Browse CVEs

HIGH 9.0 CVE-2014-0679 Cisco Prime Infrastructure 1.2 and 1.3 before 1.3.0.20-2, 1.4 before 1.4.0.45-2, and 2.0 before 2.0.0.0.294-2 allows remote authenticated users to ex… Prime Infrastructure Mitigation only Fix from $1,9502014-02-27 MEDIUM 6.8 CVE-2014-0747 The Certificate Authority Proxy Function (CAPF) CLI implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows lo… Unified Communications Manager after 10.0 Fix from $1,6002014-02-27 MEDIUM 6.2 CVE-2014-0742 The Certificate Authority Proxy Function (CAPF) CLI implementation in the CSR management feature in Cisco Unified Communications Manager (Unified CM)… Unified Communications Manager after 10.0 Fix from $1,6002014-02-27 HIGH 7.1 CVE-2014-0718 The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of serv… Ips Sensor Software Mitigation only Fix from $1,9502014-02-22 HIGH 7.1 CVE-2014-0720 Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (Analysis Engine process outage) … Ips Sensor Software after 7.1 Fix from $1,9502014-02-22 MEDIUM 6.8 CVE-2014-0730 Cisco Unified Computing System (UCS) Central Software 1.1 and earlier allows local users to gain privileges via a CLI copy command in a local-mgmt co… Unified Computing System Central Software after 1.1 Fix from $1,6002014-02-22 HIGH 7.1 CVE-2014-0662 The SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote attackers to cause a denial of service (process failur… Telepresence Video Communication Server Software Mitigation only Fix from $1,9502014-01-22 MEDIUM 5.0 CVE-2014-0677 The Label Distribution Protocol (LDP) functionality in Cisco NX-OS allows remote attackers to cause a denial of service (temporary LDP session outage… Nx Os Mitigation only Fix from $1,6002014-01-22 HIGH 7.1 CVE-2014-0660 Cisco TelePresence ISDN Gateway with software before 2.2(1.92) allows remote attackers to cause a denial of service (D-channel call outage) via a cra… Telepresence Isdn Gateway Software after 2.1 Fix from $1,9502014-01-22 MEDIUM 5.8 CVE-2014-0671 Open redirect vulnerability in Cisco MediaSense allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an … Mediasense Mitigation only Fix from $1,6002014-01-22 HIGH 10.0 CVE-2014-0650 The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating-system co… Secure Access Control System after 5.4.0.46.2 Fix from $1,9502014-01-16 MEDIUM 5.4 CVE-2014-0658 Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service (unregistration) via a crafted SIP header, aka Bug ID CSCul24898. Unified Ip Phones 9900 Series Firmware Mitigation only Fix from $1,6002014-01-10 MEDIUM 5.4 CVE-2013-6981 Cisco IOS XE 3.7S(.1) and earlier allows remote attackers to cause a denial of service (Packet Processor crash) via fragmented MPLS IP packets, aka B… Ios Xe after 3.7s Fix from $1,6002013-12-28 MEDIUM 5.0 CVE-2013-6701 The tNetTaskLimit process on the Transport Node Controller (TNC) on Cisco ONS 15454 devices with software 9.6 and earlier does not properly prioritiz… Cisco Ons 15454 System Software Mitigation only Fix from $1,6002013-12-18 MEDIUM 5.8 CVE-2013-6966 Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing atta… Webex Training Center Mitigation only Fix from $1,6002013-12-17 MEDIUM 5.8 CVE-2013-6959 Open redirect vulnerability in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks… Webex Sales Center Mitigation only Fix from $1,6002013-12-14 MEDIUM 5.8 CVE-2013-6967 Open redirect vulnerability in the mobile-browser subsystem in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web si… Webex Sales Center No fix yet Fix from $1,6002013-12-14 MEDIUM 5.8 CVE-2013-6971 Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing atta… Webex Training Center Mitigation only Fix from $1,6002013-12-14 HIGH 7.1 CVE-2013-6703 The TLS/SSLv3 module on Cisco ONS 15454 controller cards allows remote attackers to cause a denial of service (card reset) via crafted (1) TLS or (2)… Ons 15454 Mitigation only Fix from $1,9502013-12-03 MEDIUM 6.1 CVE-2013-6705 The IP Device Tracking (IPDT) feature in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (IPDT AVL corruption and device re… iOS Mitigation only Fix from $1,6002013-12-03 HIGH 7.1 CVE-2013-6696 Cisco Adaptive Security Appliance (ASA) Software does not properly handle errors during the processing of DNS responses, which allows remote attacker… Adaptive Security Appliance Software Mitigation only Fix from $1,9502013-12-02 MEDIUM 5.4 CVE-2013-6706 The Cisco Express Forwarding processing module in Cisco IOS XE allows remote attackers to cause a denial of service (device reload) via crafted MPLS … Ios Xe Mitigation only Fix from $1,6002013-11-29 MEDIUM 5.0 CVE-2013-6700 The SNMP module in Cisco IOS XR allows remote attackers to cause a denial of service (process reload) via a request for an unspecified MIB, aka Bug I… Ios Xr Mitigation only Fix from $1,6002013-11-29 MEDIUM 6.9 CVE-2013-6689 Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier allows local users to bypass file permissions, and read, modify, or create arbit… Unified Communications Manager after 9.1 Fix from $1,6002013-11-18 MEDIUM 6.8 CVE-2013-6686 The SSL VPN implementation in Cisco IOS 15.3(1)T2 and earlier allows remote authenticated users to cause a denial of service (interface queue wedge) … iOS after 15.3 Fix from $1,6002013-11-18 MEDIUM 6.8 CVE-2013-3406 The "Files Available for Download" implementation in the Cisco Intelligent Automation for Cloud component in Cisco Services Portal 9.4(1) allows remo… Service Portal Mitigation only Fix from $1,6002013-11-18 MEDIUM 6.8 CVE-2013-6684 The web framework on Cisco Wireless LAN Controller (WLC) devices does not properly validate configuration parameters, which allows remote authenticat… Wireless Lan Controller Mitigation only Fix from $1,6002013-11-13 MEDIUM 6.4 CVE-2013-6682 The phone-proxy implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier does not properly validate X.509 certificates,… Adaptive Security Appliance Software after 9.0.3 Fix from $1,6002013-11-13 MEDIUM 6.1 CVE-2013-6683 The IPv6 implementation in Cisco NX-OS does not properly handle neighbor-table adjacencies, which allows remote attackers to cause a denial of servic… Nx Os Mitigation only Fix from $1,6002013-11-13 HIGH 7.1 CVE-2013-5568 The auto-update implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier allows remote attackers to cause a denial of s… Adaptive Security Appliance Software after 9.0.3 Fix from $1,9502013-11-13