VYPR
← Cisco Systems, Inc.

Vendor CVEs

Cisco Systems, Inc.

All CVEs

6,961 total · sorted by risk
  • CVE-2011-2543Sep 23, 2011
    Cisco Systems, Inc.
    Telepresence System Integrator C Series
    risk 0.04cvss —epss 0.12

    Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote authenticated users to cause a denial of service (endpoint reboot or process crash) or possibly execute arbitrary code via a long location parameter to the…

  • CVE-2011-2577Aug 31, 2011
    Cisco Systems, Inc.
    TelePresence C Series Endpoints
    risk 0.04cvss —epss 0.13

    Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions before TC 4.0.0 or F9.1, allows remote attackers to cause a denial of service (crash) via a crafted SIP packet to port 5060 or 5061,…

  • CVE-2011-1613May 3, 2011
    Cisco Systems, Inc.
    Wireless Lan Controller Software
    risk 0.04cvss —epss 0.10

    Unspecified vulnerability in Cisco Wireless LAN Controller (WLC) software 6.0 before 6.0.200.0, 7.0 before 7.0.98.216, and 7.0.1xx before 7.0.112.0 allows remote attackers to cause a denial of service (device reload) via a sequence of ICMP packets, aka Bug ID CSCth74426.

  • CVE-2011-0951Apr 4, 2011
    Cisco Systems, Inc.
    Secure Access Control System
    risk 0.04cvss —epss 0.15

    The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440.

  • CVE-2011-0354Feb 3, 2011
    Cisco Systems, Inc.
    Tandberg C Series Endpoints
    risk 0.04cvss —epss 0.14

    The default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal Video units, with software before TC4.0.0 has a blank password for the root account, which makes it easier for remote attackers to obtain access via an unspecified login method.

  • CVE-2010-3039Nov 9, 2010
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.04cvss —epss 0.09

    /usr/local/cm/bin/pktCap_protectData in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6, 7, and 8 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in a request to the administrative interface, aka Bug IDs…

  • CVE-2010-3135Aug 26, 2010
    Cisco Systems, Inc.
    Packet Tracer
    risk 0.04cvss —epss 0.08

    Untrusted search path vulnerability in Cisco Packet Tracer 5.2 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .pkt or .pkz file.

  • CVE-2008-7257Jun 29, 2010
    Cisco Systems, Inc.
    WebVPN
    risk 0.04cvss —epss 0.12

    CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary HTTP headers as demonstrated by a redirect attack involving a %0d%0aLocation%3a…

  • CVE-2010-0642Feb 17, 2010
    Cisco Systems, Inc.
    Collaboration Server
    risk 0.04cvss —epss 0.08

    Cisco Collaboration Server (CCS) 5 allows remote attackers to read the source code of JHTML files via URL encoded characters in the filename extension, as demonstrated by (1) changing .jhtml to %2Ejhtml, (2) changing .jhtml to .jhtm%6C, (3) appending %00 after .jhtml, and (4)…

  • CVE-2009-1201Jun 25, 2009
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.04cvss —epss 0.09

    Eval injection vulnerability in the csco_wrap_js function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass a DOM wrapper and conduct cross-site scripting (XSS) attacks by…

  • CVE-2009-1557May 6, 2009
    Cisco Systems, Inc.
    Wvc54gca
    risk 0.04cvss —epss 0.07

    Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allow remote attackers to inject arbitrary web script or HTML via the next_file parameter to (1) main.cgi, (2) img/main.cgi, or (3)…

  • CVE-2009-1220Apr 1, 2009
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.04cvss —epss 0.09

    Cross-site scripting (XSS) vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances (ASA) 5520 with software 7.2(4)30 and earlier 7.2 versions including 7.2(2)22, and 8.0(4)28 and earlier 8.0 versions, when clientless mode is enabled, allows…

  • CVE-2008-6280Feb 25, 2009
    Linksys
    WRT160N
    risk 0.04cvss —epss 0.07

    Cross-site scripting (XSS) vulnerability in apply.cgi on the Linksys WRT160N allows remote attackers to inject arbitrary web script or HTML via the action parameter in a DHCP_Static operation.

