Lucene search
+L
CiscoMost viewed

5259 matches found

Cisco
Cisco
added 2021/03/03 4:00 p.m.58 views

Cisco SD-WAN vManage Directory Traversal Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a directory traversal attack and obtain read access to sensitive files on an affected system. The vulnerability is due to insufficient validation of HTTP...

4.3CVSS4.6AI score0.01162EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/11/18 4:00 p.m.58 views

Cisco IoT Field Network REST API Insufficient Input Validation Vulnerability

A vulnerability in the REST API of Cisco IoT Field Network Director FND could allow an authenticated, remote attacker to gain access to the back-end database of an affected device. The vulnerability is due to insufficient input validation of REST API requests that are made to an affected device. ...

6.3CVSS7.5AI score0.01584EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/10/21 4:00 p.m.58 views

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Denial of Service Vulnerability

Update from October 22nd, 2020: Cisco has become aware of a new Cisco Adaptive Security Appliance vulnerability that could affect the fixed releases recommended for code trains 9.13 and 9.14 in the Fixed Software "fs" section of this advisory. See the Cisco Adaptive Security Appliance Software...

8.6CVSS7.7AI score0.02665EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/10/07 4:00 p.m.58 views

Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Memory Leak Vulnerability

A vulnerability in the Cisco Discovery Protocol of Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to cause a memory leak, which could lead to a denial of service DoS condition on an affected device. The vulnerability is due to incorrect processin...

6.5CVSS2.2AI score0.00454EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/09/24 4:00 p.m.58 views

Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers DHCP Denial of Service Vulnerability

A vulnerability in the DHCP message handler of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the supervisor to crash, which could result in a denial of service DoS condition. The vulnerability is due to insufficient erro...

8.6CVSS8.6AI score0.01415EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/09/24 4:00 p.m.58 views

Cisco IOS XE Software Web UI Improper Input Validation Vulnerability

A vulnerability in the web server authentication of Cisco IOS XE Software could allow an authenticated, remote attacker to crash the web server on the device. The vulnerability is due to insufficient input validation during authentication. An attacker could exploit this vulnerability by entering...

4.3CVSS5AI score0.0167EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/09/02 4:00 p.m.58 views

Cisco Enterprise NFV Infrastructure Software File Overwrite Vulnerability

A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to overwrite certain files that should be restricted on an affected device. The vulnerability is due to insufficient authorization enforcement on an affected system...

8.1CVSS8.1AI score0.01213EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/07/15 4:00 p.m.58 views

Cisco SD-WAN vManage Software Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying filesystem of the device. The vulnerability is due to insufficient file scope limiting. An attacker could exploit this...

6.5CVSS1.1AI score0.02877EPSS
SaveExploits3References1
Cisco
Cisco
added 2020/06/17 4:00 p.m.58 views

Cisco Smart Software Manager On-Prem Improper Access Control Vulnerability

A vulnerability in the web application of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to create arbitrary user accounts. The vulnerability is due to the lack of authorization controls in the web application. An attacker could exploit this...

5.3CVSS1.6AI score0.01207EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/06/03 4:00 p.m.58 views

Cisco IOS XE Software Web UI Command Injection Vulnerability

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device. The vulnerability is due to improper input sanitization. An attacker who has valid...

7.2CVSS2.2AI score0.03531EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/03/18 4:00 p.m.58 views

Cisco SD-WAN Solution Command Injection Vulnerability

A vulnerability in the CLI of Cisco SD-WAN Solution software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating ...

7.8CVSS3.1AI score0.00557EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/01/08 4:00 p.m.58 views

Cisco Mobility Management Entity Denial of Service Vulnerability

A vulnerability in the implementation of the Stream Control Transmission Protocol SCTP on Cisco Mobility Management Entity MME could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an eNodeB that is connected to an affected device. The vulnerability is due ...

6.8CVSS1.7AI score0.01389EPSS
SaveExploits0References1
Cisco
Cisco
added 2019/05/15 4:00 p.m.58 views

Cisco NX-OS Software Command Injection Vulnerabilities (CVE-2019-1774, CVE-2019-1775)

Multiple vulnerabilities in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilities are due to insufficient validation of arguments passed to certain CLI commands. An...

6.7CVSS2.5AI score0.00522EPSS
SaveExploits0References1
Cisco
Cisco
added 2019/05/15 4:00 p.m.58 views

Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1776)

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command ...

6.7CVSS6.5AI score0.00522EPSS
SaveExploits0References1
Cisco
Cisco
added 2019/04/17 4:00 p.m.58 views

Cisco Identity Services Engine SSL Renegotiation Denial of Service Vulnerability

A vulnerability in the web interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to trigger high CPU usage, resulting in a denial of service DoS condition. The vulnerability is due to improper handling of Secure Sockets Layer SSL renegotiation requests. A...

