Lucene search
+L
CiscoMost viewed

5259 matches found

Cisco
Cisco
added 2010/03/03 4:00 p.m.58 views

Multiple Vulnerabilities in Cisco Digital Media Manager

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

10CVSS6AI score0.04534EPSS
SaveExploits0References1
Cisco
Cisco
added 2009/09/23 4:00 p.m.58 views

Cisco IOS Software H.323 Denial of Service Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

7.8CVSS6.2AI score0.02945EPSS
SaveExploits0References1
Cisco
Cisco
added 2009/09/23 4:00 p.m.58 views

Cisco IOS Software Tunnels Vulnerability

Cisco devices running affected versions of Cisco IOS Software are vulnerable to a denial of service DoS attack if configured for IP tunnels and Cisco Express Forwarding. Cisco has released software updates that address this vulnerability. This advisory is posted at...

7.1CVSS6.5AI score0.02309EPSS
SaveExploits0References1
Cisco
Cisco
added 2009/03/25 12:00 a.m.58 views

Cisco IOS Software Multiple Features Crafted TCP Sequence Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

5.4CVSS6AI score0.04025EPSS
SaveExploits0References1
Cisco
Cisco
added 2005/04/06 4:00 p.m.58 views

Vulnerabilities in the Internet Key Exchange Xauth Implementation

Cisco Internetwork Operating System IOS Software release trains 12.2T, 12.3 and 12.3T may contain vulnerabilities in processing certain Internet Key Exchange IKE Xauth messages when configured to be an Easy VPN Server. Successful exploitation of these vulnerabilities may permit an unauthorized us...

7.5CVSS1.3AI score0.01444EPSS
SaveExploits0References1
Cisco
Cisco
added 2024/07/10 4:00 p.m.57 views

Cisco IOS XR Software Secure Boot Bypass Vulnerability

A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Cisco Secure Boot functionality and load unverified software on an affected device. To exploit this successfully, the attacker must have root-system...

6.7CVSS5.8AI score0.00191EPSS
SaveExploits0References1
Cisco
Cisco
added 2023/11/01 4:00 p.m.57 views

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Access SSL VPN Multiple Certificate Authentication Bypass Vulnerability

A vulnerability in the remote access SSL VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to bypass a configured multiple certificate authentication policy and connect using only a valid...

5CVSS5AI score0.00292EPSS
SaveExploits0References1
Cisco
Cisco
added 2022/10/05 4:00 p.m.57 views

Cisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities

Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP for Cisco ATA 190 Series Analog Telephone Adapter Software could allow an attacker to execute code, cause the service to reload unexpectedly, or cause Cisco Discovery Protocol or LLDP database corrupti...

5.3CVSS6.1AI score0.00935EPSS
SaveExploits0References1
Cisco
Cisco
added 2022/07/06 4:00 p.m.57 views

Cisco Unified Communications Products Access Control Vulnerability

A vulnerability in the Disaster Recovery framework of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, and Cisco Unity Connection could allow an authenticated, remote attacker to perform certain administrative actions the...

6.5CVSS7.5AI score0.01231EPSS
SaveExploits0References1
Cisco
Cisco
added 2022/04/13 4:00 p.m.57 views

Cisco IOS XE Software Web UI API Injection Vulnerability

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input...

4.7CVSS6AI score0.01605EPSS
SaveExploits0References1
Cisco
Cisco
added 2021/06/16 4:00 p.m.57 views

Cisco DNA Center Certificate Validation Vulnerability

A vulnerability in the Cisco Identity Services Engine ISE integration feature of the Cisco DNA Center Software could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to an incomplete validation of the X.509 certificate used when...

7.4CVSS7.6AI score0.00774EPSS
SaveExploits0References1
Cisco
Cisco
added 2021/05/05 4:00 p.m.57 views

Cisco SD-WAN vManage Software Information Disclosure Vulnerability

A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. To be affected by this vulnerability, the vManage software must be in cluster mode. This vulnerability is due t...

