VYPR
← Cisco Systems, Inc.

Vendor CVEs

Cisco Systems, Inc.

All CVEs

6,961 total · sorted by risk
  • CVE-2015-6425Dec 16, 2015
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.02

    The WebApplications Identity Management subsystem in Cisco Unified Communications Manager 10.5(0.98000.88) allows remote attackers to cause a denial of service (subsystem outage) via invalid session tokens, aka Bug ID CSCul83786.

  • CVE-2015-6411Dec 15, 2015
    Cisco Systems, Inc.
    Secure Firewall Management Center
    risk 0.00cvss —epss 0.01

    Cisco FirePOWER Management Center 5.4.1.3, 6.0.0, and 6.0.1 provides verbose responses to requests for help files, which allows remote attackers to obtain potentially sensitive version information by reading an unspecified field, aka Bug ID CSCux37061.

  • CVE-2015-6404Dec 15, 2015
    Cisco Systems, Inc.
    Hosted Collaboration Mediation Fulfillment
    risk 0.00cvss —epss 0.01

    Cisco Hosted Collaboration Mediation Fulfillment 10.6(3) does not use RBAC, which allows remote authenticated users to obtain sensitive credential information by leveraging admin access and making SOAP API requests, aka Bug ID CSCuw84374.

  • CVE-2015-6403Dec 15, 2015
    Cisco Systems, Inc.
    Spa300 Firmware
    risk 0.00cvss —epss 0.00

    The TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.5.7 improperly validates firmware-image file integrity, which allows local users to load a Trojan horse image by leveraging shell access, aka Bug ID CSCut67400.

  • CVE-2015-6399Dec 15, 2015
    Cisco Systems, Inc.
    Supervisor
    risk 0.00cvss —epss 0.02

    The Supervisor 1.0.0.0 and 1.0.0.1 in Cisco Integrated Management Controller (IMC) before 2.0(9) allows remote authenticated users to cause a denial of service (IP interface outage) via crafted parameters in an HTTP request, aka Bug ID CSCuv38286.

  • CVE-2015-6359Dec 15, 2015
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.01

    The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS 15.3(3)S0.1 on ASR devices mishandles internal tables, which allows remote attackers to cause a denial of service (memory consumption or device crash) via a flood of crafted ND messages, aka Bug…

  • CVE-2015-4206Dec 15, 2015
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.02

    Cisco Unified Communications Manager (UCM) 8.0 through 8.6 allows remote attackers to bypass an XSS protection mechanism via a crafted parameter, aka Bug ID CSCuu15266.

  • CVE-2015-6422Dec 14, 2015
    Cisco Systems, Inc.
    Unified Communications Domain Manager
    risk 0.00cvss —epss 0.02

    The self-service application in Cisco Unified Communications Domain Manager (CUCDM) 10.6(1) allows remote authenticated users to cause a denial of service (subapplication outage) via malformed requests, aka Bug ID CSCuu10981.

  • CVE-2015-6416Dec 14, 2015
    Cisco Systems, Inc.
    Unified Web And E Mail Interaction Manager
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Cisco Unified Email Interaction Manager and Unified Web Interaction Manager 11.0(1) allows remote attackers to inject arbitrary web script or HTML a crafted URL, aka Bug ID CSCuw24479.

  • CVE-2015-6410Dec 14, 2015
    Cisco Systems, Inc.
    Unified Communications Manager
    risk 0.00cvss —epss 0.02

    The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager mishandles edge-device identity validation, which allows remote attackers to bypass intended call-reception and call-setup restrictions by spoofing a user, aka Bug ID CSCuu97283.

  • CVE-2015-6378Dec 14, 2015
    Cisco Systems, Inc.
    DPQ3925
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability on Cisco DPQ3925 devices with EDVA 5.5.2 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv05943.