5.3CVSS1.7AI score0.02516EPSS
SaveExploits0References1
Cisco
Cisco
added 2019/03/06 4:00 p.m.58 views

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1613)

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker coul...

4.2CVSS2.2AI score0.0086EPSS
SaveExploits1References1
Cisco
Cisco
added 2018/10/03 4:00 p.m.58 views

Cisco Firepower System Software Detection Engine Denial of Service Vulnerability

A vulnerability in the Server Message Block Version 2 SMBv2 and Version 3 SMBv3 protocol implementation for the Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause the device to run low on system memory, possibly preventing the device from forwarding traffic. ...

8.6CVSS1.7AI score0.01485EPSS
SaveExploits0References1
Cisco
Cisco
added 2018/10/03 4:00 p.m.58 views

Multiple Vulnerabilities in Cisco Identity Services Engine

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device with the privileges of the web server. For more information abo...

4.7CVSS1.8AI score0.01589EPSS
SaveExploits0References1
Cisco
Cisco
added 2018/06/20 4:00 p.m.58 views

Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution Vulnerability

A vulnerability in the Cisco Discovery Protocol component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service DoS condition on the affected device. The vulnerability exists because of...

7.5CVSS2.9AI score0.01077EPSS
SaveExploits0References1
Cisco
Cisco
added 2017/11/15 4:00 p.m.58 views

Cisco Email Security Appliance and Content Security Management Appliance HTTP Response Splitting Vulnerability

A vulnerability in the Cisco Email Security Appliance ESA and Content Security Management Appliance SMA software could allow an unauthenticated, remote attacker to conduct a HTTP response splitting attack. The vulnerability is due to the failure of the application or its environment to properly...

5.3CVSS5.2AI score0.01656EPSS
SaveExploits0References1
Cisco
Cisco
added 2017/08/16 4:00 p.m.58 views

Cisco AnyConnect WebLaunch Cross-Site Scripting Vulnerability

The WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected software. The vulnerability is due to insufficient input...

6.1CVSS6.1AI score0.0122EPSS
SaveExploits0References1
Cisco
Cisco
added 2017/04/19 4:00 p.m.58 views

Cisco ASA Software IPsec Denial of Service Vulnerability

A vulnerability in the IPsec code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper parsing of malformed IPsec packets. An attacker could exploit this vulnerability by sending malformed IPsec packets ...

7.7CVSS7.6AI score0.02842EPSS
SaveExploits0References1
Cisco
Cisco
added 2017/04/19 4:00 p.m.58 views

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

A vulnerability in the web-based GUI of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to perform a persistent cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input by the affected software. A successf...

6.1CVSS5.4AI score0.00928EPSS
SaveExploits0References1
Cisco
Cisco
added 2017/02/01 4:00 p.m.58 views

Cisco Firepower URL Bypass Vulnerability

A vulnerability in Cisco Firepower System Software could allow an unauthenticated, remote attacker to maliciously bypass the appliance's ability to block certain web content. The vulnerability is due to insufficient input validation checks within the system's access control rule criteria. An...

5.8CVSS5.7AI score0.01853EPSS
SaveExploits0References1
Cisco
Cisco
added 2017/01/25 4:00 p.m.58 views

Cisco Expressway Series and TelePresence VCS Denial of Service Vulnerability

A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service DoS condition. The vulnerability is du...

8.6CVSS8.7AI score0.03491EPSS
SaveExploits0References1
Cisco
Cisco
added 2016/12/07 4:00 p.m.58 views

Cisco AnyConnect Secure Mobility Client Local Privilege Escalation Vulnerability

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. The vulnerability is due to incorrect...

6.8CVSS7.7AI score0.03473EPSS
SaveExploits0References1
Cisco
Cisco
added 2016/09/28 4:00 p.m.58 views

Cisco IOS and IOS XE Software IP Detail Record Denial of Service Vulnerability

A vulnerability in the IP Detail Record IPDR code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected system to reload. The vulnerability is due to improper handling of IPDR packets. An attacker could exploit this vulnerability by sending crafted...

7.8CVSS7.8AI score0.02868EPSS
SaveExploits0References1
Cisco
Cisco
added 2016/09/14 4:00 p.m.58 views

Cisco IOS XR Software for NCS 6000 Series Devices OSPF Packet Processing Denial of Service Vulnerability

A vulnerability in the OSPFv3 processing of Cisco IOS XR Software for Cisco Network Convergence System NCS 6000 Series devices could allow an unauthenticated, remote attacker to cause a reload of the OSPFv3 process and result in a limited denial of service DoS condition on an affected device. The...

