VYPR
← Cisco Systems, Inc.

Vendor CVEs

Cisco Systems, Inc.

All CVEs

6,961 total · sorted by risk
  • CVE-2018-0207LowMar 8, 2018
    Cisco Systems, Inc.
    Secure Access Control Server
    risk 0.22cvss 3.3epss 0.01

    A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could allow an unauthenticated, remote attacker to gain read access to certain information in the affected system. The vulnerability is due to improper handling of XML…

  • CVE-2020-3504LowAug 27, 2020
    Cisco Systems, Inc.
    UCS Manager Software
    risk 0.21cvss 3.3epss 0.00

    A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of CLI command parameters. An…

  • CVE-2019-1667LowFeb 21, 2019
    Cisco Systems, Inc.
    Hyperflex Hx Data Platform
    risk 0.21cvss 3.3epss 0.00

    A vulnerability in the Graphite interface of Cisco HyperFlex software could allow an authenticated, local attacker to write arbitrary data to the Graphite interface. The vulnerability is due to insufficient authorization controls. An attacker could exploit this vulnerability by…

  • CVE-2018-0106LowJan 18, 2018
    Cisco Systems, Inc.
    Elastic Services Controller
    risk 0.21cvss 3.3epss 0.00

    A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an unauthenticated, local attacker to access sensitive information on a targeted system. The vulnerability is due to insufficient security restrictions. An attacker could exploit this…

  • CVE-2020-3126LowApr 13, 2020
    Cisco Systems, Inc.
    Webex Meetings
    risk 0.20cvss 3.0epss 0.01

    vulnerability within the Multimedia Viewer feature of Cisco Webex Meetings could allow an authenticated, remote attacker to bypass security protections. The vulnerability is due to missing security warning dialog boxes when a room host views shared multimedia files. An…

  • CVE-2019-1866LowApr 13, 2020
    Cisco Systems, Inc.
    Webex Business Suite
    risk 0.20cvss 3.1epss 0.00

    Cisco Webex Business Suite before 39.1.0 contains a vulnerability that could allow an unauthenticated, remote attacker to affect the integrity of the application. The vulnerability is due to improper validation of host header values. An attacker with a privileged network…

  • CVE-2018-0109LowJan 18, 2018
    Cisco Systems, Inc.
    Webex Meetings Server
    risk 0.18cvss 2.7epss 0.01

    A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to obtain information to conduct additional reconnaissance attacks. The vulnerability is due…

  • CVE-2020-24587LowMay 11, 2021
    Linux
    Kernel
    risk 0.17cvss 2.6epss 0.03

    The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments of a frame are encrypted under the same key. An adversary can abuse this to decrypt selected fragments when another device sends…

  • CVE-2016-6450LowNov 19, 2016
    Cisco Systems, Inc.
    iOS Xe
    risk 0.16cvss 2.5epss 0.00

    A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local attacker to gain write access to some files in the underlying operating system. This vulnerability affects the following products if they are running a vulnerable release…

  • CVE-2015-10010LowJan 2, 2023
    Opendns
    Openresolve
    risk 0.13cvss 3.1epss 0.01

    A vulnerability was found in OpenDNS OpenResolve. It has been rated as problematic. Affected by this issue is the function get of the file resolverapi/endpoints.py of the component API. The manipulation leads to cross site scripting. The attack may be launched remotely. The…

  • CVE-2026-20316MedKEVJul 29, 2026
    Cisco Systems, Inc.
    Secure Firewall Management Center
    risk 0.12cvss 5.3epss 0.01

    A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This…

  • CVE-1999-0016Dec 1, 1997
    Sun Corporation
    Sunos
    risk 0.11cvss —epss 0.96

    Land IP denial of service.

