Lucene search
+L
CiscoMost viewed

5295 matches found

Cisco
Cisco
•added 2007/05/02 4:00 p.m.•42 views

LDAP and VPN Vulnerabilities in PIX and ASA Appliances

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

6AI score
SaveExploits0References1
Cisco
Cisco
•added 2006/09/13 8:09 p.m.•42 views

Cisco IOS VTP Integer Wrap Denial of Service Vulnerability

Cisco IOS and Cisco Catalyst OS contain an integer overflow vulnerability that could allow an authenticated, remote attacker to cause affected devices to stop processing configuration changes, possibly resulting in a denial of service DoS condition. This vulnerability exists due to an integer...

7.8CVSS7AI score0.05047EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/05/20 4:00 p.m.•41 views

Cisco ThousandEyes Virtual Appliance Authenticated Remote Code Execution Vulnerability

A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to execute commands on the underlying operating system as the root user. This vulnerability is due to insufficient validation of user-supplied input. An...

4.7CVSS6.2AI score0.00438EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/04/01 4:00 p.m.•41 views

Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability

A vulnerability in Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected SSM On-Prem host. This vulnerability is due to the unintentional exposure of an internal service. An...

9.8CVSS6.2AI score0.00914EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/03/04 4:00 p.m.•41 views

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software OSPF Protocol Vulnerabilities

Multiple vulnerabilities in the OSPF feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition. For mor...

6.8CVSS5.9AI score0.00251EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/03/04 4:00 p.m.•41 views

Cisco Secure Firewall Threat Defense Software SSL Decryption Policy Denial of Service Vulnerability

A vulnerability in the Do Not Decrypt exclusion feature of the SSL decryption feature of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper memory...

6.8CVSS6AI score0.00377EPSS
SaveExploits0References1
Cisco
Cisco
•added 2025/09/03 4:00 p.m.•41 views

Cisco Webex Meetings URL Redirection Vulnerability

A vulnerability in Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to redirect a targeted Webex Meetings user to an untrusted website. Cisco has addressed this vulnerability in the Cisco Webex Meetings service, and no customer action is needed. This vulnerability exist...

4.3CVSS7.1AI score0.00235EPSS
SaveExploits0References1
Cisco
Cisco
•added 2025/08/27 4:00 p.m.•41 views

Cisco UCS Manager Software Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the...

5.4CVSS5.9AI score0.00234EPSS
SaveExploits0References1
Cisco
Cisco
•added 2025/04/22 9:45 p.m.•41 views

Multiple Cisco Products Unauthenticated Remote Code Execution in Erlang/OTP SSH Server: April 2025

On April 16, 2025, a critical vulnerability in the Erlang/OTP SSH server was disclosed. This vulnerability could allow an unauthenticated, remote attacker to perform remote code execution RCE on an affected device. The vulnerability is due to a flaw in the handling of SSH messages during the...

10CVSS9.9AI score0.98786EPSS
SaveExploits38References1
Cisco
Cisco
•added 2025/04/02 4:00 p.m.•41 views

Cisco Enterprise Chat and Email Denial of Service Vulnerability

A vulnerability in chat messaging features of Cisco Enterprise Chat and Email ECE could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to improper validation of user-supplied input to chat entry points. An attacker could exploit thi...

7.5CVSS7.3AI score0.00642EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/11/06 4:00 p.m.•41 views

Cisco Meeting Management Information Disclosure Vulnerability

A vulnerability in the logging subsystem of Cisco Meeting Management could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of sensitive information within the web-based management interface of...

4.3CVSS4.4AI score0.00385EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/10/23 4:00 p.m.•41 views

Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Web Client Services Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the VPN web client services feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a browser that is accessing an...

6.1CVSS6.2AI score0.00398EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/05/22 4:00 p.m.•41 views

Cisco Adaptive Security Appliance and Firepower Threat Defense Software Inactive-to-Active ACL Bypass Vulnerability

A vulnerability in the activation of an access control list ACL on Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass the protection that is offered by a configured ACL on an affected device. Thi...

5.8CVSS6.7AI score0.00395EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/03/27 4:00 p.m.•41 views

Cisco Access Point Software Secure Boot Bypass Vulnerability

A vulnerability in the boot process of Cisco Access Point AP Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that has been tampered with on an affected device. This vulnerability exists because unnecessary commands...

5.9CVSS5.7AI score0.00249EPSS
SaveExploits0References1
Cisco
Cisco
•added 2023/11/01 4:00 p.m.•41 views

Cisco Firepower Threat Defense Software SSL and Snort 3 Detection Engine Bypass and Denial of Service Vulnerability

A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to restart. This vulnerability is due to a logic error that occurs whe...

