Browse CVEs

MEDIUM 6.5 CVE-2014-3326 SQL injection vulnerability in the web framework in Cisco Security Manager 4.5 and 4.6 allows remote authenticated users to execute arbitrary SQL com… Security Manager Mitigation only Fix from $1,6002014-07-26 MEDIUM 5.0 CVE-2014-3328 The Intercluster Sync Agent Service in Cisco Unified Presence Server allows remote attackers to cause a denial of service via a TCP SYN flood, aka Bu… Unified Presence Server Mitigation only Fix from $1,6002014-07-26 HIGH 10.0 CVE-2014-3306EPSS 7% The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 Wireless Residential Gateway products all… Dpc3010 Mitigation only Fix from $1,9502014-07-18 MEDIUM 6.8 CVE-2014-3319 Directory traversal vulnerability in the Real-Time Monitoring Tool (RTMT) in Cisco Unified Communications Manager (CM) 10.0(1) allows remote authenti… Unified Communications Manager Mitigation only Fix from $1,6002014-07-14 MEDIUM 5.5 CVE-2014-3317 Directory traversal vulnerability in the Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager 10.0… Unified Communications Manager Mitigation only Fix from $1,6002014-07-14 MEDIUM 5.1 CVE-2014-3311 Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote… Webex Meeting Center Mitigation only Fix from $1,6002014-07-10 MEDIUM 6.9 CVE-2014-3312 The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to ex… Spa 301 1 Line Ip Phone Mitigation only Fix from $1,6002014-07-09 MEDIUM 5.0 CVE-2014-3309 The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a "deny all" configuration, which allows… iOS Mitigation only Fix from $1,6002014-07-09 MEDIUM 6.4 CVE-2014-3308 Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service (CPU c… Ios Xr Mitigation only Fix from $1,6002014-07-07 MEDIUM 6.8 CVE-2014-3307 The DHCP client implementation in Universal Small Cell firmware on Cisco Small Cell products allows remote attackers to execute arbitrary commands vi… Universal Small Cell Series Firmware Mitigation only Fix from $1,6002014-07-02 MEDIUM 6.8 CVE-2014-3299 Cisco IOS allows remote authenticated users to cause a denial of service (device reload) via malformed IPsec packets, aka Bug ID CSCui79745. iOS Mitigation only Fix from $1,6002014-06-25 HIGH 7.1 CVE-2014-2176 Cisco IOS XR 4.1.2 through 5.1.1 on ASR 9000 devices, when a Trident-based line card is used, allows remote attackers to cause a denial of service (N… Ios Xr Mitigation only Fix from $1,9502014-06-14 MEDIUM 5.5 CVE-2014-3292 The Real Time Monitoring Tool (RTMT) implementation in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to (1) rea… Unified Communications Manager Mitigation only Fix from $1,6002014-06-10 MEDIUM 5.7 CVE-2014-3291 Cisco Wireless LAN Controller (WLC) devices allow remote attackers to cause a denial of service (NULL pointer dereference and device restart) via a z… Wireless Lan Controller Mitigation only Fix from $1,6002014-06-08 MEDIUM 5.0 CVE-2014-3278 The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly implement access control, which allows remote attack… Unified Communications Domain Manager Mitigation only Fix from $1,6002014-06-08 MEDIUM 5.0 CVE-2014-3281 The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly implement access control, which allows remote attack… Unified Communications Domain Manager Mitigation only Fix from $1,6002014-06-08 MEDIUM 5.0 CVE-2014-3286 The web framework in Cisco WebEx Meeting Server does not properly restrict the content of reply messages, which allows remote attackers to obtain sen… Webex Meetings Server Mitigation only Fix from $1,6002014-06-08 HIGH 7.6 CVE-2014-3261 Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.4(1i), NX… Unified Computing System 6120xp Fabric Interconnect Mitigation only Fix from $1,9502014-05-26 HIGH 9.3 CVE-2014-2196 Cisco Wide Area Application Services (WAAS) 5.1.1 before 5.1.1e, when SharePoint prefetch optimization is enabled, allows remote SharePoint servers t… Wide Area Application Services Mitigation only Fix from $1,9502014-05-26 HIGH 7.1 CVE-2013-1191 Cisco NX-OS 6.1 before 6.1(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to ga… Nx Os Mitigation only Fix from $1,9502014-05-26 HIGH 7.1 CVE-2014-2200 Cisco NX-OS 5.0 before 5.0(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to ga… Nx Os Mitigation only Fix from $1,9502014-05-26 MEDIUM 6.1 CVE-2014-3284 Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service (device reload) via a malfor… Ios Xe Mitigation only Fix from $1,6002014-05-25 MEDIUM 6.8 CVE-2014-3269 The SNMP module in Cisco IOS XE 3.5E allows remote authenticated users to cause a denial of service (device reload) by polling frequently, aka Bug ID… Ios Xe Mitigation only Fix from $1,6002014-05-20 MEDIUM 6.1 CVE-2014-3273 The LLDP implementation in Cisco IOS allows remote attackers to cause a denial of service (device reload) via a malformed packet, aka Bug ID CSCum962… iOS Mitigation only Fix from $1,6002014-05-20 MEDIUM 5.0 CVE-2014-3268 Cisco IOS 15.2(4)M4 on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service (input-queue consumption and … iOS Mitigation only Fix from $1,6002014-05-20 MEDIUM 5.0 CVE-2014-3270 The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (process hang) via a malformed packet, aka Bug ID CSCu… Ios Xr Mitigation only Fix from $1,6002014-05-20 MEDIUM 5.0 CVE-2014-3271 The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug IDs CSC… Ios Xr Mitigation only Fix from $1,6002014-05-20 MEDIUM 6.8 CVE-2014-2194 system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to have an unspecified impact by inje… Unified Web And E Mail Interaction Manager Mitigation only Fix from $1,6002014-05-20 MEDIUM 5.4 CVE-2014-3263 The ScanSafe module in Cisco IOS 15.3(3)M allows remote attackers to cause a denial of service (device reload) via HTTPS packets that require tower p… iOS Mitigation only Fix from $1,6002014-05-16 HIGH 9.3 CVE-2014-2135 Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attack… Webex Advanced Recording Format Player Mitigation only Fix from $1,9502014-05-08