5CVSS5.5AI score0.01599EPSS
SaveExploits0References1
Cisco
Cisco
added 2016/08/17 4:00 p.m.58 views

Cisco Unified Communications Manager Information Disclosure Vulnerability

A vulnerability in the User Data Services UDS Application Programming Interface API for Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view confidential information that should require authentication. The vulnerability is due to improper authentication...

5CVSS7.6AI score0.02164EPSS
SaveExploits0References1
Cisco
Cisco
added 2016/01/19 8:00 a.m.58 views

Cisco Web Security Appliance Security Bypass Vulnerability

A vulnerability in the proxy engine of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to bypass security restrictions. The vulnerability is due to improper handling of malformed HTTP methods. An attacker could exploit this vulnerability by crafting an imprope...

5CVSS7.6AI score0.02082EPSS
SaveExploits0References1
Cisco
Cisco
added 2015/11/04 4:00 p.m.58 views

Cisco Web Security Appliance Range Request Denial of Service Vulnerability

A vulnerability in the file-range request functionality of Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an appliance because the appliance runs out of system memory. The vulnerability is due to a...

7.8CVSS6.7AI score0.01925EPSS
SaveExploits0References1
Cisco
Cisco
added 2015/09/02 4:00 p.m.58 views

Cisco Integrated Management Controller Supervisor and Cisco UCS Director Remote File Overwrite Vulnerability

Cisco Integrated Management Controller IMC Supervisor and Cisco UCS Director contain a remote file overwrite vulnerability that could allow an unauthenticated, remote attacker to overwrite arbitrary system files, resulting in system instability or a denial of service DoS condition. Cisco has...

7.8CVSS6.8AI score0.02817EPSS
SaveExploits0References1
Cisco
Cisco
added 2015/07/20 8:58 p.m.58 views

Cisco Videoscape Policy Resource Manager Denial of Service Vulnerability

A vulnerability in the TCP module of the Cisco Videoscape Policy Resource Manager PRM product could allow an unauthenticated, remote attacker to disable TCP ports and cause an increase in CPU and memory usage. The vulnerability is due to a lack of rate limiting in the TCP listening application. A...

5CVSS6.6AI score0.0136EPSS
SaveExploits0References1
Cisco
Cisco
added 2015/06/03 9:21 p.m.58 views

Cisco ONS 15454 System Software Denial of Service Vulnerability

A vulnerability in Cisco ONS 15454 System Software could allow an unauthenticated, remote attacker to cause the controller card on an affected device to reset, resulting in a denial of service DoS condition. The vulnerability occurs because tNetTask CPU time is consumed when the software processe...

5CVSS6.5AI score0.01988EPSS
SaveExploits0References1
Cisco
Cisco
added 2015/04/14 7:23 p.m.58 views

Cisco TelePresence Collaboration Desk and Room Endpoints HTML Redirect Vulnerability

A vulnerability within the login page of the web user interface of Cisco TelePresence Collaboration Desk and Room Endpoints devices running TC Software could allow an unauthenticated, remote attacker to conduct HTML redirection attacks. The vulnerability is due to improper input validation of...

4.3CVSS6.6AI score0.01855EPSS
SaveExploits0References1
Cisco
Cisco
added 2014/10/08 4:00 p.m.58 views

Multiple Vulnerabilities in Cisco ASA Software

2015-July-08 UPDATE: Cisco PSIRT is aware of disruption to some Cisco customers with Cisco ASA devices affected by CVE-2014-3383, the Cisco ASA VPN Denial of Service Vulnerability that was disclosed in this Security Advisory. Traffic causing the disruption was isolated to a specific source IPv4...

9CVSS7.4AI score0.01333EPSS
SaveExploits0References1
Cisco
Cisco
added 2013/12/24 7:13 p.m.58 views

Cisco IOS XE Software Telnet Authentication Bypass Vulnerability

A vulnerability in the vty authentication of Cisco IOS XE Software 03.02.xxSE and 03.03.xxSE only could allow an unauthenticated, remote attacker to access an affected device without authentication and perform actions on the device with the privileges configured for the vty line interface. The...

5.4CVSS7.2AI score0.03602EPSS
SaveExploits0References1
Cisco
Cisco
added 2013/10/02 7:39 p.m.58 views

Cisco Unified Computing System Fabric Interconnect activate firmware Command Injection Vulnerability

A vulnerability in the activate firmware command of the Cisco Unified Computing System fabric interconnect could allow an authenticated, local attacker to execute commands and obtain an interactive Linux shell as the root user. The vulnerability is due to a failure to properly sanitize user input...