4CVSS5.7AI score0.00283EPSS
SaveExploits0References1
Cisco
Cisco
•added 2023/08/16 4:00 p.m.•41 views

Cisco Unified Contact Center Express Finesse Portal Web Cache Poisoning Vulnerability

A vulnerability in the Tomcat implementation for Cisco Unified Contact Center Express Unified CCX could allow an unauthenticated, remote attacker to cause a web cache poisoning attack on an affected device. This vulnerability is due to improper input validation of HTTP requests. An attacker could...

5.3CVSS5.3AI score0.0055EPSS
SaveExploits0References1
Cisco
Cisco
•added 2023/04/05 4:00 p.m.•41 views

Cisco Identity Services Engine Command Injection Vulnerabilities

Multiple vulnerabilities in specific Cisco Identity Services Engine ISE CLI commands could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must have valid...

6CVSS6.6AI score
SaveExploits0References1
Cisco
Cisco
•added 2023/01/18 4:00 p.m.•42 views

Identifying and Mitigating Security Exposures When Using No Payload Encryption Images with Existing Cryptographic Configuration

Cisco IOS Software and Cisco IOS XE Software images come in two types: The regular universalk9 image and the No Payload Encryption NPE universalk9npe image. NPE images were introduced to satisfy import requirements in some countries that require that the platform does not support strong payload...

7AI score
SaveExploits0References1
Cisco
Cisco
•added 2022/04/20 4:00 p.m.•41 views

Cisco Umbrella Virtual Appliance Static SSH Host Key Vulnerability

A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance VA could allow an unauthenticated, remote attacker to impersonate a VA. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability by performing ...

7.5CVSS7.9AI score0.01182EPSS
SaveExploits0References1
Cisco
Cisco
•added 2022/04/13 4:00 p.m.•41 views

Cisco SD-WAN vManage Software Privilege Escalation Vulnerability

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as the root user. The attacker must be authenticated on the affected system as a low-privileged user to exploit this...

7.3CVSS7.5AI score0.00602EPSS
SaveExploits0References1
Cisco
Cisco
•added 2022/03/02 4:00 p.m.•41 views

Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure Privilege Escalation Vulnerability

A vulnerability in the Common Execution Environment CEE ConfD CLI of Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure SMI software could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to insufficient access control in...

7.8CVSS7.6AI score0.00263EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/09/24 4:00 p.m.•41 views

Cisco IOS XE Software IOx Application Hosting Privilege Escalation Vulnerability

A vulnerability in the application-hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to root on an affected device. The attacker could execute IOS XE commands outside the application-hosting subsystem Docker container as well as on the...

6CVSS7.1AI score0.00342EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/09/24 4:00 p.m.•41 views

Cisco Aironet Access Point Authentication Flood Denial of Service Vulnerability

A vulnerability in Cisco Aironet Access Point AP Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper handling of clients that are trying to connect to the AP. An attacker could exploit this vulnerability by sending...

6.8CVSS7.7AI score0.01404EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/07/29 4:00 p.m.•41 views

Cisco Data Center Network Manager Command Injection Vulnerability

A vulnerability in specific REST API endpoints of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system with the privileges of the logged-in user. The vulnerability is due to insufficient validation of...

8.2CVSS2.1AI score0.0079EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/07/01 4:00 p.m.•41 views

Cisco Small Business RV042 and RV042G Routers Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV042 Dual WAN VPN Routers and Cisco Small Business RV042G Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based...

6.1CVSS2.3AI score0.00444EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/02/26 4:00 p.m.•41 views

Cisco FXOS and UCS Manager Software Local Management CLI Command Injection Vulnerability

A vulnerability in the local management local-mgmt CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system OS of an affected device. The vulnerability is due to insufficient input...

7.8CVSS7.8AI score0.00484EPSS
SaveExploits0References1
Cisco
Cisco
•added 2019/05/15 4:00 p.m.•41 views

Cisco FXOS and NX-OS Software Command Injection Vulnerability (CVE-2019-1779)

A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device with elevated privileges. The vulnerability is due to insufficient validation of arguments...

4.2CVSS3AI score0.00522EPSS
SaveExploits0References1
Cisco
Cisco
•added 2017/11/29 4:00 p.m.•41 views

Cisco WebEx Meeting Center Cross-Site Scripting Vulnerability

A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the...

