Browse CVEs

MEDIUM 5.3 CVE-2017-12299 A vulnerability exists in the process of creating default IP blocks during device initialization for Cisco ASA Next-Generation Firewall Services that… Firepower Extensible Operating System Mitigation only Fix from $1,6002017-11-16 HIGH 8.8 CVE-2017-12277 A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security… Firepower Extensible Operating System after 1.1.3 Fix from $1,9502017-11-02 HIGH 8.1 CVE-2017-12276 A vulnerability in the web framework code for the SQL database interface of the Cisco Prime Collaboration Provisioning application could allow an aut… Prime Collaboration Provisioning 12.3+ Fix from $1,9502017-11-02 HIGH 7.4 CVE-2017-12275 A vulnerability in the implementation of 802.11v Basic Service Set (BSS) Transition Management functionality in Cisco Wireless LAN Controllers could … Wireless Lan Controller Software Mitigation only Fix from $1,9502017-11-02 MEDIUM 6.5 CVE-2017-12273 A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow an unauthe… Aironet 1562 Firmware Mitigation only Fix from $1,6002017-11-02 MEDIUM 6.5 CVE-2017-12274 A vulnerability in Extensible Authentication Protocol (EAP) ingress frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points … Aironet 1562 Firmware Mitigation only Fix from $1,6002017-11-02 MEDIUM 6.7 CVE-2017-12301 A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser an… Nx Os Mitigation only Fix from $1,6002017-10-19 MEDIUM 5.5 CVE-2017-12286 A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profile information from the affec… Jabber Mitigation only Fix from $1,6002017-10-19 MEDIUM 5.3 CVE-2017-12285EPSS 37% A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary fi… Prime Network Analysis Module Mitigation only Fix from $1,6002017-10-19 HIGH 8.6 CVE-2017-12244 A vulnerability in the detection engine parsing of IPv6 packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker t… Secure Firewall Management Center Mitigation only Fix from $1,9502017-10-05 HIGH 8.6 CVE-2017-12246EPSS 7% A vulnerability in the implementation of the direct authentication feature in Cisco Adaptive Security Appliance (ASA) Software could allow an unauthe… Adaptive Security Appliance Software Mitigation only Fix from $1,9502017-10-05 MEDIUM 5.3 CVE-2017-12264 A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… Meeting Server Mitigation only Fix from $1,6002017-10-05 CRITICAL 9.8 CVE-2017-12240 KEVEPSS 14% The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remot… iOS after 15.6 Fix from $2,3002017-09-29 HIGH 8.8 CVE-2017-12226 A vulnerability in the web-based Wireless Controller GUI of Cisco IOS XE Software for Cisco 5760 Wireless LAN Controllers, Cisco Catalyst 4500E Super… Ios Xe Mitigation only Fix from $1,9502017-09-29 HIGH 7.5 CVE-2017-12233 KEVEPSS 7% Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthen… iOS after 15.6 Fix from $1,9502017-09-29 HIGH 7.5 CVE-2017-12234 KEVEPSS 7% Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthen… iOS after 15.6 Fix from $1,9502017-09-29 HIGH 7.5 CVE-2017-12235 KEVEPSS 7% A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an un… iOS after 15.6 Fix from $1,9502017-09-29 MEDIUM 6.5 CVE-2017-12222 A vulnerability in the wireless controller manager of Cisco IOS XE could allow an unauthenticated, adjacent attacker to cause a restart of the switch… Ios Xe Mitigation only Fix from $1,6002017-09-29 MEDIUM 5.9 CVE-2017-12228 A vulnerability in the Cisco Network Plug and Play application of Cisco IOS 12.4 through 15.6 and Cisco IOS XE 3.3 through 16.4 could allow an unauth… iOS after 15.4 Fix from $1,6002017-09-29 MEDIUM 6.5 CVE-2010-3050 Cisco IOS before 12.2(33)SXI allows remote authenticated users to cause a denial of service (device reboot). iOS after 12.2 Fix from $1,6002017-09-25 MEDIUM 5.5 CVE-2010-3049 Cisco IOS before 12.2(33)SXI allows local users to cause a denial of service (device reboot). iOS after 12.2 Fix from $1,6002017-09-25 HIGH 8.8 CVE-2017-12214 A vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP) credential reset functionality for Cisco Unified Customer Voi… Unified Customer Voice Portal Mitigation only Fix from $1,9502017-09-21 HIGH 7.8 CVE-2017-12252 A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potent… Findit Network Discovery Utility Mitigation only Fix from $1,9502017-09-21 HIGH 7.1 CVE-2017-12215 A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance could allow an unauthenticate… Asyncos Mitigation only Fix from $1,9502017-09-21 MEDIUM 6.7 CVE-2017-12255 A vulnerability in the CLI of Cisco UCS Central Software could allow an authenticated, local attacker to gain shell access. The vulnerability is due … Unified Computing System Mitigation only Fix from $1,6002017-09-21 MEDIUM 5.3 CVE-2017-12250 A vulnerability in the HTTP web interface for Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause an… Wide Area Application Services Mitigation only Fix from $1,6002017-09-21 MEDIUM 6.7 CVE-2017-6794 A vulnerability in the CLI command-parsing code of Cisco Meeting Server could allow an authenticated, local attacker to perform command injection and… Meeting Server Mitigation only Fix from $1,6002017-09-07 MEDIUM 6.5 CVE-2017-6792 A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an authenticated, remote attacker to ove… Prime Collaboration Provisioning Mitigation only Fix from $1,6002017-09-07 MEDIUM 6.4 CVE-2017-12223 A vulnerability in the ROM Monitor (ROMMON) code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to… Ir800 Integrated Services Router Firmware Mitigation only Fix from $1,6002017-09-07 MEDIUM 5.8 CVE-2017-12218 A vulnerability in the malware detection functionality within Advanced Malware Protection (AMP) of Cisco AsyncOS Software for Cisco Email Security Ap… Asyncos Mitigation only Fix from $1,6002017-09-07