6.8CVSS3AI score0.00346EPSS
SaveExploits0References1
Cisco
Cisco
added 2013/09/25 4:00 p.m.58 views

Cisco IOS Software Resource Reservation Protocol Interface Queue Wedge Vulnerability

A vulnerability in the Resource Reservation Protocol RSVP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger an interface queue wedge on the affected device. The vulnerability is due to improper parsing of UDP RSVP packets. An attack...

7.8CVSS6.9AI score0.01887EPSS
SaveExploits0References1
Cisco
Cisco
added 2013/09/25 4:00 p.m.58 views

Cisco IOS Software Multicast Network Time Protocol Denial of Service Vulnerability

A vulnerability in the implementation of the Network Time Protocol NTP feature in Cisco IOS Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability is due to the improper handling of multicas...

7.1CVSS6.9AI score0.01748EPSS
SaveExploits0References1
Cisco
Cisco
added 2013/09/24 7:40 p.m.58 views

Cisco Unified Computing System Baseboard Management Controller Privilege Escalation Vulnerability

A vulnerability in the Baseboard Management Controller BMC of Cisco Unified Computing System could allow an authenticated, remote attacker to access services with elevated privileges. The vulnerability is due to improper filtering of SSH escape sequences. An attacker could exploit this...

6.3CVSS3.8AI score0.03544EPSS
SaveExploits0References1
Cisco
Cisco
added 2013/07/17 4:11 p.m.58 views

Cisco Unified Communications Manager Privilege Escalation Vulnerability

A vulnerability in Cisco Unified Communications Manager Unified CM could allow an authenticated, local attacker to escalate privileges on the system. The vulnerability is due to improper file permissions on a privileged system binary. An attacker could exploit this vulnerability by modifying a...

6.8CVSS2.7AI score0.00388EPSS
SaveExploits0References1
Cisco
Cisco
added 2013/04/24 4:00 p.m.58 views

Cisco Device Manager Command Execution Vulnerability

Cisco Device Manager contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands on a client host with the privileges of the user. This vulnerability affects Cisco Device Manager for the Cisco MDS 9000 Family and Cisco Nexus 5000 Series Switches whe...

9.3CVSS7.4AI score0.02409EPSS
SaveExploits0References1
Cisco
Cisco
added 2013/02/13 4:57 p.m.58 views

Cisco Unified MeetingPlace Server Cross-Site Request Forgery Vulnerability

Cisco Unified MeetingPlace Server contains a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site request forgery attacks. The vulnerability is due to insufficient sanitization of user-supplied input processed by the Cisco Unified MeetingPlace software. An...

4.3CVSS1.7AI score0.00636EPSS
SaveExploits0References1
Cisco
Cisco
added 2012/10/31 4:07 p.m.58 views

Cisco Unified MeetingPlace Web Conferencing SQL Injection Vulnerability

Cisco Unified MeetingPlace Web Conferencing contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a SQL injection attack. The vulnerability is due to insufficient validation of user-supplied input to an HTTP POST method. An unauthenticated, remote attacker could...

8.5CVSS1.1AI score0.00961EPSS
SaveExploits0References1
Cisco
Cisco
added 2012/09/13 1:28 p.m.58 views

Cisco Software Encryption Library Information Disclosure Vulnerability

Cisco software contains a vulnerability that could allow an unauthenticated, remote attacker to access sensitive information on a targeted system. The vulnerability is in the encryption library used by the vulnerable software. This library allows a portion of an encrypted packet to be sent...

4.3CVSS5.7AI score0.00688EPSS
SaveExploits0References1
Cisco
Cisco
added 2012/05/10 9:06 p.m.58 views

Cisco Unified MeetingPlace SQL Injection Vulnerability

Cisco Unified MeetingPlace contains a vulnerability that could allow an authenticated, remote attacker to execute arbitrary SQL code on a targeted system. The vulnerability is due to improper validation of user-supplied input to the web-based application interface. An authenticated, remote attack...

8.5CVSS3AI score0.00961EPSS
SaveExploits0References1
Cisco
Cisco
added 2011/02/16 4:00 p.m.58 views

Management Center for Cisco Security Agent Remote Code Execution Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

10CVSS5.9AI score0.19617EPSS
SaveExploits9References1
Cisco
Cisco
added 2011/01/26 4:00 p.m.58 views

Cisco Content Services Gateway Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

7.8CVSS6AI score0.04086EPSS
SaveExploits0References1
Cisco
Cisco
added 2010/09/22 4:00 p.m.58 views

Cisco IOS SSL VPN Vulnerability

Cisco IOS® Software contains a vulnerability when the Cisco IOS SSL VPN feature is configured with an HTTP redirect. Exploitation could allow a remote, unauthenticated user to cause a memory leak on the affected devices, that could result in a memory exhaustion condition that may cause device...

7.8CVSS6.6AI score0.01763EPSS
SaveExploits0References1
Total number of security vulnerabilities5000