Browse CVEs

MEDIUM 6.5 CVE-2016-6435EPSS 37% The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug … Secure Firewall Management Center No fix yet Fix from $1,6002016-10-06 HIGH 7.8 CVE-2016-6434 Cisco Firepower Management Center 6.0.1 has hardcoded database credentials, which allows local users to obtain sensitive information by leveraging CL… Secure Firewall Management Center No fix yet Fix from $1,9502016-10-06 HIGH 8.8 CVE-2016-6433EPSS 76% The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users to execute arbitrary command… Secure Firewall Management Center No fix yet Fix from $1,9502016-10-06 HIGH 7.8 CVE-2016-6428 Cisco IOS XR 6.1.1 allows local users to execute arbitrary OS commands as root by leveraging admin privileges, aka Bug ID CSCva38349. Ios Xr Mitigation only Fix from $1,9502016-10-06 HIGH 8.8 CVE-2016-6427 Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center E… Unified Contact Center Express Mitigation only Fix from $1,9502016-10-06 MEDIUM 6.1 CVE-2016-6425 Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express … Unified Contact Center Express Mitigation only Fix from $1,6002016-10-06 MEDIUM 6.5 CVE-2016-6424 The DHCP Relay implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4.7.29 and 9.1.7.4 allows remote attackers to cause a denial of s… Adaptive Security Appliance Software Mitigation only Fix from $1,6002016-10-06 HIGH 7.5 CVE-2016-6422 Cisco IOS 12.2(33)SXJ9 on Supervisor Engine 32 and 720 modules for 6500 and 7600 devices mishandles certain operators, flags, and keywords in TCAM sh… iOS Mitigation only Fix from $1,9502016-10-06 CRITICAL 9.8 CVE-2016-1453EPSS 8% Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote… Nx Os Mitigation only Fix from $2,3002016-10-06 HIGH 7.5 CVE-2015-6393 Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attac… Nx Os Mitigation only Fix from $1,9502016-10-06 HIGH 8.0 CVE-2015-0721 Cisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allo… Nx Os Mitigation only Fix from $1,9502016-10-06 HIGH 7.5 CVE-2015-6392 Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to caus… Nx Os Mitigation only Fix from $1,9502016-10-06 HIGH 7.5 CVE-2016-6426 The j_spring_security_switch_user function in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Expres… Unified Contact Center Express Mitigation only Fix from $1,9502016-10-05 MEDIUM 6.5 CVE-2016-6423 The IKEv2 client and initiator implementations in Cisco IOS 15.5(3)M and IOS XE allow remote IKEv2 servers to cause a denial of service (device reloa… iOS Mitigation only Fix from $1,6002016-10-05 MEDIUM 5.3 CVE-2016-6421 Cisco IOS XR 5.2.2 allows remote attackers to cause a denial of service (process restart) via a crafted OSPF Link State Advertisement (LSA) update, a… Ios Xr Mitigation only Fix from $1,6002016-10-05 HIGH 7.5 CVE-2016-6391 Cisco IOS 12.2 and 15.0 through 15.3 allows remote attackers to cause a denial of service (traffic-processing outage) via a crafted series of Common … iOS Mitigation only Fix from $1,9502016-10-05 HIGH 7.5 CVE-2016-6385 Memory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.2 through 3.8 allows remote attackers to … iOS Mitigation only Fix from $1,9502016-10-05 HIGH 8.1 CVE-2016-6380 The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive inform… iOS Mitigation only Fix from $1,9502016-10-05 HIGH 7.5 CVE-2016-6379 Cisco IOS 12.2 and IOS XE 3.14 through 3.16 and 16.1 allow remote attackers to cause a denial of service (device reload) via crafted IP Detail Record… iOS Mitigation only Fix from $1,9502016-10-05 HIGH 7.5 CVE-2016-6378 Cisco IOS XE 3.1 through 3.17 and 16.1 through 16.2 allows remote attackers to cause a denial of service (device reload) via crafted ICMP packets tha… Ios Xe Mitigation only Fix from $1,9502016-10-05 HIGH 7.5 CVE-2016-1455 Cisco NX-OS before 7.0(3)I2(2e) and 7.0(3)I4 before 7.0(3)I4(1) has an incorrect iptables local-interface configuration, which allows remote attacker… Nx Os Mitigation only Fix from $1,9502016-10-05 MEDIUM 6.1 CVE-2016-6418 Cross-site scripting (XSS) vulnerability in Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.0 through 3.4.0 allows remote attackers to… Videoscape Distribution Suite Service Manager Mitigation only Fix from $1,6002016-10-05 HIGH 8.8 CVE-2016-6417 Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote… Firesight System Software Mitigation only Fix from $1,9502016-10-05 MEDIUM 5.9 CVE-2016-6416 The FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 through 9.9.6-026, Web Security Appliance (WSA) devices 9.0.0-16… Content Security Management Appliance Mitigation only Fix from $1,6002016-10-05 HIGH 7.5 CVE-2016-6392 Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a denial of service (device restart) via a crafted IP… iOS Mitigation only Fix from $1,9502016-10-05 HIGH 7.5 CVE-2016-6386 Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service (data-structure corruption and device… Ios Xe Mitigation only Fix from $1,9502016-10-05 HIGH 7.5 CVE-2016-6382 Cisco IOS 15.2 through 15.6 and IOS XE 3.6 through 3.17 and 16.1 allow remote attackers to cause a denial of service (device restart) via a malformed… iOS Mitigation only Fix from $1,9502016-10-05 HIGH 7.5 CVE-2016-6381 Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service (memory consumption or … iOS Mitigation only Fix from $1,9502016-10-05 MEDIUM 6.5 CVE-2016-6420 Cisco FireSIGHT System Software 4.10.3 through 5.4.0 in Firepower Management Center allows remote authenticated users to bypass authorization checks … Firesight System Software Mitigation only Fix from $1,6002016-10-05 HIGH 7.5 CVE-2016-6419 SQL injection vulnerability in Cisco Firepower Management Center 4.10.3 through 5.4.0 allows remote authenticated users to execute arbitrary SQL comm… Secure Firewall Management Center Mitigation only Fix from $1,9502016-10-05