risk 0.00cvss —epss 0.02

    Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (card reset) via (1) a "crafted" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; (2) a…

  • CVE-2006-1672Apr 7, 2006
    Cisco Systems, Inc.
    Transport Controller
    risk 0.00cvss —epss 0.04

    The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing "fs/LAUNCHER.jar", which allows…

  • CVE-2006-1631Apr 5, 2006
    Cisco Systems, Inc.
    Content Services Switch 11500
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the HTTP compression functionality in Cisco CSS 11500 Series Content Services switches allows remote attackers to cause a denial of service (device reload) via (1) "valid, but obsolete" or (2) "specially crafted" HTTP requests.

  • CVE-2006-0764Feb 18, 2006
    Cisco Systems, Inc.
    Cisco Anomaly Detection and Mitigation
    risk 0.00cvss —epss 0.02

    The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detection and Mitigation products, when running with an incomplete TACACS+ configuration without a "tacacs-server host" command, allows…

  • CVE-2006-0485Feb 1, 2006
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.00

    The TCL shell in Cisco IOS 12.2(14)S before 12.2(14)S16, 12.2(18)S before 12.2(18)S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting (AAA) command authorization checks, which may allow local users to execute IOS…

  • CVE-2006-0486Feb 1, 2006
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.00

    Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and 12.4 based trains reuse a Tcl Shell process across login sessions of different local users on the same terminal if the first user does not use tclquit before…

  • CVE-2006-0483Jan 31, 2006
    Cisco Systems, Inc.
    VPN 3030 Concentator
    risk 0.00cvss —epss 0.03

    Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service (device reload or user disconnect) via a crafted HTTP packet.

  • CVE-2006-0368Jan 22, 2006
    Cisco Systems, Inc.
    Unified Callmanager
    risk 0.00cvss —epss 0.04

    Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1) cause a denial of service (CPU and memory consumption) via a large number of open TCP connections to port 2000 and (2) cause a denial of…

  • CVE-2006-0367Jan 22, 2006
    Cisco Systems, Inc.
    Unified Callmanager
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the…

  • CVE-2006-0340Jan 21, 2006
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in Stack Group Bidding Protocol (SGBP) support in Cisco IOS 12.0 through 12.4 running on various Cisco products, when SGBP is enabled, allows remote attackers on the local network to cause a denial of service (device hang and network traffic loss) via a…

  • CVE-2006-0181Jan 12, 2006
    Cisco Systems, Inc.
    Cs Mars
    risk 0.00cvss —epss 0.00

    Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.1.3 has an undocumented administrative account with a default password, which allows local users to gain privileges via the expert command.

  • CVE-2005-4826Dec 31, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(22)EA3 on Catalyst 2950T switches allows remote attackers to cause a denial of service (device reboot) via a crafted Subset-Advert message packet, a different issue than CVE-2006-4774,…

  • CVE-2005-4825Dec 31, 2005
    Cisco Systems, Inc.
    Clean Access
    risk 0.00cvss —epss 0.01

    Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of service (disk consumption), or make unauthorized files accessible, by uploading files through requests to certain JSP scripts, a related issue…

Page 140 of 145