Lucene search
+L
CiscoMost viewed

5295 matches found

Cisco
Cisco
•added 2010/09/22 4:00 p.m.•60 views

Cisco IOS SSL VPN Vulnerability

Cisco IOS® Software contains a vulnerability when the Cisco IOS SSL VPN feature is configured with an HTTP redirect. Exploitation could allow a remote, unauthenticated user to cause a memory leak on the affected devices, that could result in a memory exhaustion condition that may cause device...

7.8CVSS6.6AI score0.01763EPSS
SaveExploits0References1
Cisco
Cisco
•added 2010/01/20 4:00 p.m.•60 views

Cisco IOS XR Software SSH Denial of Service Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

7.8CVSS6.2AI score0.02853EPSS
SaveExploits0References1
Cisco
Cisco
•added 2009/09/23 4:00 p.m.•60 views

Cisco IOS Software Tunnels Vulnerability

Cisco devices running affected versions of Cisco IOS Software are vulnerable to a denial of service DoS attack if configured for IP tunnels and Cisco Express Forwarding. Cisco has released software updates that address this vulnerability. This advisory is posted at...

7.1CVSS6.5AI score0.02309EPSS
SaveExploits0References1
Cisco
Cisco
•added 2009/03/25 12:00 a.m.•60 views

Cisco IOS Software Multiple Features Crafted TCP Sequence Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

5.4CVSS6AI score0.04025EPSS
SaveExploits0References1
Cisco
Cisco
•added 2007/01/05 11:00 p.m.•60 views

Cisco Secure Access Control Server Accounting-Request Buffer Overflow Vulnerability

Cisco Secure Access Control Server for Windows and Cisco Secure Access Control Server Solution Engine contain a vulnerability that could allow an authenticated, remote attacker to cause a denial of service DoS condition or execute arbitrary code. The vulnerability exists due to insufficient input...

10CVSS8.1AI score0.12809EPSS
SaveExploits0References1
Cisco
Cisco
•added 2005/09/07 4:00 p.m.•60 views

Cisco IOS Firewall Authentication Proxy for FTP and Telnet Sessions Buffer Overflow

The Cisco IOS Firewall Authentication Proxy for FTP and/or Telnet Sessions feature in specific versions of Cisco IOS software is vulnerable to a remotely-exploitable buffer overflow condition. Devices that do not support, or are not configured for Firewall Authentication Proxy for FTP and/or Teln...

7.5CVSS7AI score0.14121EPSS
SaveExploits1References1
Cisco
Cisco
•added 2001/11/28 4:00 p.m.•60 views

A Vulnerability in IOS Firewall Feature Set

...

7.5CVSS1.8AI score0.02091EPSS
SaveExploits0References1Affected Software1
Cisco
Cisco
•added 2026/04/15 4:00 p.m.•59 views

Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability

A vulnerability in the CLI of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, local attacker with administrative privileges to perform a command injection attack on the underlying operating system and elevate privileges to root. Th...

6CVSS5.8AI score0.00499EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/04/01 4:00 p.m.•59 views

Cisco Nexus Dashboard and Nexus Dashboard Insights Server-Side Request Forgery Vulnerability

A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote attacker to conduct a server-side request forgery SSRF attack through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attack...

6.1CVSS6.2AI score0.00242EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/03/04 4:00 p.m.•59 views

Cisco Webex Services Cross-Site Scripting Vulnerability

A vulnerability in Cisco Webex could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. Cisco has addressed this vulnerability, and no customer action is needed. This vulnerability was due to improper filtering of user-supplied input. Prior to this...

6.1CVSS5.8AI score0.00235EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/02/25 4:00 p.m.•59 views

Cisco Nexus 9000 Series Fabric Switches in ACI Mode SNMP Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper processing when...