  • CVE-2005-0356May 31, 2005
    Microsoft
    Windows 2000
    risk 0.10cvss —epss 0.83

    Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later…

  • CVE-2014-0659Jan 12, 2014
    Cisco Systems, Inc.
    Rvs4000
    risk 0.09cvss —epss 0.74

    The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary…

  • CVE-2013-5486Sep 23, 2013
    Cisco Systems, Inc.
    Prime Data Center Network Manager
    risk 0.09cvss —epss 0.76

    Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can be…

  • CVE-2011-2039Jun 2, 2011
    Cisco Systems, Inc.
    Anyconnect Secure Mobility Client
    risk 0.09cvss —epss 0.70

    The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to…

  • CVE-2008-0960Jun 10, 2008
    NetApp
    Data Ontap
    risk 0.09cvss —epss 0.69

    SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2;…

  • CVE-2002-1359Dec 23, 2002
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.09cvss —epss 0.80

    Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.

  • CVE-2000-0945Dec 19, 2000
    Cisco Systems, Inc.
    Catalyst 3500xl
    risk 0.09cvss —epss 0.73

    The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory.

  • CVE-2008-3558Aug 8, 2008
    Cisco Systems, Inc.
    Webex Meeting Manager
    risk 0.08cvss —epss 0.65

    Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 allows remote attackers to execute arbitrary code via a long argument to the NewObject method.

  • CVE-2008-0532Mar 14, 2008
    Cisco Systems, Inc.
    Secure Access Control Server
    risk 0.08cvss —epss 0.57

    Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to execute arbitrary code via a long argument located immediately after…

  • CVE-2001-0537Jul 21, 2001
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.08cvss —epss 0.68

    HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.

  • CVE-2018-5390HigAug 6, 2018
    Linux
    Kernel
    risk 0.06cvss 7.5epss 0.74

    Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

  • CVE-2012-0284Jul 19, 2012
    Cisco Systems, Inc.
    Linksys Playerpt Activex Control
    risk 0.06cvss —epss 0.36

    Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.ocx on the Cisco WVC200 Wireless-G PTZ Internet video camera allows remote attackers to execute arbitrary code via a long URL in the first argument (aka the…

  • CVE-2011-0966May 20, 2011
    Cisco Systems, Inc.
    Ciscoworks Common Services
    risk 0.06cvss —epss 0.41

    Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, aka Bug ID CSCto35577.

  • CVE-2000-0380Apr 26, 2000
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.06cvss —epss 0.35

    The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.

  • CVE-2014-7992Nov 18, 2014
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.05cvss —epss 0.27

    The DLSw implementation in Cisco IOS does not initialize packet buffers, which allows remote attackers to obtain sensitive credential information from process memory via a session on TCP port 2067, aka Bug ID CSCur14014.

  • CVE-2014-3300Jul 7, 2014
    Cisco Systems, Inc.
    Unified Communications Domain Manager
    risk 0.05cvss —epss 0.22

    The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a crafted URL, aka Bug ID…

  • CVE-2013-5528Oct 11, 2013
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.05cvss —epss 0.23

    Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815.

  • CVE-2012-5202Mar 9, 2013
    Microfocus
    Intelligent Management Center
    risk 0.05cvss —epss 0.21

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka…

  • CVE-2011-3315Oct 27, 2011
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.05cvss —epss 0.26

    Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response…

  • CVE-2011-3305Oct 6, 2011
    Cisco Systems, Inc.
    Nac Manager
    risk 0.05cvss —epss 0.22

    Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755.

  • CVE-2011-0959May 20, 2011
    Cisco Systems, Inc.
    Unified Operations Manager
    risk 0.05cvss —epss 0.21

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to inject arbitrary web script or HTML via (1) the extn parameter to iptm/advancedfind.do, (2) the deviceInstanceName parameter to iptm/ddv.do, the…

  • CVE-2011-1609May 3, 2011
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.05cvss —epss 0.20

    SQL injection vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5)su1, 8.0 before 8.0(3), and 8.5 before 8.5(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors,…

  • CVE-2011-0364Feb 19, 2011
    Cisco Systems, Inc.
    Security Agent
    risk 0.05cvss —epss 0.20

    The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request.

