5244 matches found
Cisco Show and Share Security Vulnerabilities
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...
CiscoWorks Common Services Arbitrary Command Execution Vulnerability
CiscoWorks Common Services for Microsoft Windows contains a vulnerability that could allow an authenticated, remote attacker to execute arbitrary commands on the affected system with the privileges of a system administrator. Cisco has released software updates that address this vulnerability. The...
Directory Traversal Vulnerability in Cisco Network Admission Control Manager
Cisco Network Admission Control NAC Manager contains a directory traversal vulnerability that may allow an unauthenticated attacker to obtain system information. There are no workarounds to mitigate this vulnerability. Cisco has released software updates that address this vulnerability. This...
Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module
Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module are affected by multiple vulnerabilities as follows: MSN Instant Messenger IM Inspection Denial of Service vulnerability TACACS+ Authentication Bypass vulnerability Four SunRPC Inspection Denial ...
Multiple Vulnerabilities in Cisco Firewall Services Module
The Cisco Firewall Services Module FWSM for the Cisco Catalyst 6500 Series switches and Cisco 7600 Series routers is affected by the following vulnerabilities: Syslog Message Memory Corruption Denial of Service Vulnerability Authentication Proxy Denial of Service Vulnerability TACACS+...
Cisco IOS Software Crafted IPv6 over MPLS Denial of Service Vulnerability
Cisco IOS Software contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS on a targeted device. The vulnerability is due to the processing of IP version 6 IPv6 packets by the vulnerable version of software on an affected device. If an...
Jabber Extensible Communications Platform and Cisco Unified Presence XML Denial of Service Vulnerability
A denial of service DoS vulnerability exists in Jabber Extensible Communications Platform Jabber XCP and Cisco Unified Presence. An unauthenticated, remote attacker could exploit this vulnerability by sending malicious XML to an affected server. Successful exploitation of this vulnerability could...
Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities
Multiple vulnerabilities exist in the Session Initiation Protocol SIP implementation in Cisco IOS Software and Cisco IOS XE Software that could allow an unauthenticated, remote attacker to cause a reload of an affected device or trigger memory leaks that may result in system instabilities. Affect...
Cisco 10000 Series Denial of Service Vulnerability
The Cisco 10000 Series Router is affected by a denial of service DoS vulnerability where an attacker could cause a device reload by sending a series of ICMP packets. Cisco has released software updates that address this vulnerability. Workarounds that mitigate this vulnerability are also availabl...
Cisco Unified Communications Manager Memory Leak Vulnerability
Cisco Unified Communications Manager contains a memory leak vulnerability that could be triggered through the processing of malformed Session Initiation Protocol SIP messages. Exploitation of this vulnerability could cause an interruption of voice services. Cisco has released free software update...
Cisco IOS Software IPS and Zone Based Firewall Vulnerabilities
Cisco IOS Software contains two vulnerabilities related to Cisco IOS Intrusion Prevention System IPS and Cisco IOS Zone-Based Firewall features. These vulnerabilities are: Memory leak in Cisco IOS Software Cisco IOS Software Denial of Service when processing specially crafted HTTP packets Cisco h...
Cisco IOS Software Network Address Translation Vulnerabilities
The Cisco IOS Software network address translation NAT feature contains multiple denial of service DoS vulnerabilities in the translation of the following protocols: NetMeeting Directory Lightweight Directory Access Protocol, LDAP Session Initiation Protocol. Multiple vulnerabilities H.323 protoc...
Cisco IOS Software IP Version 6 over Multiprotocol Label Switching Vulnerabilities
Cisco IOS Software is affected by two vulnerabilities that cause a Cisco IOS device to reload when processing IP version 6 IPv6 packets over a Multiprotocol Label Switching MPLS domain. These vulnerabilities are: Crafted IPv6 Packet May Cause MPLS-Configured Device to Reload ICMPv6 Packet May Cau...
Cisco IOS Software IPv6 Denial of Service Vulnerability
Cisco IOS Software contains a vulnerability in the IP version 6 IPv6 protocol stack implementation that could allow an unauthenticated, remote attacker to cause a reload of an affected device that has IPv6 operation enabled. The vulnerability is triggered when an affected device processes a...
Cisco IOS Software Data-Link Switching Vulnerability
Cisco IOS Software contains a memory leak vulnerability in the Data-Link Switching DLSw feature that could result in a device reload when processing crafted IP Protocol 91 packets. Cisco has released software updates that address this vulnerability. This advisory is posted at...
Cisco IOS Software IP Service Level Agreement Vulnerability
The Cisco IOS IP Service Level Agreement IP SLA feature contains a denial of service DoS vulnerability. The vulnerability is triggered when malformed UDP packets are sent to a vulnerable device. The vulnerable UDP port numbers depend on the device configuration. Default ports are not used for the...
