Lucene search
+L
CiscoMost viewed

5295 matches found

Cisco
Cisco
•added 2026/05/06 4:00 p.m.•27 views

Cisco Identity Services Engine Authentication Bypass Vulnerabilities

Multiple vulnerabilities in Cisco Identity Services Engine ISE could allow a remote attacker to bypass authorization mechanisms or examine error messages to gain access to sensitive information on an affected device. For more information about these vulnerabilities, see the Details "details"...

5.3CVSS5.8AI score0.00275EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/03/04 4:00 p.m.•27 views

Cisco Secure Firewall Threat Defense Software TLS with Snort 3 Detection Engine Denial of Service Vulnerability

A vulnerability in the TLS cryptography functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to unexpectedly restart, resulting in a denial of service DoS condition...

5.8CVSS6AI score0.00373EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/02/25 4:00 p.m.•27 views

Cisco FXOS and UCS Manager Software Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...

4.8CVSS5.8AI score0.00177EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/02/25 4:00 p.m.•27 views

Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability

A vulnerability in the Object Model CLI component of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. To exploit this vulnerability, the attacker...

5.5CVSS5.8AI score0.00089EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/02/04 4:00 p.m.•27 views

Cisco Meeting Management Arbitrary File Upload Vulnerability

A vulnerability in the Certificate Management feature of Cisco Meeting Management could allow an authenticated, remote attacker to upload arbitrary files, execute arbitrary commands, and elevate privileges to root on an affected system. This vulnerability is due to improper input validation in...

8.8CVSS6.2AI score0.0039EPSS
SaveExploits0References1
Cisco
Cisco
•added 2025/08/14 4:00 p.m.•27 views

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerabilities

Multiple vulnerabilities in the management and VPN web servers for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to stop responding or reload unexpectedly,...

8.6CVSS7.7AI score0.00775EPSS
SaveExploits0References1
Cisco
Cisco
•added 2025/03/12 4:00 p.m.•27 views

Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability

A vulnerability in the IPv4 access control list ACL feature and quality of service QoS policy feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Performance Routers could allow an...

8.6CVSS8.6AI score0.00538EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/11/06 4:00 p.m.•27 views

Cisco Unified Industrial Wireless Software for Ultra-Reliable Wireless Backhaul Access Point Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Industrial Wireless Software for Cisco Ultra-Reliable Wireless Backhaul URWB Access Points could allow an unauthenticated, remote attacker to perform command injection attacks with root privileges on the underlying operating...

10CVSS10AI score0.03126EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/11/06 4:00 p.m.•27 views

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

6.1CVSS6AI score0.00315EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/09/25 4:00 p.m.•27 views

Cisco Catalyst Center Static SSH Host Key Vulnerability

A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability...

7.5CVSS7.6AI score0.00419EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/08/21 4:00 p.m.•27 views

Cisco Unified Communications Manager Denial of Service Vulnerability

A vulnerability in the SIP call processing function of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected devic...

8.6CVSS8.5AI score0.00745EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/04/03 4:00 p.m.•27 views

Cisco Unified Communications Manager IM & Presence Service Cross-Site Scripting Vulnerability

A vulnerability in the web-based interface of Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against an authenticated user of the interface. This vulnerability exists because t...

6.1CVSS6AI score0.00498EPSS
SaveExploits0References1
Cisco
Cisco
•added 2022/09/28 4:00 p.m.•27 views

Cisco Duo for macOS Authentication Bypass Vulnerability

A vulnerability in the smart card login authentication of Cisco Duo for macOS could allow an unauthenticated attacker with physical access to bypass authentication. This vulnerability exists because the assigned user of a smart card is not properly matched with the authenticating user. An attacke...

6.1CVSS6.3AI score0.00363EPSS
SaveExploits0References1
Cisco
Cisco
•added 2022/04/27 4:00 p.m.•27 views

Cisco Firepower Threat Defense Software XML Injection Vulnerability

A vulnerability in CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to inject XML into the command parser. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including crafted input in commands...

4.4CVSS5.8AI score0.00267EPSS
SaveExploits0References1
Cisco
Cisco
•added 2021/11/03 4:00 p.m.•27 views

Cisco Common Services Platform Collector Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Common Services Platform Collector CSPC could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when...

4.9CVSS4.8AI score0.00996EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/10/21 4:00 p.m.•27 views

Cisco Firepower Management Center Software Open Redirect Vulnerability

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an HTTP request. An attack...

4.7CVSS5.5AI score0.00803EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/08/05 4:00 p.m.•27 views

Cisco Unified Communications Products Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection could allow an unauthenticated, remote attacker to...

6.1CVSS1.8AI score0.00501EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/03/04 4:00 p.m.•27 views

Cisco Webex Meetings Client for MacOS Information Disclosure Vulnerability

A vulnerability in the multicast DNS mDNS protocol configuration of Cisco Webex Meetings Client for MacOS could allow an unauthenticated adjacent attacker to obtain sensitive information about the device on which the Webex client is running. The vulnerability exists because sensitive information ...