5.3CVSS5.2AI score0.00785EPSS
SaveExploits1References1
Cisco
Cisco
added 2021/05/05 4:00 p.m.57 views

Cisco SD-WAN vManage Information Disclosure Vulnerability

A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to gain access to sensitive information. This vulnerability is due to improper access controls on API endpoints when Cisco SD-WAN vManage Software is running in multi-tenant mode. An attacker with...

4.3CVSS4.5AI score0.00367EPSS
SaveExploits0References1
Cisco
Cisco
added 2021/03/24 4:00 p.m.57 views

Cisco IOS XE Software for the Catalyst 9000 Family Arbitrary Code Execution Vulnerability

A vulnerability in the software image verification functionality of Cisco IOS XE Software for the Cisco Catalyst 9000 Family of switches could allow an unauthenticated, physical attacker to execute unsigned code at system boot time. The vulnerability is due to an improper check in the code functi...

6.8CVSS6.8AI score0.00223EPSS
SaveExploits0References1
Cisco
Cisco
added 2021/01/20 4:00 p.m.57 views

Cisco Web Security Appliance Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability exists because the...

4.8CVSS5AI score0.00787EPSS
SaveExploits0References1
Cisco
Cisco
added 2021/01/13 4:00 p.m.57 views

Cisco Firepower Management Center XML Entity Expansion Vulnerability

A vulnerability in the dashboard widget of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper restrictions on XML entities. An attacker could exploit th...

4.3CVSS4.7AI score0.01009EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/11/04 4:00 p.m.57 views

Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities

Multiple vulnerabilities in Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities are due to insufficient validation of certain elements of a Webex recording that is stored i...

7.8CVSS2AI score0.02537EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/10/21 4:00 p.m.57 views

Cisco Firepower Management Center Software and Firepower Threat Defense Software Directory Traversal Vulnerability

A vulnerability in the sfmgr daemon of Cisco Firepower Management Center FMC Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to perform directory traversal and access directories outside the restricted path. The vulnerability is due to...

8.1CVSS8.3AI score0.02205EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/09/24 4:00 p.m.57 views

Cisco IOS XE Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to inject a command to the underlying operating system that will execute with root privileges upon the next reboot of the device. The authenticated user must have privileged EXEC permissions on the...

6.7CVSS7AI score0.00376EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/09/24 4:00 p.m.57 views

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability

A vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause denial of service DoS condition on an affected device. The vulnerability is due to incorrect pack...

7.4CVSS6.9AI score0.00726EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/08/19 4:00 p.m.57 views

Cisco Vision Dynamic Signage Director Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker with administrative privileges to conduct a cross-site scripting XSS attack against a user of the interface on an affected device. The vulnerability exists...

5.5CVSS5AI score0.00617EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/07/29 4:00 p.m.57 views

Cisco SD-WAN vManage Software Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization, enabling them to access sensitive information, modify the system configuration, or impact the availability of the affected system. The...

9.9CVSS9.7AI score0.01917EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/07/15 4:00 p.m.57 views

Cisco SD-WAN vManage Software Remote Code Execution Vulnerability

A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to execute code with root privileges on an affected system. The vulnerability is due to insufficient input sanitization during user authentication processing. An attacker could exploit this vulnerabilit...

7.5CVSS8.4AI score0.1302EPSS
SaveExploits3References1
Cisco
Cisco
added 2020/07/15 4:00 p.m.57 views

Cisco SD-WAN Solution Software Denial of Service Vulnerability

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper validation of fields in Cisco SD-WAN peering messages that are encapsulated in UDP packets. An attacker could exploit...

8.6CVSS2AI score0.01374EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/06/17 4:00 p.m.57 views

Cisco Email Security Appliance URL Filtering Bypass Vulnerability

A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device. The vulnerability is due to insufficient input validation of URLs. An...

5.8CVSS2.5AI score0.01378EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/06/03 4:00 p.m.57 views

Cisco IOx Application Framework Arbitrary File Overwrite Vulnerability

A vulnerability in the Cisco Application Framework component of the Cisco IOx application environment could allow an authenticated, local attacker to overwrite arbitrary files in the virtual instance that is running on the affected device. The vulnerability is due to insufficient path restriction...

