Vulnerability index

Browse CVEs

359 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Memory Buffer Bounds ErrorCWE-119 × clear
iOS MEDIUM 6.5
CVE-2016-1424

Cisco IOS 15.2(1)T1.11 and 15.2(2)TST allows remote attackers to cause a denial of service (device crash) via a crafted LLDP packet, aka Bug ID CSCun…

Mitigation only
Fix from $1,600 2016-06-19
Rv215w Wireless N Vpn Router Firmware MEDIUM 6.5
CVE-2016-1397

Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3…

Mitigation only
Fix from $1,600 2016-06-19
Ip Phone 8800 Series Firmware HIGH 7.5
CVE-2016-1421

A vulnerability in the web application for Cisco IP Phones could allow an unauthenticated, remote attacker to execute code with root privileges or ca…

Mitigation only
Fix from $1,950 2016-06-10
Email Security Appliance HIGH 7.5
CVE-2016-1405

libclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco Email Security Appliance (ESA) devices before 9.7.0-1…

Mitigation only
Fix from $1,950 2016-06-08
Adaptive Security Appliance Software MEDIUM 6.5
CVE-2016-1385

The XML parser in Cisco Adaptive Security Appliance (ASA) Software through 9.5.2 allows remote authenticated users to cause a denial of service (inst…

Mitigation only
Fix from $1,600 2016-05-26
Identity Services Engine Software HIGH 7.5
CVE-2016-1402

The Active Directory (AD) integration component in Cisco Identity Service Engine (ISE) before 1.2.0.899 patch 7, when AD group-membership authorizati…

Mitigation only
Fix from $1,950 2016-05-21
Ios Xe HIGH 7.5
CVE-2015-6360EPSS 8%

The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packe…

Mitigation only
Fix from $1,950 2016-04-21
Unified Computing System Platform Emulator HIGH 8.4
CVE-2016-1340

Heap-based buffer overflow in Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS9 allows local users to gain p…

Mitigation only
Fix from $1,950 2016-04-16
Dpc2203 Cable Modem Firmware CRITICAL 9.8
CVE-2016-1327EPSS 7%

Buffer overflow in the web server on Cisco DPC2203 and EPC2203 devices with firmware r1_customer_image allows remote attackers to execute arbitrary c…

Mitigation only
Fix from $2,300 2016-03-09
Asa 5500 Csc Ssm Firmware HIGH 7.5
CVE-2016-1312

The HTTPS inspection engine in the Content Security and Control Security Services Module (CSC-SSM) 6.6 before 6.6.1164.0 for Cisco ASA 5500 devices a…

Mitigation only
Fix from $1,950 2016-03-09
Prime Infrastructure MEDIUM 6.4
CVE-2016-1358

Cisco Prime Infrastructure 2.2, 3.0, and 3.1(0.0) allows remote authenticated users to read arbitrary files or cause a denial of service via an XML d…

Mitigation only
Fix from $1,600 2016-03-03
Adaptive Security Appliance Software CRITICAL 9.8
CVE-2016-1287EPSS 77%

Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0 before 9.0(4.38), 9.1 before…

No fix yet
Fix from $2,300 2016-02-11
iOS MEDIUM 6.1
CVE-2015-6359

The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS 15.3(3)S0.1 on ASR devices mishandles internal tables, which allow…

Mitigation only
Fix from $1,600 2015-12-15
Asr 5000 Software MEDIUM 5.0
CVE-2015-6340

The Proxy Mobile IPv6 (PMIPv6) component in the CDMA implementation on Cisco ASR 5000 devices with software 19.0.M0.60737 allows remote attackers to …

Mitigation only
Fix from $1,600 2015-10-27
Telepresence Server Software HIGH 7.8
CVE-2015-6284

Buffer overflow in the Conference Control Protocol API implementation in Cisco TelePresence Server software before 4.1(2.33) on 7010, MSE 8710, Multi…

Mitigation only
Fix from $1,950 2015-09-20
Asr 1000 Series Software MEDIUM 5.0
CVE-2015-6274

The IPv4 implementation on Cisco ASR 1000 devices with software 15.5(3)S allows remote attackers to cause a denial of service (ESP QFP CPU consumptio…

Mitigation only
Fix from $1,600 2015-09-02
Nx Os MEDIUM 6.1
CVE-2015-4323

Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.9); Nexus 3000 devices 6.0(2)U5(1.41), 7.0(3)I2(0.373), and 7.3(0…

Mitigation only
Fix from $1,600 2015-08-19
Nx Os MEDIUM 6.1
CVE-2015-4324

Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.81), Nexus 3000 devices 7.3(0)ZN(0.81), Nexus 4000 devices 4.1(2)…

Mitigation only
Fix from $1,600 2015-08-19
Openh264 HIGH 7.5
CVE-2014-8002

Use-after-free vulnerability in decode_slice.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded…

Fix: after 1.2.0
Fix from $1,950 2014-11-25
Openh264 HIGH 7.5
CVE-2014-8001

Buffer overflow in decode.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file.

Fix: after 1.2.0
Fix from $1,950 2014-11-25
Ios Xe HIGH 7.8
CVE-2014-3355

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and …

Mitigation only
Fix from $1,950 2014-09-25
Ios Xe HIGH 7.8
CVE-2014-3356

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and …

Mitigation only
Fix from $1,950 2014-09-25
iOS HIGH 7.1
CVE-2014-3361

The ALG module in Cisco IOS 15.0 through 15.4 does not properly implement SIP over NAT, which allows remote attackers to cause a denial of service (d…

Mitigation only
Fix from $1,950 2014-09-25
Adaptive Security Appliance Software MEDIUM 6.8
CVE-2013-6691

The WebVPN CIFS implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0(.4.1) and earlier allows remote CIFS servers to cause a denial…

Fix: after 9.0
Fix from $1,600 2014-07-14
Webex Meeting Center MEDIUM 5.1
CVE-2014-3311

Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote…

Mitigation only
Fix from $1,600 2014-07-10
Unified Computing System 6120xp Fabric Interconnect HIGH 7.6
CVE-2014-3261

Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.4(1i), NX…

Mitigation only
Fix from $1,950 2014-05-26
Webex Advanced Recording Format Player HIGH 9.3
CVE-2014-2135

Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attack…

Mitigation only
Fix from $1,950 2014-05-08
Webex Advanced Recording Format Player HIGH 9.3
CVE-2014-2136

Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attack…

Mitigation only
Fix from $1,950 2014-05-08
Webex Advanced Recording Format Player HIGH 9.3
CVE-2014-2133

Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attack…

Mitigation only
Fix from $1,950 2014-05-08
Webex Advanced Recording Format Player HIGH 9.3
CVE-2014-2134

Heap-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remot…

Mitigation only
Fix from $1,950 2014-05-08