Browse CVEs

HIGH 7.8 CVE-2015-0639 The Common Flow Table (CFT) feature in Cisco IOS XE 3.6 and 3.7 before 3.7.1S, 3.8 before 3.8.0S, 3.9 before 3.9.0S, 3.10 before 3.10.0S, 3.11 before… Ios Xe Mitigation only Fix from $1,9502015-03-26 HIGH 7.1 CVE-2015-0638 Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3, when a VRF interface is configured, allows remote attackers to cause a denial of service (interface queue… iOS Mitigation only Fix from $1,9502015-03-26 HIGH 7.8 CVE-2015-0637 The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS b… Ios Xe Mitigation only Fix from $1,9502015-03-26 HIGH 7.8 CVE-2015-0636 The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS b… Ios Xe Mitigation only Fix from $1,9502015-03-26 HIGH 9.0 CVE-2015-0635 The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS b… Ios Xe Mitigation only Fix from $1,9502015-03-26 MEDIUM 6.4 CVE-2015-0669 The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 15.4S and 15.4(3)S allows remote attackers to modify configuration settings… iOS Mitigation only Fix from $1,6002015-03-21 HIGH 7.8 CVE-2015-0652 The Session Description Protocol (SDP) implementation in Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway before X8.2 and Cis… Expressway Software Mitigation only Fix from $1,9502015-03-13 MEDIUM 5.0 CVE-2015-0657 Cisco IOS XR allows remote attackers to cause a denial of service (RSVP process reload) via a malformed RSVP packet, aka Bug ID CSCur69192. Ios Xr Mitigation only Fix from $1,6002015-03-06 MEDIUM 6.8 CVE-2015-0633 The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to… Unified Computing System Mitigation only Fix from $1,6002015-02-26 HIGH 7.2 CVE-2015-0584 The image-upgrade implementation on Cisco Desktop Collaboration Experience (aka Collaboration Desk Experience or DX) DX650 endpoints allows local use… Desktop Collaboration Experience Dx650 Mitigation only Fix from $1,9502015-02-20 HIGH 7.1 CVE-2015-0622 The Wireless Intrusion Detection (aka WIDS) functionality on Cisco Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of… Wireless Lan Controller Mitigation only Fix from $1,9502015-02-19 MEDIUM 5.0 CVE-2015-0600 The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to cause a denial of service (logoff… Unified Ip Phones 9900 Series Firmware after 9.4 Fix from $1,6002015-02-07 HIGH 9.0 CVE-2015-0589 The administrative web interface in Cisco WebEx Meetings Server 1.0 through 1.5 allows remote authenticated users to execute arbitrary OS commands wi… Webex Meetings Server Mitigation only Fix from $1,9502015-02-07 MEDIUM 5.0 CVE-2015-0604 The web framework on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to upload files to arbitrary locations on… Unified Ip Phones 9971 Firmware Mitigation only Fix from $1,6002015-02-07 MEDIUM 5.0 CVE-2015-0597 The Forgot Password feature in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to enumerate administrative accounts via c… Webex Meetings Server after 1.5 Fix from $1,6002015-02-02 MEDIUM 5.7 CVE-2015-0578 Cisco Adaptive Security Appliance (ASA) Software, when a DHCPv6 relay is configured, allows remote attackers to cause a denial of service (device rel… Adaptive Security Appliance Software Mitigation only Fix from $1,6002015-01-14 MEDIUM 5.0 CVE-2014-3314 Cisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote attackers to spoof authentication forms and possibly… Anyconnect Secure Mobility Client Mitigation only Fix from $1,6002015-01-14 MEDIUM 5.0 CVE-2015-0582 The High Availability (HA) subsystem in Cisco NX-OS on MDS 9000 devices allows remote attackers to cause a denial of service via crafted traffic, aka… Nx Os Mitigation only Fix from $1,6002015-01-10 MEDIUM 5.0 CVE-2014-8036 The outlookpa component in Cisco WebEx Meetings Server does not properly validate API input, which allows remote attackers to modify a meeting's invi… Webex Meetings Server Mitigation only Fix from $1,6002015-01-10 MEDIUM 5.4 CVE-2014-7994 Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to execute arbitrary commands by leveraging knowledge of a… Meraki Mr Firmware after 2014-09-24 Fix from $1,6002014-12-24 MEDIUM 6.5 CVE-2014-8010 The web framework in Cisco Unified Communications Domain Manager 8 allows remote authenticated administrators to execute arbitrary OS commands via cr… Unified Communications Domain Manager Mitigation only Fix from $1,6002014-12-10 HIGH 7.2 CVE-2014-8003 Cisco Integrated Management Controller in Cisco Unified Computing System 2.2(2c)A and earlier allows local users to obtain shell access via a crafted… Unified Computing System after 2.2 Fix from $1,9502014-12-10 MEDIUM 6.8 CVE-2014-7989 Cisco Unified Computing System on B-Series blade servers allows local users to gain shell privileges via a crafted (1) ping6 or (2) traceroute6 comma… B200 M3 Mitigation only Fix from $1,6002014-11-07 MEDIUM 6.8 CVE-2014-7990 Cisco IOS XE 3.5E and earlier on WS-C3850, WS-C3860, and AIR-CT5760 devices does not properly parse the "request system shell" challenge response, wh… Ios Xe after 3.5e Fix from $1,6002014-11-07 MEDIUM 5.0 CVE-2014-2179 The Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attac… Rv180 Firmware after 1.0.5.8 Fix from $1,6002014-11-07 MEDIUM 6.8 CVE-2014-3390 The Virtual Network Management Center (VNMC) policy implementation in Cisco ASA Software 8.7 before 8.7(1.14), 9.2 before 9.2(2.8), and 9.3 before 9.… Adaptive Security Appliance Software Mitigation only Fix from $1,6002014-10-10 MEDIUM 6.8 CVE-2014-3391 Untrusted search path vulnerability in Cisco ASA Software 8.x before 8.4(3), 8.5, and 8.7 before 8.7(1.13) allows local users to gain privileges by p… Adaptive Security Appliance Software Mitigation only Fix from $1,6002014-10-10 MEDIUM 5.0 CVE-2014-3395 Cisco WebEx Meetings Server (WMS) 2.5 allows remote attackers to trigger the download of arbitrary files via a crafted URL, aka Bug ID CSCup10343. Webex Meetings Server Mitigation only Fix from $1,6002014-09-30 HIGH 7.8 CVE-2014-3354 Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG … iOS Mitigation only Fix from $1,9502014-09-25 MEDIUM 6.1 CVE-2014-3379 Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (NPU and card hang or re… Ios Xr Mitigation only Fix from $1,6002014-09-20