6.1CVSS6.1AI score0.0122EPSS
SaveExploits0References1
Cisco
Cisco
•added 2017/07/19 4:00 p.m.•41 views

Cisco ASR 5000 Series Aggregation Services Routers Access Control List Security Bypass Vulnerability

A vulnerability in certain filtering mechanisms of access control lists ACLs for Cisco ASR 5000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass ACL rules that have been configured for an affected device. The vulnerability exists because the affected...

5.3CVSS7.7AI score0.01833EPSS
SaveExploits0References1
Cisco
Cisco
•added 2017/05/17 4:00 p.m.•41 views

Cisco Remote Expert Manager Denial of Service Vulnerability

A vulnerability in the TCP connection handling functionality of Cisco Remote Expert Manager Software could allow an unauthenticated, remote attacker to disable TCP ports and cause a denial of service DoS condition on an affected system. The vulnerability is due to a lack of rate-limiting...

5.3CVSS7.7AI score0.02394EPSS
SaveExploits0References1
Cisco
Cisco
•added 2017/04/19 4:00 p.m.•41 views

Cisco Prime Network Registrar DNS Denial of Service Vulnerability

A vulnerability in the DNS input packet processor for Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to cause the DNS process to momentarily restart, which could lead to a partial denial of service DoS condition on the affected system. The vulnerability is due to...

5.8CVSS5.7AI score0.01986EPSS
SaveExploits0References1
Cisco
Cisco
•added 2017/03/15 4:00 p.m.•41 views

Cisco UCS Director Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation ...

5.8CVSS6AI score0.01228EPSS
SaveExploits0References1
Cisco
Cisco
•added 2017/01/18 4:00 p.m.•41 views

Cisco WebEx Meeting Center Site Redirection Vulnerability

A vulnerability in a URL parameter of Cisco WebEx could allow an unauthenticated, remote attacker to perform site redirection. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including a remote site URL in the affected parameter of the...

5CVSS5.5AI score0.01021EPSS
SaveExploits2References1
Cisco
Cisco
•added 2017/01/18 4:00 p.m.•41 views

Cisco Hybrid Meeting Server Web Interface Cross-Site Request Forgery Vulnerability

A vulnerability in Cisco Hybrid Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against the user of the web interface. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by...

5.4CVSS8.9AI score0.00671EPSS
SaveExploits0References1
Cisco
Cisco
•added 2016/12/21 4:00 p.m.•41 views

Cisco CloudCenter Orchestrator Docker Engine Privilege Escalation Vulnerability

A vulnerability in the Docker Engine configuration of Cisco CloudCenter Orchestrator CCO; formerly CliQr could allow an unauthenticated, remote attacker to install Docker containers with high privileges on the affected system. The vulnerability is due to a misconfiguration that causes the Docker...

9.3CVSS9.7AI score0.02927EPSS
SaveExploits0References1
Cisco
Cisco
•added 2016/12/07 4:00 p.m.•41 views

Cisco IOS and IOS XE Software SSH X.509 Authentication Bypass Vulnerability

A vulnerability in the implementation of X.509 Version 3 for SSH authentication functionality in Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to bypass authentication on an affected system. The vulnerability is due to improper validation of X.509 signatures during...

5.8CVSS7.4AI score0.01411EPSS
SaveExploits0References1
Cisco
Cisco
•added 2016/10/26 4:00 p.m.•41 views

Cisco IP Interoperability and Collaboration System Cross-Site Scripting Vulnerability

A vulnerability in the web framework code of the Cisco IP Interoperability and Collaboration System IPICS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to insufficient input validation of some parameters passed to the web...

4.3CVSS6.1AI score0.00833EPSS
SaveExploits0References1
Cisco
Cisco
•added 2016/10/26 12:00 p.m.•41 views

Cisco Identity Services Engine SQL Injection Vulnerability

A vulnerability in the web framework code of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to execute arbitrary SQL commands on the database. The vulnerability is due to insufficient controls on Structured Query Language SQL statements. An attacker could exploit...

4.9CVSS7.6AI score0.01102EPSS
SaveExploits0References1
Cisco
Cisco
•added 2016/09/14 4:00 p.m.•41 views

Cisco Fog Director for IOx Arbitrary File Write Vulnerability

A vulnerability in the Cisco Fog Director for IOx could allow an authenticated, remote attacker to write a file to arbitrary locations. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by uploading a crafted file via the Cartridge interface. ...

6.3CVSS6.5AI score0.01171EPSS
SaveExploits0References1
Cisco
Cisco
•added 2016/08/17 4:00 p.m.•41 views

Cisco Identity Services Engine Admin Dashboard Page Cross-Site Scripting Vulnerability

A vulnerability in the web framework code of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to insufficient input validation of some parameters passed to the web server. An attacker could...

