Lucene search
+L
CiscoMost viewed

5259 matches found

Cisco
Cisco
added 2023/04/19 4:00 p.m.58 views

Cisco StarOS Software Key-Based SSH Authentication Privilege Escalation Vulnerability

A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied credentials. An attacker could exploit this...

8.8CVSS8.8AI score0.00861EPSS
SaveExploits0References1
Cisco
Cisco
added 2022/07/20 4:00 p.m.58 views

Cisco Nexus Dashboard Arbitrary File Write Vulnerability

A vulnerability in Cisco Nexus Dashboard could allow an authenticated, remote attacker to write arbitrary files on an affected device. This vulnerability is due to insufficient input validation in the web-based management interface of Cisco Nexus Dashboard. An attacker with Administrator...

4.9CVSS5.7AI score0.01042EPSS
SaveExploits0References1
Cisco
Cisco
added 2021/11/03 4:00 p.m.58 views

Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities

Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network PON Series Switches Optical Network Terminal ONT could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol i...

10CVSS8.8AI score0.0463EPSS
SaveExploits0References1
Cisco
Cisco
added 2021/10/06 4:00 p.m.58 views

Cisco Orbital Open Redirect Vulnerability

A vulnerability in the web-based management interface of Cisco Orbital could allow an unauthenticated, remote attacker to redirect users to a malicious webpage. This vulnerability is due to improper validation of URL paths in the web-based management interface. An attacker could exploit this...

4.7CVSS1.9AI score0.0097EPSS
SaveExploits0References1
Cisco
Cisco
added 2021/05/05 4:00 p.m.58 views

Cisco SD-WAN vManage HTTP Authentication User Enumeration Vulnerability

A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to enumerate user accounts. This vulnerability is due to the improper handling of HTTP headers. An attacker could exploit this vulnerability by sending authenticated requests to an affected system. A...

5.3CVSS5.2AI score0.01221EPSS
SaveExploits0References1
Cisco
Cisco
added 2021/05/05 4:00 p.m.58 views

Cisco SD-WAN vManage Information Disclosure Vulnerability

A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. To be affected by this vulnerability, the Cisco SD-WAN vManage Software must be in cluster mode. This...

5.3CVSS5.2AI score0.01218EPSS
SaveExploits0References1
Cisco
Cisco
added 2021/03/03 4:00 p.m.58 views

Cisco SD-WAN vManage Directory Traversal Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a directory traversal attack and obtain read access to sensitive files on an affected system. The vulnerability is due to insufficient validation of HTTP...

4.3CVSS4.6AI score0.01162EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/11/18 4:00 p.m.58 views

Cisco IoT Field Network REST API Insufficient Input Validation Vulnerability

A vulnerability in the REST API of Cisco IoT Field Network Director FND could allow an authenticated, remote attacker to gain access to the back-end database of an affected device. The vulnerability is due to insufficient input validation of REST API requests that are made to an affected device. ...

6.3CVSS7.5AI score0.01584EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/10/21 4:00 p.m.58 views

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Denial of Service Vulnerability

Update from October 22nd, 2020: Cisco has become aware of a new Cisco Adaptive Security Appliance vulnerability that could affect the fixed releases recommended for code trains 9.13 and 9.14 in the Fixed Software "fs" section of this advisory. See the Cisco Adaptive Security Appliance Software...

8.6CVSS7.7AI score0.02665EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/10/21 4:00 p.m.58 views

Cisco Firepower Management Center Software and Firepower Threat Defense Software Directory Traversal Vulnerability

A vulnerability in the sfmgr daemon of Cisco Firepower Management Center FMC Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to perform directory traversal and access directories outside the restricted path. The vulnerability is due to...

8.1CVSS8.3AI score0.02205EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/10/07 4:00 p.m.58 views

Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Memory Leak Vulnerability

A vulnerability in the Cisco Discovery Protocol of Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to cause a memory leak, which could lead to a denial of service DoS condition on an affected device. The vulnerability is due to incorrect processin...

6.5CVSS2.2AI score0.00454EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/09/24 4:00 p.m.58 views

Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers DHCP Denial of Service Vulnerability

A vulnerability in the DHCP message handler of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the supervisor to crash, which could result in a denial of service DoS condition. The vulnerability is due to insufficient erro...

8.6CVSS8.6AI score0.01415EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/09/02 4:00 p.m.58 views

Cisco Enterprise NFV Infrastructure Software File Overwrite Vulnerability

A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to overwrite certain files that should be restricted on an affected device. The vulnerability is due to insufficient authorization enforcement on an affected system...

8.1CVSS8.1AI score0.01213EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/07/15 4:00 p.m.58 views

Cisco SD-WAN vManage Software Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying filesystem of the device. The vulnerability is due to insufficient file scope limiting. An attacker could exploit this...

