Cisco SD-WAN vManage HTTP Authentication User Enumeration (cisco-sa-vmanage-enumeration-64eNnDKy)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by an information disclosure vulnerability due to improper handling of HTTP headers. An unauthenticated, remote attacker can exploit this, via HTTP, to determine which accounts are valid user accounts. Please see th...

Cisco Firepower Threat Defense Software Multiple DoS (cisco-sa-asa-ftd-vpn-dos-fpBcpEcD)

According to its self-reported version, Cisco FTD Software is affected by multiple denial of service DoS vulnerabilities. A vulnerability exists due to a lack of proper input validation. An unauthenticated, remote attacker can exploit this issue, via carefully crafted HTTPS request to an affected...

Cisco Firepower Threat Defense Software DoS (cisco-sa-asaftd-dos-QFcNEPfx)

According to its self-reported version, the TCP packet processing of Cisco Firepower Threat Defense FTD Software is affected by denial of service vulnerability due to a memory exhaustion condition. An unauthenticated, remote attacker can exploit this by sending a high rate of crafted TCP traffic...

Cisco SD-WAN vManage HTTP Authentication User Enumeration Vulnerability

A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to enumerate user accounts. This vulnerability is due to the improper handling of HTTP headers. An attacker could exploit this vulnerability by sending authenticated requests to an affected system. A...

Cisco Adaptive Security Appliances Software 缓冲区错误漏洞

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance are both products of Cisco Corporation.Cisco Firepower Threat Defense is a suite of unified software that provides next-generation firewall services. Cisco Adaptive Security Appliance is a network appliance. Used to protect...

Cisco SD-WAN vManage Authorization Bypass (cisco-sa-vman-auth-bypass-Z3Zze5XC)

According to its self-reported version, Cisco SD-WAN vManage Software is affected by an unspecified vulnerability in the web-based management interface. An unauthenticated, remote attacker can exploit this by sending carefully crafted HTTP requests to the affected system. A successful exploit cou...

Cisco Catalyst 9200 Series Switches Jumbo Frame DoS (cisco-sa-JP-DOS-g5FfGm8y)

According to its self-reported version, Cisco IOS XE Software is affected by a denial of service vulnerability due to insufficient packet size validation. An unauthenticated, remote attacker can exploit this, by sending jumbo frames or frames larger than the configured MTU size to the management...

Unauthorized Access Vulnerability in Cisco Wireless-G Internet Home Monitoring Camera

Cisco is a leading global provider of networking solutions. An unauthorized access vulnerability exists in the Cisco Wireless-G Internet Home Monitoring Camera. An attacker could exploit the vulnerability to obtain sensitive information...

Cisco Unified Communications Manager Information Disclosure (cisco-sa-cucm-inf-disc-wCxZNjL2)

According to its self-reported version, the Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME are affected by information disclosure vulnerability due to improper inclusion of sensitive information in downloadable...

Cisco Unified Communications Manager Self Care Portal Authorization Bypass Vulnerability (cisco-sa-cucm-selfcare-VRWWWHgE)

According to its self-reported version, the Self Care Portal of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME is affected by authorization bypass vulnerability due to insufficient validation of user-supplied data...

CVE-2021-1459

The CVE-2021-1459 issue affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers, where an unauthenticated remote attacker can exploit improper input validation in the web-based management interface to execute arbitrary code as root. The root cause is input validation flaws in the m...

Cisco Unified Communications Manager Information Disclosure Vulnerability

A vulnerability in Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper inclusion...

Cisco Security Manager Installed (Windows)

Binary data ciscosecuritymanagerwindetect.nbin...

Cisco IOS XE Software Common Industrial Protocol Privilege Escalation (cisco-sa-XE-SAP-OPLbze68)

A vulnerability in the CLI command permissions of Cisco IOS XE Software could allow an authenticated, local attacker to retrieve the password for Common Industrial Protocol CIP and then remotely configure the device as an administrative user. This vulnerability exists because incorrect permission...

Cisco Jabber Multiple Vulnerabilities (cisco-sa-cisco-jabber-PWrTATTC)

According to its self-reported version, Cisco Jabber is affected by multiple vulnerabilities which could allow a remote, authenticated attacker to execute arbitrary programs on the underlying operating system with the privileges of the user account that is running the Cisco Jabber client software...

Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution (cisco-sa-ios-xe-iot-codexec-k46EFF6q)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Cisco IOS XE Software Fast Reload Vulnerabilities

Multiple vulnerabilities in the fast reload feature of Cisco IOS XE Software running on Cisco Catalyst 3650, Cisco Catalyst 3850, Cisco Catalyst 9300, and Cisco Catalyst 9300L Series Switches could allow an authenticated, local attacker to either execute arbitrary code on the underlying operating...

Cisco SD-WAN vEdge Routers DoS (cisco-sa-fpdos-hORBfd9f)

According to its self-reported version, Cisco SD-WAN vEdge routers are affected by a denial of service DoS vulnerability in the deep packet inspection DPI engine due to improper processing of FTP traffic. An unauthentiated, remote attacker can exploit this to cause a DoS condition. Please see the...

Cisco IOS XR Software for Cisco 8000 and NCS 540 Routers Image Verification Vulnerabilities (cisco-sa-ioxr-l-zNhcGCBt)

According to its self-reported version, the Cisco IOS XR Software is affected by multiple vulnerabilities that allow an authenticated, local attacker to execute unsigned code during the boot process, as follows: - A vulnerability in the GRUB boot loader of Cisco NCS 540 Series Routers, only when...

Cisco SD-WAN Solution SQLI (cisco-sa-20200122-sdwan-sqlinj)

According to its self-reported version, Cisco SD-WAN vManage is affected by an SQL injection SQLI vulnerability in the web interface due to insufficient validation of user-supplied input. An authenticated, remote attacker can exploit this, by sending crafted input that includes SQL statements to ...