  • CVE-2007-5381Oct 12, 2007
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.04cvss —epss 0.15

    Stack-based buffer overflow in the Line Printer Daemon (LPD) in Cisco IOS before 12.2(18)SXF11, 12.4(16a), and 12.4(2)T6 allow remote attackers to execute arbitrary code by setting a long hostname on the target system, then causing an error message to be printed, as demonstrated…

  • CVE-2007-4459Aug 21, 2007
    Cisco Systems, Inc.
    IP Phone
    risk 0.04cvss —epss 0.14

    Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.7(0), allows remote attackers to cause a denial of service (device reboot) via (1) a certain sequence of 10 invalid SIP INVITE and OPTIONS messages; or (2) a certain invalid SIP INVITE…

  • CVE-2007-4430Aug 20, 2007
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.04cvss —epss 0.13

    Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service (device restart and BGP routing table rebuild) via certain regular expressions in a "show ip bgp regexp" command. NOTE: unauthenticated remote attacks are…

  • CVE-2007-2832May 24, 2007
    Cisco Systems, Inc.
    Unified Callmanager
    risk 0.04cvss —epss 0.06

    Cross-site scripting (XSS) vulnerability in the web application firewall in Cisco CallManager before 3.3(5)sr3, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to…

  • CVE-2007-2586May 10, 2007
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.04cvss —epss 0.14

    The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which allows remote attackers to execute arbitrary code, and have other impact including reading startup-config, as demonstrated by a crafted MKD command that involves access to a VTY…

  • CVE-2007-1542Mar 20, 2007
    Cisco Systems, Inc.
    7940 Router
    risk 0.04cvss —epss 0.09

    Unspecified vulnerability in the Cisco IP Phone 7940 and 7960 running firmware before POS8-6-0 allows remote attackers to cause a denial of service via the Remote-Party-ID sipURI field in a SIP INVITE request. NOTE: the provenance of this information is unknown; the details are…

  • CVE-2006-4313Aug 23, 2006
    Cisco Systems, Inc.
    VPN 3000 series
    risk 0.04cvss —epss 0.12

    Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow attackers to execute the (1) CWD, (2) MKD, (3) CDUP, (4) RNFR, (5) SIZE, and (6) RMD FTP commands to modify files or create and delete…

  • CVE-2006-3733Jul 21, 2006
    Cisco Systems, Inc.
    Security Monitoring Analysis And Response System
    risk 0.04cvss —epss 0.12

    jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allows remote attackers to gain privileges as the CS-MARS administrator and execute arbitrary Java code…

  • CVE-2006-3109Jun 21, 2006
    Cisco Systems, Inc.
    Unified Callmanager
    risk 0.04cvss —epss 0.14

    Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3), and 4.3 before 4.3(1), allows remote attackers to inject arbitrary web script or HTML via the (1) pattern parameter in ccmadmin/phonelist.asp and (2)…

  • CVE-2006-0515May 9, 2006
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.04cvss —epss 0.10

    Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request…

  • CVE-2006-0354Jan 22, 2006
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.04cvss —epss 0.10

    Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (termination of packet passing or termination of client connections) by sending the management interface a large number of spoofed ARP packets,…

  • CVE-2006-0179Jan 11, 2006
    Cisco Systems, Inc.
    Voip Phone Cp 7940
    risk 0.04cvss —epss 0.14

    The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large amount of TCP SYN packets (syn flood) to arbitrary ports, as demonstrated to port 80.

  • CVE-2005-3774Nov 23, 2005
    Cisco Systems, Inc.
    Pix
    risk 0.04cvss —epss 0.18

    Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to create embryonic connections that that would not produce a valid connection with the end system, including (1) SYN packets with…

  • CVE-2005-2841Sep 8, 2005
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.04cvss —epss 0.14

    Buffer overflow in Firewall Authentication Proxy for FTP and/or Telnet Sessions for Cisco IOS 12.2ZH and 12.2ZL, 12.3 and 12.3T, and 12.4 and 12.4T allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted user authentication…

  • CVE-2003-1096Dec 31, 2003
    Cisco Systems, Inc.
    Leap
    risk 0.04cvss —epss 0.10

    The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary attacks, which makes it easier for remote attackers to gain privileges via brute force password guessing attacks.

  • CVE-2003-0511Aug 27, 2003
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.04cvss —epss 0.09

    The web server for Cisco Aironet AP1x00 Series Wireless devices running certain versions of IOS 12.2 allow remote attackers to cause a denial of service (reload) via a malformed URL.

  • CVE-2003-0567Aug 18, 2003
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.04cvss —epss 0.17

    Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that interface to be marked as full.

  • CVE-2003-0100Mar 3, 2003
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.04cvss —epss 0.10

    Buffer overflow in Cisco IOS 11.2.x to 12.0.x allows remote attackers to cause a denial of service and possibly execute commands via a large number of OSPF neighbor announcements.

  • CVE-2002-2315Dec 31, 2002
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.04cvss —epss 0.10

    Cisco IOS 11.2.x and 12.0.x does not limit the size of its redirect table, which allows remote attackers to cause a denial of service (memory consumption) via spoofed ICMP redirect packets to the router.

