Browse CVEs

HIGH 10.0 CVE-2007-2282 Cisco Network Services (CNS) NetFlow Collection Engine (NFC) before 6.0 has an nfcuser account with the default password nfcuser, which allows remote… Netflow Collection Engine Mitigation only Fix from $1,9502007-04-26 MEDIUM 6.1 CVE-2007-2038 The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.193.5, 4.0.x before 4.0.206.0, and 4.1.x allows remote attack… 2000 Wireless Lan Controller Mitigation only Fix from $1,6002007-04-16 HIGH 7.5 CVE-2007-1800 Cisco Secure ACS does not require authentication when Cisco Trust Agent (CTA) transmits posture information, which might allow remote attackers to ga… Trust Agent Mitigation only Fix from $1,9502007-04-02 MEDIUM 5.0 CVE-2007-1542EPSS 9% Unspecified vulnerability in the Cisco IP Phone 7940 and 7960 running firmware before POS8-6-0 allows remote attackers to cause a denial of service v… 7940 Router Mitigation only Fix from $1,6002007-03-20 HIGH 10.0 CVE-2007-1257EPSS 7% The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNM… Network Analysis Module Mitigation only Fix from $1,9502007-03-03 MEDIUM 6.1 CVE-2007-1258 Unspecified vulnerability in Cisco IOS 12.2SXA, SXB, SXD, and SXF; and the MSFC2, MSFC2a and MSFC3 running in Hybrid Mode on Cisco Catalyst 6000, 650… Catalyst 6000 Mitigation only Fix from $1,6002007-03-03 HIGH 7.2 CVE-2007-1067 Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been depl… Secure Services Client Mitigation only Fix from $1,9502007-02-22 HIGH 7.1 CVE-2007-0918 The ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote … iOS Mitigation only Fix from $1,9502007-02-14 MEDIUM 6.4 CVE-2007-0917 The Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular express… iOS Mitigation only Fix from $1,6002007-02-14 HIGH 10.0 CVE-2007-0480EPSS 9% Cisco IOS 9.x, 10.x, 11.x, and 12.x and IOS XR 2.0.x, 3.0.x, and 3.2.x allows remote attackers to cause a denial of service or execute arbitrary code… Ios Transmission Control Protocol Mitigation only Fix from $1,9502007-01-25 HIGH 7.8 CVE-2007-0479 Memory leak in the TCP listener in Cisco IOS 9.x, 10.x, 11.x, and 12.x allows remote attackers to cause a denial of service by sending crafted TCP tr… Ios Transmission Control Protocol Mitigation only Fix from $1,9502007-01-25 HIGH 7.8 CVE-2007-0481 Cisco IOS allows remote attackers to cause a denial of service (crash) via a crafted IPv6 Type 0 Routing header. Ios Transmission Control Protocol Mitigation only Fix from $1,9502007-01-25 HIGH 10.0 CVE-2006-4098EPSS 13% Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before… Secure Access Control Server Mitigation only Fix from $1,9502006-12-31 MEDIUM 5.5 CVE-2006-5393 Cisco Secure Desktop (CSD) does not require that the ClearPageFileAtShutdown (aka CCE-Winv2.0-407) registry value equals 1, which might allow local u… Secure Desktop Mitigation only Fix from $1,6002006-10-18 HIGH 7.5 CVE-2006-4983 Cisco NAC allows quarantined devices to communicate over the network with (1) DNS, (2) DHCP, and (3) EAPoUDP, which allows attackers to bypass contro… Network Access Control Mitigation only Fix from $1,9502006-09-26 MEDIUM 5.0 CVE-2006-4910 The web administration interface (mainApp) to Cisco IDS before 4.1(5c), and IPS 5.0 before 5.0(6p1) and 5.1 before 5.1(2) allows remote attackers to … Ids Sensor Software Mitigation only Fix from $1,6002006-09-21 MEDIUM 5.0 CVE-2006-4352 The ArrowPoint cookie functionality for Cisco 11000 series Content Service Switches specifies an internal IP address if the administrator does not sp… Content Services Switch 11000 No fix yet Fix from $1,6002006-08-25 MEDIUM 6.8 CVE-2006-4312 Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4)… Pix Firewall 501 Mitigation only Fix from $1,6002006-08-23 MEDIUM 5.0 CVE-2006-4194 Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via u… Pix Firewall 501 Mitigation only Fix from $1,6002006-08-17 MEDIUM 5.0 CVE-2006-4032 Unspecified vulnerability in Cisco IOS CallManager Express (CME) allows remote attackers to gain sensitive information (user names) from the Session … Callmanager Express Mitigation only Fix from $1,6002006-08-09 MEDIUM 5.0 CVE-2006-3906EPSS 7% Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to ca… iOS Mitigation only Fix from $1,6002006-07-27 HIGH 7.5 CVE-2006-3226 Cisco Secure Access Control Server (ACS) 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server … Secure Access Control Server Mitigation only Fix from $1,9502006-06-26 MEDIUM 5.0 CVE-2006-1927 Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 or Cisco 12000 series routers, allows remote attac… Ios Xr Mitigation only Fix from $1,6002006-04-20 MEDIUM 5.0 CVE-2006-1928 Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 routers, allows remote attackers to cause a denial… Ios Xr Mitigation only Fix from $1,6002006-04-20 HIGH 7.5 CVE-2006-1672 The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with … Transport Controller Mitigation only Fix from $1,9502006-04-07 MEDIUM 5.0 CVE-2006-1671 Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (card … Transport Controller Mitigation only Fix from $1,6002006-04-07 MEDIUM 5.1 CVE-2006-0764 The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used by multiple Cisco Anomaly Detec… Anomaly Guard Module Mitigation only Fix from $1,6002006-02-18 MEDIUM 6.1 CVE-2005-4826 Unspecified vulnerability in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(22)EA3 on Catalyst 2950T switches allows remote attackers to … iOS Mitigation only Fix from $1,6002005-12-31 MEDIUM 5.0 CVE-2005-4794 Cisco IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services Manager (SESM) allows remote attackers to cause a deni… Application And Content Networking Software Mitigation only Fix from $1,6002005-12-31 HIGH 7.5 CVE-2005-4499 The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS)… Vpn 3001 Concentrator Mitigation only Fix from $1,9502005-12-22