Cisco IOS Software Smart Install Remote Code Execution Vulnerability
A vulnerability exists in the Smart Install feature of Cisco Catalyst Switches running Cisco IOS Software that could allow an unauthenticated, remote attacker to perform remote code execution on the affected device. Cisco has released software updates that address this vulnerability. There are no...
Cisco Identity Services Engine Database Default Credentials Vulnerability
...
CiscoWorks LAN Management Solution Remote Code Execution Vulnerabilities
...
Cisco Unified Service Monitor and Cisco Unified Operations Manager Remote Code Execution Vulnerabilities
...
Cisco Nexus 5000 and 3000 Series Switches Access Control List Bypass Vulnerability
...
Denial of Service Vulnerability in Cisco TelePresence Codecs
...
Apache HTTPd Range Header Denial of Service Vulnerability
The Apache HTTPd server contains a denial of service vulnerability when it handles multiple, overlapping ranges. Multiple Cisco products may be affected by this vulnerability. Mitigations that can be deployed on Cisco devices within the network are available in the Cisco Applied Intelligence...
Open Query Interface in Cisco Unified Communications Manager and Cisco Unified Presence Server
...
Cisco Unified Communications Manager Denial of Service Vulnerabilities
...
Denial of Service Vulnerabilities in Cisco Intercompany Media Engine
...
Cisco IOS Software SSH Banner Processing Error Denial of Service Vulnerability
Cisco IOS Software contains a vulnerability that could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of login banners by Cisco IOS Software. An authenticated, remote attacker could exploit this vulnerability by...
Cisco TelePresence Recording Server Default Credentials for Root Account Vulnerability
...
Cisco SA 500 Series Security Appliances Web Management Interface SQL Injection Vulnerability
Cisco SA 500 Series Security Appliances firmware contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary SQL code on a system. The vulnerability is due to improper validation of user-supplied input to the Cisco SA 500 Security Appliance web-based...
Cisco SA 500 Series Security Appliances Web Management Interface Vulnerabilities
...
Cisco ASR 9000 Series Routers Line Card IP Version 4 Denial of Service Vulnerability
...
Cisco Content Services Gateway Denial of Service Vulnerability
...
Cisco IOS Real-time Transport Protocol Packet Processing Denial of Service Vulnerability
Cisco IOS Software contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on a targeted device. The vulnerability is due to errors in processing malformed packets. An unauthenticated, remote attacker could exploit the vulnerability...
Default Credentials Vulnerability in Cisco Network Registrar
...
Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client
...
Default Credentials for root Account on the Cisco Media Experience Engine 5600
...
Multiple Vulnerabilities in Cisco Unified IP Phones 7900 Series
...
Cisco Unified IP Phones 7900 Series Unsigned Code Installation Vulnerability
Cisco Unified IP Phones 7900 Series devices contain a vulnerability that could allow an authenticated, local attacker to load a software image without verification. The vulnerability is due to insecure security checks on software images. An authenticated, local attacker could exploit this...
Cisco Content Delivery System Internet Streamer: Web Server Vulnerability
...
Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities
...
Cisco IOS XR Software IP Packet Vulnerability
...
Cisco IOS XR Software SSHv1 Denial of Service Vulnerability
...
Cisco XR 12000 Series Shared Port Adapters Interface Processor Vulnerability
...
Cisco RVS4000 and WRVS4400N Gigabit Security Routers Firmware SSL Key Disclosure Vulnerability
The firmware of Cisco RVS4000 4-port Gigabit Security Routers and WRVS4400N Wireless-N Gigabit Security Routers contains a vulnerability that could allow an unauthenticated, remote attacker to access sensitive information from a targeted device. The vulnerability is due to improper security...
Cisco Unified Operations Manager Multiple Cross-Site Scripting Vulnerabilities
Cisco Unified Operations Manager contains multiple cross-site scripting vulnerabilities that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to insufficient validation of user-supplied input to certain scripts that make up the...
CiscoWorks Common Services Framework Help Servlet Cross-Site Scripting Vulnerability
CiscoWorks Common Services contains a cross-site scripting vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of malformed user input supplied via URL parameters to the affected application. A...
Cisco Unified Operations Manager Common Services Device Center Cross-Site Scripting Vulnerability
Cisco Unified Operations Manager contains a cross-site scripting vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of user input supplied to the Common Services Device Center component used b...
Cisco Wireless LAN Controllers Denial of Service Vulnerability
...
Multiple Vulnerabilities in Cisco Unified Communications Manager
...
Cisco Unified Communications Manager Potential SQL Injection Vulnerability
Cisco Unified Communications Manager contains a vulnerability that could allow an unauthenticated, remote attacker to conduct SQL injection on a vulnerable system. The vulnerability is in a JavaServer Pages JSP script due to insufficient checks on user-supplied input. An unauthenticated, remote...