  • CVE-2015-6418Dec 13, 2015
    Cisco Systems, Inc.
    SA500 security appliances
    risk 0.00cvss —epss 0.02

    The random-number generator on Cisco Small Business RV routers 4.x and SA500 security appliances 2.2.07 does not have sufficient entropy, which makes it easier for remote attackers to determine a TLS key pair via unspecified computations upon handshake key-exchange data, aka Bug…

  • CVE-2015-6414Dec 13, 2015
    Cisco Systems, Inc.
    Telepresence Video Communication Server
    risk 0.00cvss —epss 0.00

    Cisco TelePresence Video Communication Server (VCS) X8.6 uses the same encryption key across different customers' installations, which makes it easier for local users to defeat cryptographic protection mechanisms by leveraging knowledge of a key from another installation, aka…

  • CVE-2015-6413Dec 13, 2015
    Cisco Systems, Inc.
    Telepresence Video Communication Server
    risk 0.00cvss —epss 0.02

    Cisco TelePresence Video Communication Server (VCS) Expressway X8.6 allows remote authenticated users to bypass intended read-only restrictions and upload Tandberg Linux Package (TLP) files by visiting an administrative page, aka Bug ID CSCuw55651.

  • CVE-2015-6407Dec 13, 2015
    Cisco Systems, Inc.
    Emergency Responder
    risk 0.00cvss —epss 0.02

    Cisco Emergency Responder 10.5(3.10000.9) allows remote attackers to upload files to arbitrary locations via a crafted parameter, aka Bug ID CSCuv25501.

  • CVE-2015-6406Dec 13, 2015
    Cisco Systems, Inc.
    Emergency Responder
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in the Tools menu in Cisco Emergency Responder 10.5(1.10000.5) allows remote authenticated users to write to arbitrary files via a crafted filename, aka Bug ID CSCuv21781.

  • CVE-2015-6405Dec 13, 2015
    Cisco Systems, Inc.
    Emergency Responder
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Cisco Emergency Responder 10.5(1) and 10.5(1a) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv26501.

  • CVE-2015-6400Dec 13, 2015
    Cisco Systems, Inc.
    Emergency Responder
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 10.5(1a) allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug ID CSCuv25547.

  • CVE-2015-6389Dec 13, 2015
    Cisco Systems, Inc.
    Prime Collaboration Assurance
    risk 0.00cvss —epss 0.03

    Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session and leveraging knowledge of this account's password, aka Bug ID CSCus62707.

  • CVE-2015-6361Dec 13, 2015
    Cisco Systems, Inc.
    DPC3939
    risk 0.00cvss —epss 0.01

    The administrative web interface on Cisco DPC3939 (XB3) devices with firmware 121109aCMCST allows remote authenticated users to execute arbitrary commands via unspecified fields, aka Bug ID CSCuw86170.

  • CVE-2015-6419Dec 12, 2015
    Cisco Systems, Inc.
    FireSIGHT Management Center
    risk 0.00cvss —epss 0.01

    Cisco FireSIGHT Management Center with software 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote authenticated users to read arbitrary files via a crafted GET request, aka Bug ID CSCur25410.

  • CVE-2015-6415Dec 12, 2015
    Cisco Systems, Inc.
    Unified Computing System
    risk 0.00cvss —epss 0.02

    Cisco Unified Computing System (UCS) 2.2(3f)A on Fabric Interconnect 6200 devices allows remote attackers to cause a denial of service (CPU consumption or device outage) via a SYN flood on the SSH port during the booting process, aka Bug ID CSCuu81757.

  • CVE-2015-6408Dec 12, 2015
    Cisco Systems, Inc.
    Unity Connection
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Cisco Unity Connection 11.5(0.98) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCux24578.

  • CVE-2015-6417Dec 12, 2015
    Cisco Systems, Inc.
    Videoscape Distribution Suite Service Manager
    risk 0.00cvss —epss 0.01

    Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.4.0 and earlier does not always use RBAC for backend database access, which allows remote authenticated users to read or write to database entries via (1) the GUI or (2) a crafted HTTP request, aka Bug ID CSCuv87025.

