Browse CVEs

HIGH 7.1 CVE-2013-5481 The PPTP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service (device reloa… iOS Mitigation only Fix from $1,9502013-09-27 MEDIUM 5.8 CVE-2012-4092 The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the identity of vCenter… Unified Computing System Mitigation only Fix from $1,6002013-09-26 MEDIUM 5.0 CVE-2012-4079 The XML API service in the Fabric Interconnect component in Cisco Unified Computing System (UCS) allows remote attackers to cause a denial of service… Unified Computing System Mitigation only Fix from $1,6002013-09-26 MEDIUM 5.1 CVE-2012-4086 A setup script for fabric interconnect devices in Cisco Unified Computing System (UCS) allows remote attackers to execute arbitrary commands via inva… Unified Computing System Mitigation only Fix from $1,6002013-09-25 HIGH 8.5 CVE-2012-4078 The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote … Unified Computing System Mitigation only Fix from $1,9502013-09-24 MEDIUM 6.6 CVE-2012-4089 MCTOOLS in the fabric interconnect in Cisco Unified Computing System (UCS) allows local users to execute arbitrary Baseboard Management Controller (B… Unified Computing System Mitigation only Fix from $1,6002013-09-24 MEDIUM 5.4 CVE-2012-4094 Buffer overflow in the Smart Call Home feature in the fabric interconnect in Cisco Unified Computing System (UCS) allows remote attackers to cause a … Unified Computing System Mitigation only Fix from $1,6002013-09-24 MEDIUM 5.1 CVE-2012-4087 A cluster setup script for fabric interconnect devices in Cisco Unified Computing System (UCS) allows remote attackers to execute arbitrary commands … Unified Computing System Mitigation only Fix from $1,6002013-09-24 MEDIUM 5.0 CVE-2012-4085 The Intelligent Platform Management Interface (IPMI) implementation in the Blade Management Controller in Cisco Unified Computing System (UCS) allows… Unified Computing System Mitigation only Fix from $1,6002013-09-24 HIGH 10.0 CVE-2013-5486EPSS 76% Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows r… Prime Data Center Network Manager Mitigation only Fix from $1,9502013-09-23 MEDIUM 5.0 CVE-2013-5502 The web interface in Cisco MediaSense does not properly protect the client-server communication channel, which allows remote attackers to obtain sens… Mediasense Mitigation only Fix from $1,6002013-09-23 MEDIUM 6.8 CVE-2012-4082 MCTools in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to gain privileges by entering crafted command-… Unified Computing System Mitigation only Fix from $1,6002013-09-20 MEDIUM 6.8 CVE-2013-1130 Cisco AnyConnect Secure Mobility Client on Mac OS X uses weak permissions for a library directory, which allows local users to gain privileges via a … Anyconnect Secure Mobility Client Mitigation only Fix from $1,6002013-09-20 MEDIUM 5.8 CVE-2012-4073 The KVM subsystem in the client in Cisco Unified Computing System (UCS) does not verify X.509 certificates from SSL servers, which allows man-in-the-… Unified Computing System Mitigation only Fix from $1,6002013-09-20 MEDIUM 5.8 CVE-2012-4074 The Board Management Controller (BMC) in the Serial over LAN (SoL) subsystem in Cisco Unified Computing System (UCS) relies on a hardcoded private ke… Unified Computing System Mitigation only Fix from $1,6002013-09-20 MEDIUM 5.4 CVE-2013-1121 The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound routes, allows remote attacker… Nx Os Mitigation only Fix from $1,6002013-09-19 MEDIUM 6.8 CVE-2013-5494 Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlace Web Conf… Unified Meetingplace Mitigation only Fix from $1,6002013-09-16 MEDIUM 6.3 CVE-2013-5496 Open Network Environment Platform (ONEP) in Cisco NX-OS allows remote authenticated users to cause a denial of service (network-element reload) via a… Nx Os Mitigation only Fix from $1,6002013-09-16 MEDIUM 6.8 CVE-2013-5493 The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access restriction… Virtualization Experience Client 6000 Mitigation only Fix from $1,6002013-09-13 MEDIUM 5.0 CVE-2013-5489 The gadget implementation in Cisco SocialMiner does not properly restrict the content of GET requests, which allows remote attackers to obtain sensit… Socialminer Mitigation only Fix from $1,6002013-09-13 MEDIUM 5.0 CVE-2013-5492 administration.jsp in Cisco SocialMiner allows remote attackers to obtain sensitive information by sniffing the network for HTTP client-server traffi… Socialminer Mitigation only Fix from $1,6002013-09-13 MEDIUM 5.8 CVE-2013-3446 Open redirect vulnerability in the login page in Cisco Digital Media Manager (DMM) allows remote attackers to redirect users to arbitrary web sites a… Digital Media Manager Mitigation only Fix from $1,6002013-09-12 MEDIUM 5.0 CVE-2013-5488 Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco Security Manager, Cisco Unified Service Monitor, and Cisco Unified… Prime Lan Management Solution Mitigation only Fix from $1,6002013-09-12 HIGH 7.1 CVE-2013-3458 Cisco Adaptive Security Appliances (ASA) devices, when SMP is used, do not properly process X.509 certificates, which allows remote attackers to caus… Adaptive Security Appliance Software Mitigation only Fix from $1,9502013-09-08 HIGH 9.3 CVE-2013-1115 Buffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 al… Webex Advanced Recording Format Player Mitigation only Fix from $1,9502013-09-06 HIGH 9.3 CVE-2013-1116 Buffer overflow in Cisco WebEx Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 al… Webex Advanced Recording Format Player Mitigation only Fix from $1,9502013-09-06 HIGH 9.3 CVE-2013-1117 Buffer overflow in the exception handler in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28… Webex Recording Format Player Mitigation only Fix from $1,9502013-09-06 HIGH 9.3 CVE-2013-1118 Stack-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8… Webex Recording Format Player Mitigation only Fix from $1,9502013-09-06 HIGH 9.3 CVE-2013-1119 Buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T27 L10N before SP32_ORION111, and T28 before T28.8 allows remo… Webex Recording Format Player Mitigation only Fix from $1,9502013-09-06 MEDIUM 6.8 CVE-2013-5471 Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Global Site Selector (GSS) allows remote attackers to hijack the authen… Global Site Selector Mitigation only Fix from $1,6002013-09-05