Browse CVEs

HIGH 7.1 CVE-2015-0688 Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor (ESP) module, when NAT is enabled, allows remote attackers to cause a … Ios Xe Mitigation only Fix from $1,9502015-04-04 MEDIUM 6.3 CVE-2015-0686 The SNMP implementation in Cisco NX-OS 6.1(2)I2(3) on Nexus 9000 devices, when a Reset High Availability (HA) policy is configured, allows remote aut… Nx Os Mitigation only Fix from $1,6002015-04-03 MEDIUM 6.3 CVE-2015-0687 The SNMP implementation in Cisco IOS 15.1(2)SG4 on Catalyst 4500 devices, when single-switch Virtual Switching System (VSS) is configured, allows rem… iOS Mitigation only Fix from $1,6002015-04-03 MEDIUM 5.0 CVE-2015-0672 The DHCPv4 server in Cisco IOS XR 5.2.2 on ASR 9000 devices allows remote attackers to cause a denial of service (service outage) via a flood of craf… Ios Xr Mitigation only Fix from $1,6002015-03-26 HIGH 7.8 CVE-2015-0648 Memory leak in Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (memory consumption) via crafted Commo… iOS Mitigation only Fix from $1,9502015-03-26 HIGH 7.8 CVE-2015-0646 Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3.10.xS be… Ios Xe Mitigation only Fix from $1,9502015-03-26 HIGH 7.8 CVE-2015-0643 Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3… Ios Xe Mitigation only Fix from $1,9502015-03-26 MEDIUM 5.0 CVE-2015-0671 The DNS implementation in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) 3.2(1) allows remote attackers to cause a denial of ser… Videoscape Delivery System For Internet Streamer Mitigation only Fix from $1,6002015-03-20 MEDIUM 5.0 CVE-2015-0617 Cisco ASR 5500 System Architecture Evolution (SAE) Gateway devices allow remote attackers to cause a denial of service (CPU consumption and SNMP outa… Asr 5000 Series Software Mitigation only Fix from $1,6002015-02-18 HIGH 7.1 CVE-2015-0593 The Zone-Based Firewall implementation in Cisco IOS 12.4(122)T and earlier does not properly manage session-object structures, which allows remote at… iOS Mitigation only Fix from $1,9502015-02-13 MEDIUM 5.0 CVE-2015-0619 Memory leak in the embedded web server in the WebVPN subsystem in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to cause a… Adaptive Security Appliance Software Mitigation only Fix from $1,6002015-02-12 HIGH 7.8 CVE-2015-0592 The Zone-Based Firewall implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reload) via cr… iOS after 15.4 Fix from $1,9502015-02-12 HIGH 7.8 CVE-2015-0586 The Network-Based Application Recognition (NBAR) protocol implementation in Cisco IOS 15.3(100)M and earlier on Cisco 2900 Integrated Services Router… iOS after 15.3 Fix from $1,9502015-01-28 MEDIUM 5.0 CVE-2015-0591 Cisco Unified Communications Domain Manager (UCDM) 10 allows remote attackers to cause a denial of service (daemon hang and GUI outage) via a flood o… Unified Communications Domain Manager Mitigation only Fix from $1,6002015-01-15 MEDIUM 5.0 CVE-2015-0579 Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway allow remote attackers to cause a denial of service (memory and CPU consumpt… Telepresence Video Communication Server Mitigation only Fix from $1,6002015-01-14 MEDIUM 5.7 CVE-2015-0578 Cisco Adaptive Security Appliance (ASA) Software, when a DHCPv6 relay is configured, allows remote attackers to cause a denial of service (device rel… Adaptive Security Appliance Software Mitigation only Fix from $1,6002015-01-14 MEDIUM 5.0 CVE-2014-8020 Cisco Unified Communication Domain Manager Platform Software allows remote attackers to cause a denial of service (CPU consumption, and performance d… Unified Communications Domain Manager Mitigation only Fix from $1,6002015-01-10 MEDIUM 5.0 CVE-2014-8016 The Cisco IronPort Email Security Appliance (ESA) allows remote attackers to cause a denial of service (CPU consumption) via long Subject headers in … Ironport Email Security Appliances Mitigation only Fix from $1,6002014-12-19 MEDIUM 5.0 CVE-2014-8004 Cisco IOS XR allows remote attackers to cause a denial of service (LISP process reload) by establishing many LISP TCP sessions, aka Bug ID CSCuq90378. Ios Xr Mitigation only Fix from $1,6002014-11-25 MEDIUM 6.1 CVE-2014-7997 The DHCP implementation in Cisco IOS on Aironet access points does not properly handle error conditions with short leases and unsuccessful lease-rene… iOS Mitigation only Fix from $1,6002014-11-15 MEDIUM 5.0 CVE-2014-3293 Cisco IOS 15.4(3)S0b on ASR901 devices makes incorrect decisions to use the CPU for IPv4 packet processing, which allows remote attackers to cause a … iOS Mitigation only Fix from $1,6002014-10-28 MEDIUM 6.1 CVE-2014-3409 The Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SRE9a and earlier and IOS XE 3.13S and earlier allows remote a… iOS after 12.2 Fix from $1,6002014-10-25 HIGH 7.8 CVE-2014-3368 Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.2 allow remote attackers to cause a denial of service (device r… Expressway Software Mitigation only Fix from $1,9502014-10-19 HIGH 7.8 CVE-2014-3397 The network stack in Cisco TelePresence MCU Software before 4.3(2.30) allows remote attackers to cause a denial of service (memory consumption) via c… Telepresence Mcu Software after 4.3 Fix from $1,9502014-10-19 HIGH 7.1 CVE-2014-3369 The SIP IX implementation in Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allows remote attackers to cau… Expressway Software Mitigation only Fix from $1,9502014-10-19 HIGH 7.1 CVE-2014-3370 Cisco TelePresence Video Communication Server (VCS) and Expressway Software before X8.1.1 allow remote attackers to cause a denial of service (device… Telepresence Video Communication Server Software Mitigation only Fix from $1,9502014-10-19 HIGH 7.8 CVE-2014-3383 The IKE implementation in the VPN component in Cisco ASA Software 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device re… Asa Mitigation only Fix from $1,9502014-10-10 HIGH 7.8 CVE-2014-3384 The IKEv2 implementation in Cisco ASA Software 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote… Asa Mitigation only Fix from $1,9502014-10-10 HIGH 7.8 CVE-2014-3386 The GPRS Tunneling Protocol (GTP) inspection engine in Cisco ASA Software 8.2 before 8.2(5.51), 8.4 before 8.4(7.15), 8.7 before 8.7(1.13), 9.0 befor… Asa Mitigation only Fix from $1,9502014-10-10 HIGH 7.8 CVE-2014-3387 The SunRPC inspection engine in Cisco ASA Software 7.2 before 7.2(5.14), 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.5 before… Asa Mitigation only Fix from $1,9502014-10-10