Browse CVEs

MEDIUM 5.0 CVE-2015-0745 Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, … Headend Digital Broadband Delivery System Mitigation only Fix from $1,6002015-05-30 HIGH 7.8 CVE-2015-0744 Cisco DTA Control System (DTACS) 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service (CPU and memory consump… Dta Control System Mitigation only Fix from $1,9502015-05-30 MEDIUM 5.0 CVE-2015-0743 Cisco Headend System Release allows remote attackers to cause a denial of service (DHCP and TFTP outage) via a flood of crafted UDP traffic, aka Bug … Headend Digital Broadband Delivery System Mitigation only Fix from $1,6002015-05-30 MEDIUM 5.0 CVE-2015-0757 The web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does not properly implement session handlers, which allows remote… Identity Services Engine Software Mitigation only Fix from $1,6002015-05-29 MEDIUM 6.1 CVE-2015-0756 Cisco Wireless LAN Controller (WLC) devices with software 7.4(1.1) allow remote attackers to cause a denial of service (wireless-networking outage) v… Wireless Lan Controller Mitigation only Fix from $1,6002015-05-29 MEDIUM 6.8 CVE-2015-0755 The Posture module for Cisco Identity Services Engine (ISE), as distributed in Cisco AnyConnect Secure Mobility Client 4.0(64), allows local users to… Anyconnect Secure Mobility Client Mitigation only Fix from $1,6002015-05-29 HIGH 7.5 CVE-2015-0754 Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause a denial of service (CPU and memory consumption) via… Finesse Mitigation only Fix from $1,9502015-05-29 MEDIUM 6.8 CVE-2015-0753 SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) 9.0(2) allows remote attackers… Unified Web And E Mail Interaction Manager Mitigation only Fix from $1,6002015-05-29 HIGH 7.8 CVE-2015-0751 Cisco IP Phone 7861, when firmware from Cisco Unified Communications Manager 10.3(1) is used, allows remote attackers to cause a denial of service vi… Unified Communications Manager Mitigation only Fix from $1,9502015-05-29 HIGH 7.8 CVE-2015-0722 The network drivers in Cisco TelePresence T, Cisco TelePresence TE, and Cisco TelePresence TC before 7.3.2 allow remote attackers to cause a denial o… Telepresence Tc Software Mitigation only Fix from $1,9502015-05-25 HIGH 9.0 CVE-2015-0713 The web framework in Cisco TelePresence Advanced Media Gateway Series Software before 1.1(1.40), Cisco TelePresence IP Gateway Series Software, Cisco… Telepresence Advanced Media Gateway Mitigation only Fix from $1,9502015-05-25 HIGH 8.3 CVE-2014-2174 Cisco TelePresence T, TelePresence TE, and TelePresence TC before 7.1 do not properly implement access control, which allows remote attackers to obta… Telepresence Tc Software Mitigation only Fix from $1,9502015-05-25 MEDIUM 6.5 CVE-2015-0750 The administrative web interface in Cisco Hosted Collaboration Solution (HCS) 10.6(1) and earlier allows remote authenticated users to execute arbitr… Hosted Collaboration Solution Mitigation only Fix from $1,6002015-05-23 MEDIUM 5.0 CVE-2015-0746 The REST API in Cisco Access Control Server (ACS) 5.5(0.46.2) allows remote attackers to cause a denial of service (API outage) by sending many reque… Secure Access Control Server No fix yet Fix from $1,6002015-05-22 MEDIUM 5.0 CVE-2015-0742 The Protocol Independent Multicast (PIM) application in Cisco Adaptive Security Appliance (ASA) Software 9.2(0.0), 9.2(0.104), 9.2(3.1), 9.2(3.4), 9.… Adaptive Security Appliance Software Mitigation only Fix from $1,6002015-05-21 MEDIUM 6.8 CVE-2015-0740 Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center 10.6(1) allows remote attackers to hijack the authentication of … Unified Intelligence Center Mitigation only Fix from $1,6002015-05-20 MEDIUM 6.8 CVE-2015-0735 Cross-site request forgery (CSRF) vulnerability in Cisco Unified Customer Voice Portal (CVP) 10.5(1) allows remote attackers to hijack the authentica… Unified Customer Voice Portal Mitigation only Fix from $1,6002015-05-17 MEDIUM 5.0 CVE-2015-0730 The SMB module in Cisco Wide Area Application Services (WAAS) 6.0(1) allows remote attackers to cause a denial of service (module reload) via an inva… Wide Area Application Services Mitigation only Fix from $1,6002015-05-16 MEDIUM 6.8 CVE-2015-0726 The web administration interface on Cisco Wireless LAN Controller (WLC) devices before 7.0.241, 7.1.x through 7.4.x before 7.4.122, and 7.5.x and 7.6… Wireless Lan Controller Software Mitigation only Fix from $1,6002015-05-16 MEDIUM 6.1 CVE-2015-0723 The wireless web-authentication subsystem on Cisco Wireless LAN Controller (WLC) devices 7.5.x and 7.6.x before 7.6.120 allows remote attackers to ca… Wireless Lan Controller Software Mitigation only Fix from $1,6002015-05-16 MEDIUM 6.9 CVE-2015-0717 Cisco Unified Communications Manager 10.0(1.10000.12) allows local users to gain privileges via a command string in an unspecified parameter, aka Bug… Unified Communications Manager Mitigation only Fix from $1,6002015-05-16 MEDIUM 6.8 CVE-2015-0736 Cross-site request forgery (CSRF) vulnerability in Cisco MediaSense 10.5(1) and earlier allows remote attackers to hijack the authentication of arbit… Mediasense Mitigation only Fix from $1,6002015-05-16 MEDIUM 6.1 CVE-2015-0731 The ISDN implementation in Cisco IOS 15.3S allows remote attackers to cause a denial of service (device reload) via malformed Q931 SETUP messages, ak… iOS Mitigation only Fix from $1,6002015-05-16 MEDIUM 6.8 CVE-2015-0716 Cross-site request forgery (CSRF) vulnerability in the CUCReports page in Cisco Unity Connection 11.0(0.98000.225) and 11.0(0.98000.332) allows remot… Unity Connection Mitigation only Fix from $1,6002015-05-07 MEDIUM 6.5 CVE-2015-0715 SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated… Unity Connection Mitigation only Fix from $1,6002015-05-07 HIGH 10.0 CVE-2015-0701 Cisco UCS Central Software before 1.3(1a) allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961. Unified Computing System Central Software Mitigation only Fix from $1,9502015-05-07 MEDIUM 5.0 CVE-2015-0712 The session-manager service in Cisco StarOS 12.0, 12.2(300), 14.0, and 14.0(600) on ASR 5000 devices allows remote attackers to cause a denial of ser… Staros Mitigation only Fix from $1,6002015-05-01 MEDIUM 5.0 CVE-2015-0711 The hamgr service in the IPv6 Proxy Mobile (PM) implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a de… Staros Mitigation only Fix from $1,6002015-04-29 MEDIUM 6.1 CVE-2015-0710 The Overlay Transport Virtualization (OTV) implementation in Cisco IOS XE 3.10S allows remote attackers to cause a denial of service (device reload) … Ios Xe Mitigation only Fix from $1,6002015-04-29 MEDIUM 6.8 CVE-2015-0709 Cisco IOS 15.5S and IOS XE allow remote authenticated users to cause a denial of service (device crash) by leveraging knowledge of the RADIUS secret … Ios Xe Mitigation only Fix from $1,6002015-04-29