4.3CVSS1.4AI score0.00508EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/02/26 4:00 p.m.•27 views

Cisco MDS 9000 Series Switches Denial of Service Vulnerability

A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper resource usage control. An...

8.6CVSS1.2AI score0.01969EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/01/22 4:00 p.m.•27 views

Cisco Jabber Guest Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Jabber Guest could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability exists because the web-based...

6.1CVSS1.5AI score0.0084EPSS
SaveExploits0References1
Cisco
Cisco
•added 2016/06/09 1:30 p.m.•27 views

Cisco Aironet 1800, 2800, and 3800 Series Access Point Platforms ARP Request Handling Denial of Service Vulnerability

A vulnerability exists in Cisco Access Point AP platforms when processing Address Resolution Protocol ARP packets that could allow an unauthenticated, adjacent attacker to inject crafted entries into the ARP table and eventually cause a reload of the affected device. The vulnerability is due to...

6.8CVSS8AI score0.00725EPSS
SaveExploits0References1
Cisco
Cisco
•added 2014/01/27 5:45 p.m.•27 views

Cisco Video Surveillance 5000 Series HD IP Dome Camera Multiple Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web user interface of the Cisco Video Surveillance 5000 Series HD IP Dome Cameras could allow an unauthenticated, remote attacker to execute a cross-site scripting XSS attack. The vulnerabilities are due to insufficient validation of user-supplied input. An attacke...

4.3CVSS5.8AI score0.02233EPSS
SaveExploits0References1
Cisco
Cisco
•added 2013/10/11 3:09 p.m.•27 views

Cisco Unified IP Phones 9900 Series Image Upgrade Command Injection Vulnerability

A vulnerability in the image upgrade facility of Cisco Unified IP Phones 9900 Series could allow an authenticated, local attacker to execute commands within the context of the underlying operating system. The vulnerability is due to insufficient sanitization of input during the image upgrade...

6CVSS1.2AI score0.00274EPSS
SaveExploits0References1
Cisco
Cisco
•added 2013/10/11 2:36 p.m.•27 views

Cisco Unified Communications Manager Administrative Web Interface Directory Traversal Vulnerability

A vulnerability in the administrative web interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to obtain the contents of arbitrary files on an affected device. The vulnerability is due to a failure to properly sanitize user-supplied input passed to a...

4CVSS3.6AI score0.23309EPSS
SaveExploits5References1
Cisco
Cisco
•added 2013/03/06 6:23 p.m.•27 views

Cisco Small Business Switches SSH Packet Processing Denial of Service Vulnerability

Cisco Small Business Switches contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition to features that rely on SSH or SSL protocols. The vulnerability is due to the processing flaw in malformed packets in the code used by SSH and SSL...

5CVSS0.8AI score0.01553EPSS
SaveExploits0References1
Cisco
Cisco
•added 2011/10/19 4:00 p.m.•27 views

Cisco Show and Share Security Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

7.5CVSS6AI score
SaveExploits0References1
Cisco
Cisco
•added 2011/08/30 4:00 p.m.•27 views

Apache HTTPd Range Header Denial of Service Vulnerability

The Apache HTTPd server contains a denial of service vulnerability when it handles multiple, overlapping ranges. Multiple Cisco products may be affected by this vulnerability. Mitigations that can be deployed on Cisco devices within the network are available in the Cisco Applied Intelligence...

0.6AI score
SaveExploits0References1
Cisco
Cisco
•added 2011/05/25 4:00 p.m.•27 views

Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities

...

2.8AI score
SaveExploits0References1
Cisco
Cisco
•added 2011/03/30 4:00 p.m.•27 views

Cisco Secure Access Control System Unauthorized Password Change Vulnerability

...

3.1AI score
SaveExploits0References1
Cisco
Cisco
•added 2010/08/25 4:00 p.m.•27 views

Cisco Unified Presence Denial of Service Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

7.8CVSS6.1AI score
SaveExploits0References1
Cisco
Cisco
•added 2007/11/07 2:56 p.m.•27 views

Cisco Unified MeetingPlace Login Screen Cross-Site Scripting Vulnerability

Cisco Unified MeetingPlace versions 5.3.235.0 and prior, 5.4, and 6.0 contain a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. This vulnerability is due to insufficient filtering of parameters passed to the Login form of Cisco Unified...

4.3CVSS6.6AI score0.01223EPSS
SaveExploits1References1
Cisco
Cisco
•added 2007/08/15 4:00 p.m.•27 views

Local Privilege Escalation Vulnerabilities in Cisco VPN Client

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

6.8CVSS6AI score0.00332EPSS
SaveExploits0References1
Cisco
Cisco
•added 2005/11/29 4:00 p.m.•27 views

Cisco Security Agent Vulnerable to Privilege Escalation

...