  • CVE-2009-1558May 6, 2009
    Cisco Systems, Inc.
    Wvc54gca
    risk 0.05cvss —epss 0.30

    Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote attackers to read arbitrary files via a %2e. (encoded dot dot) or an absolute pathname in the next_file parameter.

  • CVE-2009-1287Apr 13, 2009
    Cisco Systems, Inc.
    Subscriber Edge Services Manager
    risk 0.05cvss —epss 0.23

    Cross-site scripting (XSS) vulnerability in Cisco Subscriber Edge Services Manager (SESM) allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: some of these details are obtained from third party information.

  • CVE-2008-0533Mar 14, 2008
    Cisco Systems, Inc.
    Secure Access Control Server
    risk 0.05cvss —epss 0.29

    Multiple cross-site scripting (XSS) vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (ACS) for Windows and ACS Solution Engine allow remote attackers to inject arbitrary web script or HTML via an…

  • CVE-2008-0027Jan 17, 2008
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.05cvss —epss 0.57

    Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM) 4.2 before 4.2(3)SR3 and 4.3 before 4.3(1)SR1, and CallManager 4.0 and 4.1 before 4.1(3)SR5c, allows remote attackers to cause a…

  • CVE-2007-4286Aug 9, 2007
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.05cvss —epss 0.19

    Buffer overflow in the Next Hop Resolution Protocol (NHRP) functionality in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (restart) and execute arbitrary code via a crafted NHRP packet.

  • CVE-2006-3101Jun 21, 2006
    Cisco Systems, Inc.
    Secure ACS for UNIX
    risk 0.05cvss —epss 0.24

    Cross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error, (2) SSL, and (3) Ok parameters.

  • CVE-2015-6402Dec 14, 2015
    Cisco Systems, Inc.
    EPC3928
    risk 0.04cvss —epss 0.07

    Cross-site scripting (XSS) vulnerability in the management interface on Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11, and 5.7.1 allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCux24935.

  • CVE-2015-6401Dec 14, 2015
    Cisco Systems, Inc.
    EPC3928
    risk 0.04cvss —epss 0.08

    Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11, and 5.7.1 allow remote attackers to bypass an intended authentication requirement and execute unspecified administrative functions via a crafted HTTP request, aka Bug ID CSCux24941.

  • CVE-2014-8008Jan 22, 2015
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.04cvss —epss 0.08

    Absolute path traversal vulnerability in the Real-Time Monitoring Tool (RTMT) API in Cisco Unified Communications Manager (CUCM) allows remote authenticated users to read arbitrary files via a full pathname in an API command, aka Bug ID CSCur49414.

  • CVE-2014-2127Apr 10, 2014
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.04cvss —epss 0.11

    Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.48), 8.3 before 8.3(2.40), 8.4 before 8.4(7.9), 8.6 before 8.6(1.13), 9.0 before 9.0(4.1), and 9.1 before 9.1(4.3) does not properly process management-session information during privilege validation for SSL VPN…

  • CVE-2014-0683Mar 6, 2014
    Cisco Systems, Inc.
    Rv110w
    risk 0.04cvss —epss 0.10

    The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlier, and CVR100W router with firmware 1.0.1.19 and earlier does not prevent replaying of modified authentication requests, which allows remote…

  • CVE-2013-3431Jul 25, 2013
    Cisco Systems, Inc.
    Video Surveillance Manager
    risk 0.04cvss —epss 0.09

    Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka…

  • CVE-2013-3430Jul 25, 2013
    Cisco Systems, Inc.
    Video Surveillance Manager
    risk 0.04cvss —epss 0.08

    Cisco Video Surveillance Manager (VSM) before 7.0.0 allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37288.

  • CVE-2013-3429Jul 25, 2013
    Cisco Systems, Inc.
    Video Surveillance Manager
    risk 0.04cvss —epss 0.10

    Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37163.

  • CVE-2013-1114Feb 13, 2013
    Cisco Systems, Inc.
    Unity Express
    risk 0.04cvss —epss 0.10

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unity Express before 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud87527.

Page 91 of 140