7.7CVSS5.7AI score0.00308EPSS
SaveExploits0References1
Cisco
Cisco
•added 2025/11/13 4:00 p.m.•59 views

Cisco Catalyst Center REST API Command Injection Vulnerability

A vulnerability in the REST API of Cisco Catalyst Center could allow an authenticated, remote attacker to execute arbitrary commands in a restricted container as the root user. This vulnerability is due to insufficient validation of user-supplied input in REST API request parameters. An attacker...

6.3CVSS7.5AI score0.00362EPSS
SaveExploits0References1
Cisco
Cisco
•added 2025/06/04 4:00 p.m.•59 views

Cisco Unified Communications Products Command Injection Vulnerability

A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device as the root user. This vulnerability is due to improper validation of user-supplied...

6CVSS7.5AI score0.00176EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/10/23 4:00 p.m.•60 views

Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Memory Management Denial of Service Vulnerability

A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This...

8.6CVSS8.6AI score0.00521EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/10/02 4:00 p.m.•59 views

Cisco Nexus Dashboard Orchestrator SSL/TLS Certificate Validation Vulnerability

A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard Orchestrator NDO could allow an unauthenticated, remote attacker to intercept sensitive information from an affected device. This vulnerability exists because the Cisco NDO Validate Peer Certificate site management feature...

5.9CVSS5.7AI score0.003EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/09/25 4:00 p.m.•59 views

Cisco Catalyst SD-WAN Routers Denial of Service Vulnerability

A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense UTD component of Cisco IOS XE Software in controller mode could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability exists...

8.6CVSS8.5AI score0.00662EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/08/21 4:00 p.m.•59 views

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

6.1CVSS6AI score0.0037EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/01/10 4:00 p.m.•59 views

Cisco TelePresence Management Suite Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco TelePresence Management Suite TMS Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient input...

5.4CVSS5.4AI score0.00358EPSS
SaveExploits0References1
Cisco
Cisco
•added 2023/12/12 4:00 p.m.•59 views

Apache Struts Vulnerability Affecting Cisco Products: December 2023

On December 7, 2023, the following vulnerability in Apache Struts was disclosed: CVE-2023-50164: An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. For...

9.8CVSS9.6AI score0.80819EPSS
SaveExploits15References1
Cisco
Cisco
•added 2022/04/13 4:00 p.m.•59 views

Cisco IOS XE Software Web UI API Injection Vulnerability

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input...

4.7CVSS6AI score0.01605EPSS
SaveExploits0References1
Cisco
Cisco
•added 2021/11/03 4:00 p.m.•59 views

Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities

Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network PON Series Switches Optical Network Terminal ONT could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol i...

10CVSS8.8AI score0.0463EPSS
SaveExploits0References1
Cisco
Cisco
•added 2021/10/27 4:00 p.m.•59 views

Cisco Firepower Threat Defense Software SSH Connections Denial of Service Vulnerability

A vulnerability in the processing of SSH connections for multi-instance deployments of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. This vulnerability is due to a lack of proper error...

8.6CVSS7.9AI score0.01391EPSS
SaveExploits0References1
Cisco
Cisco
•added 2021/10/06 4:00 p.m.•59 views

Cisco Email Security Appliance URL Filtering Bypass Vulnerability

A vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device. This vulnerability is due to improper processing of URLs. An attacker...

5.8CVSS5.5AI score0.01067EPSS
SaveExploits0References1
Cisco
Cisco
•added 2021/05/05 4:00 p.m.•59 views

Cisco SD-WAN vManage Information Disclosure Vulnerability

A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. To be affected by this vulnerability, the Cisco SD-WAN vManage Software must be in cluster mode. This...

5.3CVSS5.2AI score0.01218EPSS
SaveExploits0References1
Cisco
Cisco
•added 2021/03/03 4:00 p.m.•59 views

Cisco SD-WAN vManage Directory Traversal Vulnerability

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a directory traversal attack and obtain read access to sensitive files on an affected system. The vulnerability is due to insufficient validation of HTTP...