6.5CVSS1.1AI score0.02877EPSS
SaveExploits3References1
Cisco
Cisco
added 2020/06/17 4:00 p.m.58 views

Cisco Smart Software Manager On-Prem Improper Access Control Vulnerability

A vulnerability in the web application of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to create arbitrary user accounts. The vulnerability is due to the lack of authorization controls in the web application. An attacker could exploit this...

5.3CVSS1.6AI score0.01207EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/06/03 4:00 p.m.58 views

Cisco IOx Application Framework Arbitrary File Overwrite Vulnerability

A vulnerability in the Cisco Application Framework component of the Cisco IOx application environment could allow an authenticated, local attacker to overwrite arbitrary files in the virtual instance that is running on the affected device. The vulnerability is due to insufficient path restriction...

6.3CVSS1.6AI score0.0035EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/05/06 4:00 p.m.58 views

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software BGP Denial of Service Vulnerability

A vulnerability in the implementation of the Border Gateway Protocol BGP module in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to...

6.8CVSS6.6AI score0.01233EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/01/08 4:00 p.m.58 views

Cisco Mobility Management Entity Denial of Service Vulnerability

A vulnerability in the implementation of the Stream Control Transmission Protocol SCTP on Cisco Mobility Management Entity MME could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an eNodeB that is connected to an affected device. The vulnerability is due ...

6.8CVSS1.7AI score0.01389EPSS
SaveExploits0References1
Cisco
Cisco
added 2019/05/15 4:00 p.m.58 views

Cisco NX-OS Software Command Injection Vulnerabilities (CVE-2019-1774, CVE-2019-1775)

Multiple vulnerabilities in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilities are due to insufficient validation of arguments passed to certain CLI commands. An...

6.7CVSS2.5AI score0.00522EPSS
SaveExploits0References1
Cisco
Cisco
added 2019/05/15 4:00 p.m.58 views

Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1776)

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command ...

6.7CVSS6.5AI score0.00522EPSS
SaveExploits0References1
Cisco
Cisco
added 2019/04/17 4:00 p.m.58 views

Cisco Prime Network Registrar Denial of Service Vulnerability

A vulnerability in the DHCPv6 input packet processor of Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to restart the server and cause a denial of service DoS condition on the affected system. The vulnerability is due to incomplete user-supplied input validation whe...

8.6CVSS1.2AI score0.02443EPSS
SaveExploits0References1
Cisco
Cisco
added 2019/04/17 4:00 p.m.58 views

Cisco Identity Services Engine SSL Renegotiation Denial of Service Vulnerability

A vulnerability in the web interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to trigger high CPU usage, resulting in a denial of service DoS condition. The vulnerability is due to improper handling of Secure Sockets Layer SSL renegotiation requests. A...

5.3CVSS1.7AI score0.02516EPSS
SaveExploits0References1
Cisco
Cisco
added 2019/03/06 4:00 p.m.58 views

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1613)

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker coul...

4.2CVSS2.2AI score0.0086EPSS
SaveExploits1References1
Cisco
Cisco
added 2018/10/03 4:00 p.m.58 views

Cisco Firepower System Software Detection Engine Denial of Service Vulnerability

A vulnerability in the Server Message Block Version 2 SMBv2 and Version 3 SMBv3 protocol implementation for the Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause the device to run low on system memory, possibly preventing the device from forwarding traffic. ...

8.6CVSS1.7AI score0.01485EPSS
SaveExploits0References1
Cisco
Cisco
added 2018/10/03 4:00 p.m.58 views

Multiple Vulnerabilities in Cisco Identity Services Engine

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device with the privileges of the web server. For more information abo...

4.7CVSS1.8AI score0.01589EPSS
SaveExploits0References1
Cisco
Cisco
added 2018/06/20 4:00 p.m.58 views

Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution Vulnerability

A vulnerability in the Cisco Discovery Protocol component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service DoS condition on the affected device. The vulnerability exists because of...

7.5CVSS2.9AI score0.01077EPSS
SaveExploits0References1
Cisco
Cisco
added 2017/11/15 4:00 p.m.58 views

Cisco Email Security Appliance and Content Security Management Appliance HTTP Response Splitting Vulnerability

A vulnerability in the Cisco Email Security Appliance ESA and Content Security Management Appliance SMA software could allow an unauthenticated, remote attacker to conduct a HTTP response splitting attack. The vulnerability is due to the failure of the application or its environment to properly...

