Browse CVEs

MEDIUM 6.8 CVE-2015-4257 Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence MCU 4500 devices with software 4.5(1.55) allows remote attackers to hijack the … Telepresence Mcu Software Mitigation only Fix from $1,6002015-07-10 MEDIUM 6.8 CVE-2015-4255 Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence IP Gateway devices with software 2.0(3.34) allows remote attackers to hijack th… Telepresence Ip Gateway Mitigation only Fix from $1,6002015-07-10 MEDIUM 6.8 CVE-2015-4256 Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence IP VCR devices with software 3.0(1.27) allows remote attackers to hijack the au… Telepresence Ip Vcr 3.0 Mitigation only Fix from $1,6002015-07-10 MEDIUM 6.8 CVE-2015-4253 Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence Serial Gateway devices with software 1.0(1.42) allows remote attackers to hijac… Telepresence Serial Gateway Mitigation only Fix from $1,6002015-07-10 MEDIUM 6.8 CVE-2015-4252 Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence ISDN Gateway devices with software 2.2(1.106) allows remote attackers to hijack… Telepresence Isdn Gw 3241 Mitigation only Fix from $1,6002015-07-10 MEDIUM 6.1 CVE-2015-4243 The PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote attackers to cause a denial of service (device reload… Ios Xe Mitigation only Fix from $1,6002015-07-08 MEDIUM 6.8 CVE-2015-4242 Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 in FireSIGHT Management Center allows remote att… Firesight System Software Mitigation only Fix from $1,6002015-07-08 MEDIUM 6.1 CVE-2015-4241 Cisco Adaptive Security Appliance (ASA) Software 9.3(2) allows remote attackers to cause a denial of service (system reload) by sending crafted OSPFv… Adaptive Security Appliance Software Mitigation only Fix from $1,6002015-07-08 MEDIUM 5.0 CVE-2015-4240 Cisco IP Communicator 8.6(4) allows remote attackers to cause a denial of service (service outage) via an unspecified URL in a GET request, aka Bug I… Ip Communicator Mitigation only Fix from $1,6002015-07-08 HIGH 7.8 CVE-2015-4230 Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, aka Bu… Headend System Release Mitigation only Fix from $1,9502015-07-06 MEDIUM 5.0 CVE-2015-4196 Platform Software before 4.4.5 in Cisco Unified Communications Domain Manager (CDM) 8.x has a hardcoded password for a privileged account, which allo… Unified Communications Domain Manager Mitigation only Fix from $1,6002015-07-04 MEDIUM 6.1 CVE-2015-4239 Cisco Adaptive Security Appliance (ASA) Software 9.3(2.243) and 100.13(0.21) allows remote attackers to cause a denial of service (device reload) by … Adaptive Security Appliance Software Mitigation only Fix from $1,6002015-07-03 HIGH 7.2 CVE-2015-4234 Cisco NX-OS 6.0(2) and 6.2(2) on Nexus devices has an improper OS configuration, which allows local users to obtain root access via unspecified input… Nx Os Mitigation only Fix from $1,9502015-07-03 MEDIUM 6.8 CVE-2015-4238 The SNMP implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4(7) and 8.6(1.2) allows remote authenticated users to cause a denial o… Adaptive Security Appliance Software Mitigation only Fix from $1,6002015-07-02 MEDIUM 5.4 CVE-2015-4228 Cisco Digital Content Manager (DCM) 15.0.0 might allow remote ad servers to cause a denial of service (reboot) via malformed ad messages, aka Bug ID … Digital Content Manager Mitigation only Fix from $1,6002015-07-02 MEDIUM 6.5 CVE-2015-4233 SQL injection vulnerability in Cisco Unified MeetingPlace 8.6(1.2) allows remote authenticated users to execute arbitrary SQL commands via unspecifie… Unified Meetingplace Mitigation only Fix from $1,6002015-07-02 HIGH 7.1 CVE-2015-4226 The packet-storing feature on Cisco 9900 phones with firmware 9.3(2) does not properly support the RTP protocol, which allows remote attackers to cau… Unified Ip Phones 9900 Series Firmware Mitigation only Fix from $1,9502015-06-30 MEDIUM 5.0 CVE-2015-4229 The web framework in Cisco Unified Communications Domain Manager 8.1(4)ER1 allows remote attackers to obtain sensitive information by visiting a bvsm… Unified Communications Domain Manager Mitigation only Fix from $1,6002015-06-30 HIGH 7.8 CVE-2015-4227 Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, aka Bu… Headend System Release Mitigation only Fix from $1,9502015-06-30 HIGH 7.1 CVE-2015-4199 Race condition in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine (PRE) module on UBR devices allows remote attac… iOS Mitigation only Fix from $1,9502015-06-27 HIGH 7.2 CVE-2015-4224 Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0) allow local users to execute arbitrary OS commands in a privileged context via c… Wireless Lan Controller Software Mitigation only Fix from $1,9502015-06-26 MEDIUM 6.5 CVE-2015-4222 SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1) allows remote authenticated users to execute arbit… Unified Communications Manager Im And Presence Service Mitigation only Fix from $1,6002015-06-26 MEDIUM 5.0 CVE-2015-4216 The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual A… Content Security Management Virtual Appliance Mitigation only Fix from $1,6002015-06-26 MEDIUM 5.0 CVE-2015-4223 Cisco IOS XR 5.1.3 allows remote attackers to cause a denial of service (process reload) via crafted MPLS Label Distribution Protocol (LDP) packets, … Ios Xr Mitigation only Fix from $1,6002015-06-25 MEDIUM 5.0 CVE-2015-4218 The web-based user interface in Cisco Jabber through 9.6(3) and 9.7 through 9.7(5) on Windows allows remote attackers to obtain sensitive information… Jabber Mitigation only Fix from $1,6002015-06-24 MEDIUM 6.1 CVE-2015-4215 Cisco Wireless LAN Controller (WLC) devices with software 7.5(102.0) and 7.6(1.62) allow remote attackers to cause a denial of service (device crash)… Wireless Lan Controller Software Mitigation only Fix from $1,6002015-06-24 MEDIUM 5.0 CVE-2015-4212 Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by discovering credential… Webex Meeting Center No fix yet Fix from $1,6002015-06-24 HIGH 7.2 CVE-2015-4211 Cisco AnyConnect Secure Mobility Client 3.1(60) on Windows does not properly validate pathnames, which allows local users to gain privileges via a cr… Anyconnect Secure Mobility Client Mitigation only Fix from $1,9502015-06-24 HIGH 7.5 CVE-2015-4208 Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive informat… Webex Meeting Center Mitigation only Fix from $1,9502015-06-24 MEDIUM 6.4 CVE-2015-4209 Cisco WebEx Meeting Center does not properly determine authorization for reading a host calendar, which allows remote attackers to obtain sensitive i… Webex Meeting Center Mitigation only Fix from $1,6002015-06-23