4.3CVSS4.6AI score0.01162EPSS
SaveExploits0References1
Cisco
Cisco
•added 2021/01/13 4:00 p.m.•59 views

Cisco Firepower Management Center Information Disclosure Vulnerability

A vulnerability in the storage of proxy server credentials of Cisco Firepower Management Center FMC could allow an authenticated, local attacker to view credentials for a configured proxy server. The vulnerability is due to clear-text storage and weak permissions of related configuration files. A...

5.5CVSS5.2AI score0.00259EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/10/21 4:00 p.m.•59 views

Cisco Firepower Management Center Software Denial of Service Vulnerability

A vulnerability in the licensing service of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of system resource values by the affected system. An attacker could...

8.6CVSS8.5AI score0.01956EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/10/21 4:00 p.m.•59 views

Cisco Firepower Management Center Software Denial of Service Vulnerability

A vulnerability in the host input API daemon of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit...

5.3CVSS5.4AI score0.00729EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/10/21 4:00 p.m.•59 views

Cisco Firepower Threat Defense Software TCP Flood Denial of Service Vulnerability

A vulnerability in the packet processing functionality of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to inefficient memory management. An attacker could...

8.6CVSS8.5AI score0.01415EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/09/24 4:00 p.m.•59 views

Cisco Aironet Access Points Ethernet Wired Clients Denial of Service Vulnerability

A vulnerability in the Ethernet packet handling of Cisco Aironet Access Points APs Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this...

7.4CVSS7.4AI score0.00486EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/08/19 4:00 p.m.•59 views

Cisco Data Center Network Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of the affected software. The vulnerability exists because the...

6.5CVSS1.5AI score0.00622EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/08/05 4:00 p.m.•59 views

Cisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. To exploit this vulnerability, the attacker would need to have valid...

5.5CVSS1.9AI score0.00455EPSS
SaveExploits4References1
Cisco
Cisco
•added 2020/05/20 4:00 p.m.•59 views

Cisco Prime Collaboration Provisioning Software SQL Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates...

6.7CVSS1.3AI score0.00944EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/05/06 4:00 p.m.•59 views

Cisco Firepower Threat Defense Software SSL/TLS URL Category Bypass Vulnerability

A vulnerability in the Transport Layer Security version 1.3 TLS 1.3 policy with URL category functionality for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured TLS 1.3 policy to block traffic for a specific URL. The vulnerability i...

5.8CVSS5.8AI score0.01455EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/05/06 4:00 p.m.•59 views

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability

A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to retrieve memory contents on an affected device, which could lead to the disclosure of confidential...

7.5CVSS7.8AI score0.71789EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/04/15 4:00 p.m.•60 views

Cisco Wireless LAN Controller 802.11 Generic Advertisement Service Denial of Service Vulnerability

A vulnerability in the 802.11 Generic Advertisement Service GAS frame processing function of Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS. The vulnerability is due to incomple...

8.6CVSS1.2AI score0.01274EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/03/04 4:00 p.m.•59 views

Cisco Intelligent Proximity SSL Certificate Validation Vulnerability

A vulnerability in the SSL implementation of the Cisco Intelligent Proximity solution could allow an unauthenticated, remote attacker to view or alter information shared on Cisco Webex video devices and Cisco collaboration endpoints if the products meet the conditions described in the Vulnerable...

7.4CVSS7.3AI score0.00896EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/02/19 4:00 p.m.•59 views

Cisco Identity Services Engine Cross-Site Scripting Vulnerability

A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated remote attacker to conduct cross-site scripting attacks. The vulnerability is due to the improper validation of endpoint data stored in logs used by the web-based interface. An attacker could...

6.1CVSS1.7AI score0.01056EPSS
SaveExploits0References1
Cisco
Cisco
•added 2019/05/01 4:00 p.m.•59 views

Cisco Web Security Appliance Malformed Request Denial of Service Vulnerability

A vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliance could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of HTTP and HTTPS requests. A...