4.3CVSS6.1AI score0.01417EPSS
SaveExploits0References1
Cisco
Cisco
•added 2016/06/20 3:09 p.m.•41 views

Cisco IOS XE Software SNMP Subsystem Denial of Service Vulnerability

A vulnerability in the SNMP subsystem of Cisco IOS XE software could allow an authenticated, remote attacker to create a denial of service DoS condition. The vulnerability is due to an attempt to double free a region of memory when processing a series of SNMP read requests that contains certain...

6.8CVSS6.5AI score0.01183EPSS
SaveExploits0References1
Cisco
Cisco
•added 2016/04/20 4:00 p.m.•41 views

Cisco Wireless LAN Controller Denial of Service Vulnerability

A vulnerability in the Bonjour task manager of Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper handling of Bonjour traffic by the affected software. An...

7.8CVSS7.6AI score0.01618EPSS
SaveExploits0References1
Cisco
Cisco
•added 2016/01/13 4:00 p.m.•41 views

Cisco Aironet 1800 Series Access Point Default Static Account Credentials Vulnerability

A vulnerability in Cisco Aironet 1800 Series Access Point devices could allow an unauthenticated, remote attacker to log in to the device by using a default account that has a static password. By default, the account does not have full administrative privileges. The vulnerability is due to the...

7.5CVSS7.5AI score0.01394EPSS
SaveExploits0References1
Cisco
Cisco
•added 2015/12/10 10:30 p.m.•41 views

Cisco Emergency Responder Web Framework Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Emergency Responder Software could allow an unauthenticated, remote attacker to execute a stored cross-site scripting XSS attack against the user of the web interface. The vulnerability is due to insufficient validation on the input fields of a web...

4.3CVSS5.5AI score0.0095EPSS
SaveExploits0References1
Cisco
Cisco
•added 2015/11/17 9:43 p.m.•41 views

Cisco Firepower 9000 Cross-Site Request Forgery Vulnerability

A vulnerability in the Cisco Firepower 9000 Series Switch which could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to a lack of cross-site request forgery CSRF protection. An attacker could exploit this vulnerability by tricking the user of a web...

5CVSS7AI score0.00587EPSS
SaveExploits0References1
Cisco
Cisco
•added 2015/10/19 12:00 a.m.•41 views

Cisco ASR 5000 CDMA PMIpv6 Denial of Service Vulnerability

A vulnerability in the Proxy Mobile IPv6 PMIPv6 protocol implementation of the Cisco Aggregation Services Router ASR ASR 5000 for Cisco Code Division Multiple Access CDMA System Software could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to the...

5CVSS6.9AI score0.02005EPSS
SaveExploits0References1
Cisco
Cisco
•added 2015/09/16 4:00 p.m.•41 views

Cisco Prime Collaboration Provisioning Web Framework Access Controls Bypass Vulnerability

A vulnerability in the web framework of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to access higher-privileged functions. An exploit could allow the attacker to access functions, some of which should be accessible only to users who have administrative...

8.5CVSS6.4AI score0.02644EPSS
SaveExploits0References1
Cisco
Cisco
•added 2015/09/08 6:52 p.m.•41 views

Cisco Security Management Appliance Log Rollover Denial of Service Vulnerability

A vulnerability in the web interface of the Cisco Security Management Appliance SMA could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on a targeted device. The vulnerability is due to inadequate validation of user credentials for incoming HTTP requests,...

5CVSS6.5AI score0.02211EPSS
SaveExploits0References1
Cisco
Cisco
•added 2015/07/15 9:02 p.m.•41 views

Cisco Email Security Appliance Malformed DMARC Policy Records File Modification Vulnerability

A vulnerability in the Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to generate malformed Domain-Based Message Authentication, Reporting, and Conformance DMARC policy records to the targeted system. The vulnerability occurs because the affected ESA is not abl...

4.3CVSS6.5AI score0.01534EPSS
SaveExploits0References1
Cisco
Cisco
•added 2015/06/23 8:45 p.m.•41 views

Cisco Identity Services Engine and Secure Access Control System Support Bundle Download Vulnerability

A vulnerability in Cisco Identity Services Engine and Secure Access Control System could allow an authenticated, remote attacker to gain unauthorized access to program data. The vulnerability is due to weak authentication and authorization used to control access to support bundles stored on a...

4CVSS6.7AI score0.02064EPSS
SaveExploits0References1
Total number of security vulnerabilities5000