Browse CVEs

MEDIUM 5.0 CVE-2013-6970 Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information by reading verbose error messages within server responses, aka Bug… Webex Meeting Center Mitigation only Fix from $1,6002013-12-14 MEDIUM 5.0 CVE-2013-6972 Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance, by reading… Webex Training Center Mitigation only Fix from $1,6002013-12-14 MEDIUM 5.0 CVE-2013-6709 The registration component in Cisco WebEx Training Center provides the training-session URL before payment is completed, which allows remote attacker… Webex Training Center Mitigation only Fix from $1,6002013-12-14 HIGH 7.3 CVE-2013-7030EPSS 5% The TFTP service in Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to obtain sensitive information from a phon… Unified Communications Manager No fix yet Fix from $1,9502013-12-12 HIGH 8.3 CVE-2013-7043 Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Scientific Atlanta DPR2320R2 routers with software 2.0.2r1262-090417 allow remote… Scientific Atlanta Dpr\/epr2320 Firmware No fix yet Fix from $1,9502013-12-10 MEDIUM 5.0 CVE-2013-6708 Cisco Cloud Portal 9.4 allows remote attackers to read files of unspecified types via a direct request, aka Bug IDs CSCuj08426 and CSCui60889. Cloud Portal Mitigation only Fix from $1,6002013-12-10 HIGH 7.1 CVE-2013-6703 The TLS/SSLv3 module on Cisco ONS 15454 controller cards allows remote attackers to cause a denial of service (card reset) via crafted (1) TLS or (2)… Ons 15454 Mitigation only Fix from $1,9502013-12-03 HIGH 7.1 CVE-2013-6704 Cisco IOS XE does not properly manage memory for TFTP UDP flows, which allows remote attackers to cause a denial of service (memory consumption) via … Ios Xe Mitigation only Fix from $1,9502013-12-03 MEDIUM 6.1 CVE-2013-6705 The IP Device Tracking (IPDT) feature in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (IPDT AVL corruption and device re… iOS Mitigation only Fix from $1,6002013-12-03 HIGH 7.1 CVE-2013-6696 Cisco Adaptive Security Appliance (ASA) Software does not properly handle errors during the processing of DNS responses, which allows remote attacker… Adaptive Security Appliance Software Mitigation only Fix from $1,9502013-12-02 MEDIUM 5.4 CVE-2013-6706 The Cisco Express Forwarding processing module in Cisco IOS XE allows remote attackers to cause a denial of service (device reload) via crafted MPLS … Ios Xe Mitigation only Fix from $1,6002013-11-29 MEDIUM 5.0 CVE-2013-6700 The SNMP module in Cisco IOS XR allows remote attackers to cause a denial of service (process reload) via a request for an unspecified MIB, aka Bug I… Ios Xr Mitigation only Fix from $1,6002013-11-29 MEDIUM 5.0 CVE-2013-6699 The Control and Provisioning of Wireless Access Points (CAPWAP) protocol implementation on Cisco Wireless LAN Controller (WLC) devices allows remote … Wireless Lan Controller Mitigation only Fix from $1,6002013-11-22 MEDIUM 6.8 CVE-2013-3406 The "Files Available for Download" implementation in the Cisco Intelligent Automation for Cloud component in Cisco Services Portal 9.4(1) allows remo… Service Portal Mitigation only Fix from $1,6002013-11-18 MEDIUM 6.8 CVE-2013-6684 The web framework on Cisco Wireless LAN Controller (WLC) devices does not properly validate configuration parameters, which allows remote authenticat… Wireless Lan Controller Mitigation only Fix from $1,6002013-11-13 MEDIUM 6.6 CVE-2013-6685 The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gain privile… Unified Ip Phone Firmware Mitigation only Fix from $1,6002013-11-13 MEDIUM 6.1 CVE-2013-6683 The IPv6 implementation in Cisco NX-OS does not properly handle neighbor-table adjacencies, which allows remote attackers to cause a denial of servic… Nx Os Mitigation only Fix from $1,6002013-11-13 HIGH 10.0 CVE-2013-5558 The WIL-A module in Cisco TelePresence VX Clinical Assistant 1.2 before 1.21 changes the admin password to an empty password upon a reboot, which mak… Telepresence Vx Clinical Assistant Mitigation only Fix from $1,9502013-11-08 HIGH 7.8 CVE-2013-5553 Multiple memory leaks in Cisco IOS 15.1 before 15.1(4)M7 allow remote attackers to cause a denial of service (memory consumption or device reload) by… iOS Mitigation only Fix from $1,9502013-11-08 MEDIUM 5.0 CVE-2013-5562 The ITM web server in Cisco Prime Central for Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (temporary HTT… Prime Central For Hosted Collaboration Solution Mitigation only Fix from $1,6002013-11-06 MEDIUM 6.8 CVE-2013-5559 Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-as… Anyconnect Secure Mobility Client Mitigation only Fix from $1,6002013-11-04 MEDIUM 5.0 CVE-2013-5561 The Safe Search enforcement feature in Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security Software does not properly perform filtering… Adaptive Security Appliance Cx Context Aware Security Software Mitigation only Fix from $1,6002013-11-04 MEDIUM 5.0 CVE-2013-5564 The Java process in the Impact server in Cisco Prime Central for Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of ser… Prime Central For Hosted Collaboration Solution Mitigation only Fix from $1,6002013-11-04 MEDIUM 6.3 CVE-2013-5551 Cisco Adaptive Security Appliance (ASA) Software, when certain same-security-traffic and management-access options are enabled, allows remote authent… Adaptive Security Appliance Software Mitigation only Fix from $1,6002013-11-01 HIGH 7.8 CVE-2013-5543 Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) via mal… Ios Xe Mitigation only Fix from $1,9502013-10-31 HIGH 7.8 CVE-2013-5545 The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload… Ios Xe Mitigation only Fix from $1,9502013-10-31 HIGH 7.8 CVE-2013-5546 The TCP reassembly feature in Cisco IOS XE 3.7 before 3.7.3S and 3.8 before 3.8.1S on 1000 ASR devices allows remote attackers to cause a denial of s… Ios Xe Mitigation only Fix from $1,9502013-10-31 HIGH 7.8 CVE-2013-5547 Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) by sending malformed EoGRE pa… Ios Xe Mitigation only Fix from $1,9502013-10-31 HIGH 7.1 CVE-2013-5549 Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor components, which… Ios Xr Mitigation only Fix from $1,9502013-10-25 MEDIUM 5.0 CVE-2013-5531 Cisco Identity Services Engine (ISE) 1.x before 1.1.1 allows remote attackers to bypass authentication, and read support-bundle configuration and cre… Identity Services Engine Software Mitigation only Fix from $1,6002013-10-25