5.3CVSS5.2AI score0.01656EPSS
SaveExploits0References1
Cisco
Cisco
added 2017/09/06 4:00 p.m.58 views

Cisco Emergency Responder Blind SQL Injection Vulnerability

A vulnerability in the SQL database interface for Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a failure to validate user-supplied input used in SQL queries that bypass protection filters. An attacker...

5.4CVSS5.9AI score0.00968EPSS
SaveExploits0References1
Cisco
Cisco
added 2017/08/16 4:00 p.m.58 views

Cisco AnyConnect WebLaunch Cross-Site Scripting Vulnerability

The WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected software. The vulnerability is due to insufficient input...

6.1CVSS6.1AI score0.0122EPSS
SaveExploits0References1
Cisco
Cisco
added 2017/04/19 4:00 p.m.58 views

Cisco ASA Software IPsec Denial of Service Vulnerability

A vulnerability in the IPsec code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper parsing of malformed IPsec packets. An attacker could exploit this vulnerability by sending malformed IPsec packets ...

7.7CVSS7.6AI score0.02842EPSS
SaveExploits0References1
Cisco
Cisco
added 2017/04/19 4:00 p.m.58 views

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

A vulnerability in the web-based GUI of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to perform a persistent cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input by the affected software. A successf...

6.1CVSS5.4AI score0.00928EPSS
SaveExploits0References1
Cisco
Cisco
added 2017/02/01 4:00 p.m.58 views

Cisco Firepower URL Bypass Vulnerability

A vulnerability in Cisco Firepower System Software could allow an unauthenticated, remote attacker to maliciously bypass the appliance's ability to block certain web content. The vulnerability is due to insufficient input validation checks within the system's access control rule criteria. An...

5.8CVSS5.7AI score0.01853EPSS
SaveExploits0References1
Cisco
Cisco
added 2017/01/25 4:00 p.m.58 views

Cisco Expressway Series and TelePresence VCS Denial of Service Vulnerability

A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service DoS condition. The vulnerability is du...

8.6CVSS8.7AI score0.03491EPSS
SaveExploits0References1
Cisco
Cisco
added 2016/12/07 4:00 p.m.58 views

Cisco AnyConnect Secure Mobility Client Local Privilege Escalation Vulnerability

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. The vulnerability is due to incorrect...

6.8CVSS7.7AI score0.03473EPSS
SaveExploits0References1
Cisco
Cisco
added 2016/10/12 4:00 p.m.58 views

Cisco cBR-8 Converged Broadband Router vty Integrity Vulnerability

A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause a configuration integrity change to the vty line configuration on an affected device. The vulnerability is due to a logic processing error that exis...

4.3CVSS5.8AI score0.01221EPSS
SaveExploits0References1
Cisco
Cisco
added 2016/09/28 4:00 p.m.58 views

Cisco IOS and IOS XE Software IP Detail Record Denial of Service Vulnerability

A vulnerability in the IP Detail Record IPDR code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected system to reload. The vulnerability is due to improper handling of IPDR packets. An attacker could exploit this vulnerability by sending crafted...

7.8CVSS7.8AI score0.02868EPSS
SaveExploits0References1
Cisco
Cisco
added 2016/09/14 4:00 p.m.58 views

Cisco IOS XR Software for NCS 6000 Series Devices OSPF Packet Processing Denial of Service Vulnerability

A vulnerability in the OSPFv3 processing of Cisco IOS XR Software for Cisco Network Convergence System NCS 6000 Series devices could allow an unauthenticated, remote attacker to cause a reload of the OSPFv3 process and result in a limited denial of service DoS condition on an affected device. The...

5CVSS5.5AI score0.01599EPSS
SaveExploits0References1
Cisco
Cisco
added 2016/08/17 4:00 p.m.58 views

Cisco Unified Communications Manager Information Disclosure Vulnerability

A vulnerability in the User Data Services UDS Application Programming Interface API for Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view confidential information that should require authentication. The vulnerability is due to improper authentication...

5CVSS7.6AI score0.02164EPSS
SaveExploits0References1
Cisco
Cisco
added 2016/01/19 8:00 a.m.58 views

Cisco Web Security Appliance Security Bypass Vulnerability

A vulnerability in the proxy engine of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to bypass security restrictions. The vulnerability is due to improper handling of malformed HTTP methods. An attacker could exploit this vulnerability by crafting an imprope...

5CVSS7.6AI score0.02082EPSS
SaveExploits0References1
Cisco
Cisco
added 2015/11/04 4:00 p.m.58 views

Cisco Web Security Appliance Range Request Denial of Service Vulnerability

A vulnerability in the file-range request functionality of Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an appliance because the appliance runs out of system memory. The vulnerability is due to a...