6.3CVSS1.6AI score0.0035EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/05/06 4:00 p.m.57 views

Cisco Firepower Management Center Arbitrary Log File Write Vulnerability

A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to write arbitrary entries to the log file on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability...

5.3CVSS5.3AI score0.00968EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/05/06 4:00 p.m.57 views

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software BGP Denial of Service Vulnerability

A vulnerability in the implementation of the Border Gateway Protocol BGP module in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to...

6.8CVSS6.6AI score0.01233EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/05/06 4:00 p.m.57 views

Cisco Firepower Threat Defense Software SSL/TLS URL Category Bypass Vulnerability

A vulnerability in the Transport Layer Security version 1.3 TLS 1.3 policy with URL category functionality for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured TLS 1.3 policy to block traffic for a specific URL. The vulnerability i...

5.8CVSS5.8AI score0.01419EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/04/15 4:00 p.m.57 views

Cisco Aironet Series Access Points Client Packet Processing Denial of Service Vulnerability

A vulnerability in Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to the improper processing of client packets that are sent to an affected access point AP. An...

7.4CVSS1.1AI score0.00457EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/03/04 4:00 p.m.57 views

Cisco Intelligent Proximity SSL Certificate Validation Vulnerability

A vulnerability in the SSL implementation of the Cisco Intelligent Proximity solution could allow an unauthenticated, remote attacker to view or alter information shared on Cisco Webex video devices and Cisco collaboration endpoints if the products meet the conditions described in the Vulnerable...

7.4CVSS7.3AI score0.00896EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/03/04 4:00 p.m.57 views

Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities are due to insufficient validation of certain elements within a Webex...

7.8CVSS1.7AI score0.02312EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/01/22 4:00 p.m.57 views

Cisco Email Security Appliance Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability exists because the...

6.1CVSS1.4AI score0.0084EPSS
SaveExploits0References1
Cisco
Cisco
added 2019/05/15 4:00 p.m.57 views

Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1784)

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI comman...

6.7CVSS6.5AI score0.00522EPSS
SaveExploits0References1
Cisco
Cisco
added 2019/05/01 4:00 p.m.57 views

Cisco Web Security Appliance Malformed Request Denial of Service Vulnerability

A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliance could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of HTTP and HTTPS requests. A...

8.6CVSS1.6AI score0.01772EPSS
SaveExploits0References1
Cisco
Cisco
added 2019/04/17 4:00 p.m.57 views

Cisco Prime Network Registrar Denial of Service Vulnerability

A vulnerability in the DHCPv6 input packet processor of Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to restart the server and cause a denial of service DoS condition on the affected system. The vulnerability is due to incomplete user-supplied input validation whe...

8.6CVSS1.2AI score0.02443EPSS
SaveExploits0References1
Cisco
Cisco
added 2018/10/03 4:00 p.m.57 views

Cisco Unity Connection File Upload Denial of Service Vulnerability

A vulnerability in the Bulk Administration Tool BAT for Cisco Unity Connection could allow an authenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability exists because the affected software does not restrict the maximum size of...

4.1CVSS2.1AI score0.01823EPSS
SaveExploits0References1
Cisco
Cisco
added 2018/09/05 4:00 p.m.57 views

Cisco Cloud Services Platform 2100 Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Cloud Services Platform 2100 could allow an authenticated, remote attacker to perform command injection. The vulnerability is due to insufficient input validation of command input. An attacker could exploit this vulnerability by sendi...

4.7CVSS2.2AI score0.0246EPSS
SaveExploits0References1
Cisco
Cisco
added 2018/07/18 4:00 p.m.57 views

Cisco SD-WAN Solution Zero Touch Provisioning Denial of Service Vulnerability

A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to incorrect bounds checks for certain values in packets that are sent to...

7.5CVSS2.3AI score0.02012EPSS
SaveExploits0References1
Cisco
Cisco
added 2018/06/06 4:00 p.m.57 views

Cisco Prime Collaboration Provisioning Access Control Bypass Vulnerability

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning PCP could allow an authenticated, remote attacker to escalate their privileges. The vulnerability is due to insufficient web portal access control checks. An attacker could exploit this vulnerability by modifying an...