8.6CVSS1.6AI score0.01772EPSS
SaveExploits0References1
Cisco
Cisco
•added 2019/05/01 4:00 p.m.•59 views

Cisco Firepower Threat Defense Software TCP Ingress Handler Denial of Service Vulnerability

A vulnerability in the TCP ingress handler for the data interfaces that are configured with management access to Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an increase in CPU and memory usage, resulting in a denial of service DoS condition...

8.6CVSS8.2AI score0.02056EPSS
SaveExploits0References1
Cisco
Cisco
•added 2019/04/17 4:00 p.m.•59 views

Cisco Identity Services Engine SSL Renegotiation Denial of Service Vulnerability

A vulnerability in the web interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to trigger high CPU usage, resulting in a denial of service DoS condition. The vulnerability is due to improper handling of Secure Sockets Layer SSL renegotiation requests. A...

5.3CVSS1.7AI score0.02516EPSS
SaveExploits0References1
Cisco
Cisco
•added 2019/03/06 4:00 p.m.•59 views

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1613)

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker coul...

4.2CVSS2.2AI score0.0086EPSS
SaveExploits1References1
Cisco
Cisco
•added 2019/03/06 4:00 p.m.•59 views

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1610)

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker coul...

4.2CVSS2.2AI score0.0086EPSS
SaveExploits1References1
Cisco
Cisco
•added 2018/06/20 4:00 p.m.•59 views

Cisco Unified Communications Domain Manager Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CS...

5.3CVSS2.7AI score0.0071EPSS
SaveExploits0References1
Cisco
Cisco
•added 2018/06/06 4:00 p.m.•59 views

Cisco Identity Services Engine Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. The vulnerability is due to insufficient input validation of some...

6.1CVSS1.6AI score0.01783EPSS
SaveExploits0References1
Cisco
Cisco
•added 2018/05/16 4:00 p.m.•59 views

Cisco Firepower Threat Defense Software Policy Bypass Vulnerability

A vulnerability in the detection engine of Cisco Firepower Threat Defense software could allow an unauthenticated, remote attacker to bypass a configured Secure Sockets Layer SSL Access Control AC policy to block SSL traffic. The vulnerability is due to the incorrect handling of TCP SSL packets...

5.8CVSS5.8AI score0.01185EPSS
SaveExploits0References1
Cisco
Cisco
•added 2018/05/02 4:00 p.m.•59 views

Cisco Firepower System Software Cross-Origin Domain Protection Vulnerability

A vulnerability in the management console of Cisco Firepower System Software could allow an unauthenticated, remote attacker to access sensitive data about the system. The vulnerability is due to improper cross-origin domain protections for the WebSocket protocol. An attacker could exploit this...

6.5CVSS6.3AI score0.02121EPSS
SaveExploits0References1
Cisco
Cisco
•added 2018/01/17 4:00 p.m.•59 views

Cisco Email Security and Content Security Management Appliance Privilege Escalation Vulnerability

A vulnerability in the administrative shell of the Cisco Email Security Appliance ESA and Content Security Management Appliance SMA could allow an authenticated, local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential with at least a...

7.8CVSS3AI score0.00399EPSS
SaveExploits0References1
Cisco
Cisco
•added 2017/11/29 4:00 p.m.•59 views

Cisco NX-OS System Software Interactive TCL Shell Escape Vulnerability

A vulnerability in the TCL scripting subsystem of Cisco NX-OS System Software could allow an authenticated, local attacker to escape the interactive TCL shell and gain unauthorized access to the underlying operating system of the device. The vulnerability exists due to insufficient input validati...

4.2CVSS5AI score0.00427EPSS
SaveExploits0References1
Cisco
Cisco
•added 2017/11/29 4:00 p.m.•59 views

Cisco FXOS and NX-OS System Software CLI Command Injection Vulnerability

A vulnerability in the CLI of Cisco Firepower Extensible Operating System FXOS and NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacke...

6.3CVSS6.9AI score0.01103EPSS
SaveExploits0References1
Total number of security vulnerabilities5000