7.8CVSS6.7AI score0.01925EPSS
SaveExploits0References1
Cisco
Cisco
added 2015/08/20 1:45 p.m.58 views

Cisco Prime Infrastructure Privilege Escalation Vulnerability

A vulnerability in the Cisco Prime Infrastructure PI username storage and authentication process could allow an authenticated, remote attacker to gain elevated privileges on a targeted system. The vulnerability occurs because the affected software saves case-sensitive usernames and performs...

4CVSS7.1AI score0.01778EPSS
SaveExploits0References1
Cisco
Cisco
added 2015/08/18 3:47 p.m.58 views

Cisco TelePresence Video Communication Server Expressway Command Injection Vulnerability

A vulnerability in the administrator web interface of the Cisco TelePresence Video Communication Server VCS Expressway could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of a targeted device. The vulnerability is due to insufficient inpu...

6CVSS7.3AI score0.02286EPSS
SaveExploits0References1
Cisco
Cisco
added 2015/07/20 8:58 p.m.58 views

Cisco Videoscape Policy Resource Manager Denial of Service Vulnerability

A vulnerability in the TCP module of the Cisco Videoscape Policy Resource Manager PRM product could allow an unauthenticated, remote attacker to disable TCP ports and cause an increase in CPU and memory usage. The vulnerability is due to a lack of rate limiting in the TCP listening application. A...

5CVSS6.6AI score0.0136EPSS
SaveExploits0References1
Cisco
Cisco
added 2015/06/03 9:21 p.m.58 views

Cisco ONS 15454 System Software Denial of Service Vulnerability

A vulnerability in Cisco ONS 15454 System Software could allow an unauthenticated, remote attacker to cause the controller card on an affected device to reset, resulting in a denial of service DoS condition. The vulnerability occurs because tNetTask CPU time is consumed when the software processe...

5CVSS6.5AI score0.01988EPSS
SaveExploits0References1
Cisco
Cisco
added 2015/04/14 7:23 p.m.58 views

Cisco TelePresence Collaboration Desk and Room Endpoints HTML Redirect Vulnerability

A vulnerability within the login page of the web user interface of Cisco TelePresence Collaboration Desk and Room Endpoints devices running TC Software could allow an unauthenticated, remote attacker to conduct HTML redirection attacks. The vulnerability is due to improper input validation of...

4.3CVSS6.6AI score0.01855EPSS
SaveExploits0References1
Cisco
Cisco
added 2015/03/14 5:01 a.m.58 views

Cisco AnyConnect Secure Mobility Client Hostscan Path Traversal Vulnerability

A vulnerability in the inter-process communication IPC channel of the Cisco AnyConnect Secure Mobility Client Hostscan module could allow an authenticated, local attacker to write and overwrite arbitrary files with elevated privileges. The vulnerability is due to insufficient path traversal...

4.6CVSS6.3AI score0.00386EPSS
SaveExploits0References1
Cisco
Cisco
added 2014/10/08 4:00 p.m.58 views

Multiple Vulnerabilities in Cisco ASA Software

2015-July-08 UPDATE: Cisco PSIRT is aware of disruption to some Cisco customers with Cisco ASA devices affected by CVE-2014-3383, the Cisco ASA VPN Denial of Service Vulnerability that was disclosed in this Security Advisory. Traffic causing the disruption was isolated to a specific source IPv4...

9CVSS7.4AI score0.01333EPSS
SaveExploits0References1
Cisco
Cisco
added 2013/12/24 7:13 p.m.58 views

Cisco IOS XE Software Telnet Authentication Bypass Vulnerability

A vulnerability in the vty authentication of Cisco IOS XE Software 03.02.xxSE and 03.03.xxSE only could allow an unauthenticated, remote attacker to access an affected device without authentication and perform actions on the device with the privileges configured for the vty line interface. The...

5.4CVSS7.2AI score0.03602EPSS
SaveExploits0References1
Cisco
Cisco
added 2013/09/25 4:00 p.m.58 views

Cisco IOS Software Multicast Network Time Protocol Denial of Service Vulnerability

A vulnerability in the implementation of the Network Time Protocol NTP feature in Cisco IOS Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability is due to the improper handling of multicas...

7.1CVSS6.9AI score0.01748EPSS
SaveExploits0References1
Cisco
Cisco
added 2013/09/24 7:40 p.m.58 views

Cisco Unified Computing System Baseboard Management Controller Privilege Escalation Vulnerability

A vulnerability in the Baseboard Management Controller BMC of Cisco Unified Computing System could allow an authenticated, remote attacker to access services with elevated privileges. The vulnerability is due to improper filtering of SSH escape sequences. An attacker could exploit this...

6.3CVSS3.8AI score0.03544EPSS
SaveExploits0References1
Total number of security vulnerabilities5000