  • CVE-2002-1222Oct 28, 2002
    Cisco Systems, Inc.
    Catos
    risk 0.04cvss —epss 0.09

    Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denial of service (reset) via a long HTTP request.

  • CVE-2002-0769Aug 12, 2002
    Cisco Systems, Inc.
    Ata 186
    risk 0.04cvss —epss 0.08

    The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request with a single byte, which allows the attackers to (1) obtain the password from the login screen, or (2) reconfigure the…

  • CVE-2002-0813Aug 12, 2002
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.04cvss —epss 0.09

    Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to cause a denial of service (reset) or modify configuration via a long filename.

  • CVE-2001-0748Oct 18, 2001
    Acme
    Acme Server
    risk 0.04cvss —epss 0.09

    Acme.Serve 1.7, as used in Cisco Secure ACS Unix and possibly other products, allows remote attackers to read arbitrary files by prepending several / (slash) characters to the URI.

  • CVE-2001-0566Aug 14, 2001
    Cisco Systems, Inc.
    Catalyst 2900
    risk 0.04cvss —epss 0.06

    Cisco Catalyst 2900XL switch allows a remote attacker to create a denial of service via an empty UDP packet sent to port 161 (SNMP) when SNMP is disabled.

  • CVE-2001-0375Jun 18, 2001
    Cisco Systems, Inc.
    Pix Firewall Software
    risk 0.04cvss —epss 0.10

    Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to cause a denial of service via a large number of authentication requests.

  • CVE-2001-0041Feb 16, 2001
    Cisco Systems, Inc.
    Catos
    risk 0.04cvss —epss 0.12

    Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service via a series of failed telnet authentication attempts.

  • CVE-2001-0080Feb 12, 2001
    Cisco Systems, Inc.
    Catalyst 6000
    risk 0.04cvss —epss 0.09

    Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of service by connecting to the SSH service with a non-SSH client, which generates a protocol mismatch error.

  • CVE-2000-1022Dec 11, 2000
    Cisco Systems, Inc.
    Secure Pix Firewall
    risk 0.04cvss —epss 0.07

    The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands.

  • CVE-2000-1054Dec 11, 2000
    Cisco Systems, Inc.
    CiscoSecure ACS Server
    risk 0.04cvss —epss 0.08

    Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large packet.

  • CVE-2000-0613Mar 20, 2000
    Cisco Systems, Inc.
    Secure Pix Firewall
    risk 0.04cvss —epss 0.09

    Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to force the firewall to close legitimate connections.

  • CVE-1999-0063Jan 11, 1999
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.04cvss —epss 0.08

    Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.

  • CVE-2015-6306Sep 26, 2015
    Cisco Systems, Inc.
    Anyconnect Secure Mobility Client
    risk 0.03cvss —epss 0.01

    Cisco AnyConnect Secure Mobility Client 4.1(8) on OS X and Linux does not verify pathnames before installation actions, which allows local users to obtain root privileges via a crafted installation file, aka Bug ID CSCuv11947.

  • CVE-2015-6305Sep 26, 2015
    Cisco Systems, Inc.
    Anyconnect Secure Mobility Client
    risk 0.03cvss —epss 0.01

    Untrusted search path vulnerability in the CMainThread::launchDownloader function in vpndownloader.exe in Cisco AnyConnect Secure Mobility Client 2.0 through 4.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, as…

  • CVE-2013-7136Dec 19, 2013
    Cisco Systems, Inc.
    EPC 2425
    risk 0.03cvss —epss 0.07

    The UPC Ireland Cisco EPC 2425 router (aka Horizon Box) does not have a sufficiently large number of possible WPA-PSK passphrases, which makes it easier for remote attackers to obtain access via a brute-force attack.

  • CVE-2013-6976Dec 19, 2013
    Cisco Systems, Inc.
    Epc3925
    risk 0.03cvss —epss 0.04

    Cross-site request forgery (CSRF) vulnerability in goform/Quick_setup on Cisco EPC3925 devices allows remote attackers to hijack the authentication of administrators for requests that change a password via the Password and PasswordReEnter parameters, aka Bug ID CSCuh37496.

  • CVE-2013-7043Dec 10, 2013
    Cisco Systems, Inc.
    Scientific Atlanta Dpr\/epr2320
    risk 0.03cvss —epss 0.02

    Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Scientific Atlanta DPR2320R2 routers with software 2.0.2r1262-090417 allow remote attackers to hijack the authentication of administrators for requests that (1) change a password via the Password parameter to…

  • CVE-2013-1120Feb 6, 2013
    Cisco Systems, Inc.
    Unity Express
    risk 0.03cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Unity Express with software before 8.0 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCue35910.

Page 92 of 140