  • CVE-2015-6395Dec 12, 2015
    Cisco Systems, Inc.
    Prime Service Catalog
    risk 0.00cvss —epss 0.02

    Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configuration via a direct request, aka Bug ID CSCuw48188.

  • CVE-2015-6394Dec 5, 2015
    Cisco Systems, Inc.
    Nx OS
    risk 0.00cvss —epss 0.00

    The kernel in Cisco NX-OS 5.2(9)N1(1) on Nexus 5000 devices allows local users to cause a denial of service (device crash) via crafted USB parameters, aka Bug ID CSCus89408.

  • CVE-2015-6391Dec 5, 2015
    Cisco Systems, Inc.
    Unified SIP 3905
    risk 0.00cvss —epss 0.02

    Cisco Unified SIP 3905 phones allow remote attackers to cause a denial of service (resource consumption and functionality loss) via a large amount of network traffic, aka Bug ID CSCuh51331.

  • CVE-2015-6388Dec 5, 2015
    Cisco Systems, Inc.
    Unified Computing System Central Software
    risk 0.00cvss —epss 0.02

    Cisco Unified Computing System (UCS) Central software 1.3(0.1) allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted request, aka Bug ID CSCux33575.

  • CVE-2015-6387Dec 5, 2015
    Cisco Systems, Inc.
    Unified Computing System Central Software
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Cisco Unified Computing System (UCS) Central Software 1.3(0.1) allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCux33573.

  • CVE-2015-6384Dec 5, 2015
    Cisco Systems, Inc.
    Webex Meetings
    risk 0.00cvss —epss 0.02

    The Cisco WebEx Meetings application before 8.5.1 for Android improperly initializes custom application permissions, which allows attackers to bypass intended access restrictions via a crafted application, aka Bug ID CSCuw86442.

  • CVE-2015-6390Dec 3, 2015
    Cisco Systems, Inc.
    Unity Connection
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unity Connection 9.1(1.10) allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCup92741.

  • CVE-2015-6383Dec 3, 2015
    Cisco Systems, Inc.
    iOS Xe
    risk 0.00cvss —epss 0.00

    Cisco IOS XE 15.4(3)S on ASR 1000 devices improperly loads software packages, which allows local users to bypass license restrictions and obtain certain root privileges by using the CLI to enter crafted filenames, aka Bug ID CSCuv93130.

  • CVE-2015-6386Dec 1, 2015
    Cisco Systems, Inc.
    Web Security Appliance
    risk 0.00cvss —epss 0.02

    The passthrough FTP feature on Cisco Web Security Appliance (WSA) devices with software 8.0.7-142 and 8.5.1-021 allows remote attackers to cause a denial of service (CPU consumption) via FTP sessions in which the control connection is ended after data transfer, aka Bug ID…

  • CVE-2015-6385Dec 1, 2015
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.00

    The publish-event event-manager feature in Cisco IOS 15.5(2)S and 15.5(3)S on Cloud Services Router 1000V devices allows local users to execute arbitrary commands with root privileges by leveraging administrative access to enter crafted environment variables, aka Bug ID…

  • CVE-2015-6382Nov 26, 2015
    Cisco Systems, Inc.
    Asr 5000
    risk 0.00cvss —epss 0.02

    Cisco ASR 5000 devices with software 16.0(900) allow remote attackers to cause a denial of service (telnetd process restart) via a TELNET connection, aka Bug ID CSCuv25815.

  • CVE-2015-6379Nov 25, 2015
    Cisco Systems, Inc.
    Cisco Adaptive Security Appliance
    risk 0.00cvss —epss 0.02

    The XML parser in the management interface in Cisco Adaptive Security Appliance (ASA) Software 8.4 allows remote authenticated users to cause a denial of service (device crash) via a crafted XML document, aka Bug ID CSCut14223.