8.8CVSS1.8AI score0.02614EPSS
SaveExploits0References1
Cisco
Cisco
added 2018/05/02 4:00 p.m.57 views

Cisco Firepower System Software Cross-Origin Domain Protection Vulnerability

A vulnerability in the management console of Cisco Firepower System Software could allow an unauthenticated, remote attacker to access sensitive data about the system. The vulnerability is due to improper cross-origin domain protections for the WebSocket protocol. An attacker could exploit this...

6.5CVSS6.3AI score0.022EPSS
SaveExploits0References1
Cisco
Cisco
added 2018/05/02 4:00 p.m.57 views

Cisco Meeting Server Remote Code Execution Vulnerability

A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain unauthorized access to components of, or sensitive information in, an affected system. The vulnerability is due to incorrect default configuration of the device, which can expose internal interfaces an...

8.8CVSS1.4AI score0.041EPSS
SaveExploits0References1
Cisco
Cisco
added 2018/04/18 4:00 p.m.57 views

Cisco Unified Communications Manager HTTP Interface Information Disclosure Vulnerability

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of database tables over the web interface. An attacker could exploit this vulnerability by browsin...

5.4CVSS1AI score0.0172EPSS
SaveExploits0References1
Cisco
Cisco
added 2018/02/07 4:00 p.m.57 views

Cisco UCS Central Arbitrary Command Execution Vulnerability

A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with the privileges of the daemon user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by posting...

8.8CVSS1.9AI score0.02227EPSS
SaveExploits0References1
Cisco
Cisco
added 2018/01/17 4:00 p.m.57 views

Cisco Email Security and Content Security Management Appliance Privilege Escalation Vulnerability

A vulnerability in the administrative shell of the Cisco Email Security Appliance ESA and Content Security Management Appliance SMA could allow an authenticated, local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential with at least a...

7.8CVSS3AI score0.00399EPSS
SaveExploits0References1
Cisco
Cisco
added 2018/01/03 4:00 p.m.57 views

Cisco WebEx Advanced Recording Format Player Remote Code Execution Vulnerability

A vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format ARF files could allow a remote attacker to execute arbitrary code on the system of a targeted user. The attacker could exploit this vulnerability by sending the user a link or email attachment with a malicious A...

4.7CVSS9.6AI score0.03774EPSS
SaveExploits0References1
Cisco
Cisco
added 2017/09/06 4:00 p.m.57 views

Cisco Emergency Responder Blind SQL Injection Vulnerability

A vulnerability in the SQL database interface for Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a failure to validate user-supplied input used in SQL queries that bypass protection filters. An attacker...

5.4CVSS5.9AI score0.00968EPSS
SaveExploits0References1
Cisco
Cisco
added 2017/08/16 4:00 p.m.57 views

Cisco Unified Communications Manager Horizontal Privilege Escalation Vulnerability

A vulnerability in configuration modification permissions validation for Cisco Unified Communications Manager could allow an authenticated, remote attacker to perform a horizontal privilege escalation where one user can modify another user's configuration. The vulnerability is due to lack of prop...

4.3CVSS4.8AI score0.01581EPSS
SaveExploits0References1
Cisco
Cisco
added 2017/08/16 4:00 p.m.57 views

Cisco Prime Infrastructure HTML Injection Vulnerability

A vulnerability in the administrative web interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to modify a page in the web interface of the affected application. The vulnerability is due to improper sanitization of parameter values by the affected application. An...

5.4CVSS5.6AI score0.00891EPSS
SaveExploits0References1
Cisco
Cisco
added 2017/08/02 4:00 p.m.57 views

Cisco Prime Collaboration Provisioning Tool Pervasive Cross-Site Request Forgery Vulnerability

A vulnerability in the Web UI Application of the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to a lack of defense against cross-site request forgery CSRF attacks. An attacker could exploit this...

6.5CVSS9AI score0.00831EPSS
SaveExploits0References1
Total number of security vulnerabilities5000