7.2CVSS3.5AI score0.00398EPSS
SaveExploits0References1Affected Software1
Cisco
Cisco
•added 2005/02/02 4:00 p.m.•27 views

Default SNMP Community Strings in Cisco IP/VC Products

...

2.5AI score
SaveExploits0References1
Cisco
Cisco
•added 1998/10/14 3:00 p.m.•27 views

Cisco IOS Command History Release at Login Prompt

...

1.8AI score
SaveExploits0References1
Cisco
Cisco
•added 2026/05/06 4:00 p.m.•26 views

Cisco Enterprise Chat and Email Lite Agent File Upload Vulnerability

A vulnerability in the Lite Agent feature of Cisco Enterprise Chat and Email ECE could allow an authenticated, remote attacker to conduct browser-based attacks. To exploit this vulnerability, the attacker must have valid credentials for a user account with at least the role of Agent. This...

4.3CVSS5.9AI score0.00125EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/04/15 4:00 p.m.•26 views

Cisco Identity Services Engine Remote Code Execution Vulnerabilities

Multiple vulnerabilities in Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit these vulnerabilities, the attacker must have at least Read Only Admin credentials. These...

9.9CVSS6.2AI score
SaveExploits0References1
Cisco
Cisco
•added 2026/03/04 4:00 p.m.•26 views

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerabilities

Multiple vulnerabilities in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow a remote attacker to cause an affected device to stop responding or to reload unexpectedly,...

8.6CVSS6AI score0.00354EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/03/04 4:00 p.m.•26 views

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SAML Reflected Cross-Site Scripting Vulnerability

A vulnerability in the SAML 2.0 single sign-on SSO feature of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the SAML feature and access sensitive,...

6.1CVSS5.8AI score0.00264EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/01/07 4:00 p.m.•26 views

Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability

A vulnerability in the licensing features of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker with administrative privileges to gain access to sensitive information. This vulnerability is due to improper parsing of X...

4.9CVSS6.9AI score0.06075EPSS
SaveExploits0References1
Cisco
Cisco
•added 2025/08/14 4:00 p.m.•26 views

Cisco Secure Firewall Management Center Software RADIUS Remote Code Execution Vulnerability

A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device. This vulnerability is due to a lack of proper handling of user input...

10CVSS7.8AI score0.15773EPSS
SaveExploits1References1
Cisco
Cisco
•added 2025/05/21 4:00 p.m.•26 views

Cisco Identity Services Engine RADIUS Denial of Service Vulnerability

A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper handling of certain RADIUS requests. An attacker...

8.6CVSS7.6AI score0.00698EPSS
SaveExploits0References1
Cisco
Cisco
•added 2025/05/07 4:00 p.m.•26 views

Cisco IOx Application Hosting Environment Denial of Service Vulnerability

A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Cisco IOx application hosting environment to stop responding, resulting in a denial of service DoS condition. This...

5.3CVSS5.7AI score0.004EPSS
SaveExploits0References1
Cisco
Cisco
•added 2025/05/07 4:00 p.m.•26 views

Cisco IOS XE Software Internet Key Exchange Version 1 Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange version 1 IKEv1 implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability. This vulnerability is du...

7.7CVSS7.6AI score0.00439EPSS
SaveExploits0References1
Cisco
Cisco
•added 2025/03/12 4:00 p.m.•26 views

Cisco IOS XR Software CLI Privilege Escalation Vulnerability

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments that are passed to specific CLI...

8.8CVSS8.8AI score0.00226EPSS
SaveExploits0References1
Cisco
Cisco
•added 2025/02/05 4:00 p.m.•26 views

Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Vulnerabilities

Multiple vulnerabilities in Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco Secure Web Appliance could allow an attacker to execute arbitrary commands locally or remotely. For more information about these vulnerabilities, see the Details...

6.5CVSS6.1AI score0.00863EPSS
SaveExploits0References1
Cisco
Cisco
•added 2025/02/05 4:00 p.m.•26 views

Cisco Expressway Series Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly...

6.1CVSS6AI score0.00395EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/11/06 4:00 p.m.•26 views

Cisco 7800, 8800, and 9800 Series Phones Information Disclosure Vulnerability

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive information on an affected device. This vulnerability is due to improper storage of sensitive...

5.3CVSS5.2AI score0.00441EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/11/06 4:00 p.m.•26 views

Cisco Nexus 3550-F Switches Access Control List Programming Vulnerability

A vulnerability in the access control list ACL programming of Cisco Nexus 3550-F Switches could allow an unauthenticated, remote attacker to send traffic that should be blocked to the management interface of an affected device. This vulnerability exists because ACL deny rules are not properly...

5.3CVSS5.3AI score0.00458EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/10/23 4:00 p.m.•26 views

Cisco Adaptive Security Appliance and Firepower Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability

A vulnerability in the session authentication functionality of the Remote Access SSL VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to prevent users from authenticating. This vulnerabili...

6.8CVSS6.4AI score0.00671EPSS
SaveExploits0References1
Total number of security vulnerabilities5000