  • CVE-2015-6380Nov 24, 2015
    Cisco Systems, Inc.
    Firepower Extensible Operating System
    risk 0.00cvss —epss 0.01

    An unspecified script in the web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote authenticated users to execute arbitrary OS commands via crafted parameters, aka Bug ID CSCux10622.

  • CVE-2015-6377Nov 24, 2015
    Cisco Systems, Inc.
    Virtual Topology System
    risk 0.00cvss —epss 0.02

    Cisco Virtual Topology System (VTS) 2.0(0) and 2.0(1) allows remote attackers to cause a denial of service (CPU and memory consumption, and TCP port outage) via a flood of crafted TCP packets, aka Bug ID CSCux13379.

  • CVE-2015-6376Nov 21, 2015
    Cisco Systems, Inc.
    Telepresence Video Communication Server
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv72412.

  • CVE-2015-6375Nov 21, 2015
    Cisco Systems, Inc.
    Cisco iOS
    risk 0.00cvss —epss 0.00

    The debug-logging (aka debug cns) feature in Cisco Networking Services (CNS) for IOS 15.2(2)E3 allows local users to obtain sensitive information by reading an unspecified file, aka Bug ID CSCux18010.

  • CVE-2015-6374Nov 19, 2015
    Cisco Systems, Inc.
    Firepower Extensible Operating System
    risk 0.00cvss —epss 0.01

    The web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web…

  • CVE-2015-6371Nov 19, 2015
    Cisco Systems, Inc.
    Firepower Extensible Operating System
    risk 0.00cvss —epss 0.01

    Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote authenticated users to read arbitrary files via crafted parameters to unspecified scripts, aka Bug ID CSCux10621.

  • CVE-2015-6370Nov 19, 2015
    Cisco Systems, Inc.
    Firepower Extensible Operating System
    risk 0.00cvss —epss 0.00

    The Management I/O (MIO) component in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows local users to execute arbitrary OS commands as root via crafted CLI input, aka Bug ID CSCux10578.

  • CVE-2015-6369Nov 19, 2015
    Cisco Systems, Inc.
    Firepower Extensible Operating System
    risk 0.00cvss —epss 0.00

    The USB driver in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows physically proximate attackers to cause a denial of service via a crafted USB device that triggers invalid USB commands, aka Bug ID CSCux10531.

  • CVE-2015-6368Nov 19, 2015
    Cisco Systems, Inc.
    Firepower Extensible Operating System
    risk 0.00cvss —epss 0.01

    Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote attackers to read files via a crafted HTTP request, aka Bug ID CSCux10608.

  • CVE-2015-6373Nov 18, 2015
    Cisco Systems, Inc.
    Firepower Extensible Operating System
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCux10611.

  • CVE-2015-6372Nov 18, 2015
    Cisco Systems, Inc.
    Firepower Extensible Operating System
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCux10614.

  • CVE-2015-6357Nov 18, 2015
    Cisco Systems, Inc.
    FireSIGHT Management Center
    risk 0.00cvss —epss 0.03

    The rule-update feature in Cisco FireSIGHT Management Center (MC) 5.2 through 5.4.0.1 does not verify the X.509 certificate of the support.sourcefire.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide an invalid package, and consequently…

  • CVE-2015-6330Nov 18, 2015
    Cisco Systems, Inc.
    Prime Collaboration Assurance
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in Cisco Prime Collaboration Assurance 10.5(1) and 10.6 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus62712.

  • CVE-2015-6367Nov 14, 2015
    Cisco Systems, Inc.
    Aironet 1800
    risk 0.00cvss —epss 0.02

    Cisco Aironet 1800 devices with software 8.1(131.0) allow remote attackers to cause a denial of service (CPU consumption) by improperly establishing many SSHv2 connections, aka Bug ID CSCux13374.

Page 95 of 140