Browse CVEs

HIGH 7.8 CVE-2013-2779 Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) does not properly implement the … Ios Xe Mitigation only Fix from $1,9502013-04-11 HIGH 7.5 CVE-2013-1170 The Cisco Prime Network Control System (NCS) appliance with software before 1.1.1.24 has a default password for the database user account, which make… Prime Network Control System Software Mitigation only Fix from $1,9502013-04-11 MEDIUM 6.6 CVE-2013-1172 The Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) does not properly verify files, which allows local … Anyconnect Secure Mobility Client Mitigation only Fix from $1,6002013-04-11 MEDIUM 6.6 CVE-2013-1173 Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) allows … Anyconnect Secure Mobility Client Mitigation only Fix from $1,6002013-04-11 MEDIUM 5.7 CVE-2013-1189 Cisco Universal Broadband (aka uBR) 10000 series routers, when an IPv4/IPv6 dual-stack modem is used, allow remote attackers to cause a denial of ser… Ubr10012 Mitigation only Fix from $1,6002013-04-11 HIGH 7.8 CVE-2013-1149 Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.28), 8.1 and 8.2 before 8.2(5.35), 8.3 before 8… Adaptive Security Appliance Software Mitigation only Fix from $1,9502013-04-11 HIGH 7.8 CVE-2013-1150 The authentication-proxy implementation on Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.31),… Adaptive Security Appliance Software Mitigation only Fix from $1,9502013-04-11 HIGH 7.8 CVE-2013-1152 Cisco Adaptive Security Appliances (ASA) devices with software 9.0 before 9.0(1.2) allow remote attackers to cause a denial of service (device reload… Adaptive Security Appliance Software Mitigation only Fix from $1,9502013-04-11 HIGH 7.8 CVE-2013-1155 The auth-proxy functionality in Cisco Firewall Services Module (FWSM) software 3.1 and 3.2 before 3.2(20.1), 4.0 before 4.0(15.2), and 4.1 before 4.1… Firewall Services Module Software Mitigation only Fix from $1,9502013-04-11 HIGH 7.8 CVE-2013-1164 Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf R… Ios Xe Mitigation only Fix from $1,9502013-04-11 HIGH 7.8 CVE-2013-1166 Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR), when VRF-aware NAT … Asr 1001 Mitigation only Fix from $1,9502013-04-11 HIGH 7.6 CVE-2013-1168 The web server in Cisco Unified MeetingPlace Application Server 7.x before 7.1MR1 Patch 2, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 Patch 1 d… Unified Meetingplace Mitigation only Fix from $1,9502013-04-11 HIGH 7.1 CVE-2013-1151 Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.31), 8.1 and 8.2 before 8.2(5.38), 8.3 before 8… Adaptive Security Appliance Software Mitigation only Fix from $1,9502013-04-11 HIGH 7.1 CVE-2013-1167 Cisco IOS XE 3.2 through 3.4 before 3.4.2S, and 3.5, on 1000 series Aggregation Services Routers (ASR), when bridge domain interface (BDI) is enabled… Ios Xe Mitigation only Fix from $1,9502013-04-11 MEDIUM 5.0 CVE-2013-1174 Cisco Tivoli Business Service Manager (TBSM) in Hosted Collaboration Mediation (HCM) in Cisco Hosted Collaboration Solution allows remote attackers t… Hosted Collaboration Solution Mitigation only Fix from $1,6002013-04-05 HIGH 7.5 CVE-2013-1163 Multiple SQL injection vulnerabilities in the device-management implementation in Cisco Connected Grid Network Management System (CG-NMS) allow remot… Connected Grid Network Management System Mitigation only Fix from $1,9502013-04-01 HIGH 7.8 CVE-2013-1144 Memory leak in the IKEv1 implementation in Cisco IOS 15.1 allows remote attackers to cause a denial of service (memory consumption) via unspecified (… iOS Mitigation only Fix from $1,9502013-03-28 HIGH 7.8 CVE-2013-1145 Memory leak in Cisco IOS 12.2, 12.4, 15.0, and 15.1, when Zone-Based Policy Firewall SIP application layer gateway inspection is enabled, allows remo… iOS Mitigation only Fix from $1,9502013-03-28 HIGH 7.8 CVE-2013-1146 The Smart Install client functionality in Cisco IOS 12.2 and 15.0 through 15.3 on Catalyst switches allows remote attackers to cause a denial of serv… iOS Mitigation only Fix from $1,9502013-03-28 HIGH 7.8 CVE-2013-1147 The Protocol Translation (PT) functionality in Cisco IOS 12.3 through 12.4 and 15.0 through 15.3, when one-step port-23 translation or a Telnet-to-PA… iOS Mitigation only Fix from $1,9502013-03-28 HIGH 7.8 CVE-2013-1148 The General Responder implementation in the IP Service Level Agreement (SLA) feature in Cisco IOS 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S… iOS Mitigation only Fix from $1,9502013-03-28 HIGH 7.1 CVE-2013-1143 The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS bef… iOS Mitigation only Fix from $1,9502013-03-28 MEDIUM 6.3 CVE-2013-1161 The XML parser in the Cisco Jabber IM application for Android allows remote authenticated users to cause a denial of service (blocked connection) by … Jabber Im Mitigation only Fix from $1,6002013-03-26 MEDIUM 5.0 CVE-2013-1162 The traffic engineering (TE) processing subsystem in Cisco IOS XR allows remote attackers to cause a denial of service (process restart) via crafted … Ios Xr Mitigation only Fix from $1,6002013-03-26 MEDIUM 6.8 CVE-2013-1153 Cross-site request forgery (CSRF) vulnerability in the web interface in Cisco Prime Infrastructure allows remote attackers to hijack the authenticati… Prime Infrastructure Mitigation only Fix from $1,6002013-03-07 MEDIUM 6.1 CVE-2012-6026 The HTTP Profiler on the Cisco Aironet Access Point with software 15.2 and earlier does not properly manage buffers, which allows remote attackers to… Aironet Access Point Software Mitigation only Fix from $1,6002013-03-05 MEDIUM 5.8 CVE-2013-1124 The Cisco Network Admission Control (NAC) agent on Mac OS X does not verify the X.509 certificate of an Identity Services Engine (ISE) server during … Network Admission Control Mitigation only Fix from $1,6002013-02-28 HIGH 7.8 CVE-2013-1133 Cisco Unified Communications Manager (CUCM) 8.6 before 8.6(2a)su2, 8.6 BE3k before 8.6(4) BE3k, and 9.x before 9.0(1) allows remote attackers to caus… Unified Communications Manager Mitigation only Fix from $1,9502013-02-27 HIGH 7.8 CVE-2013-1137 Cisco Unified Presence Server (CUPS) 8.6, 9.0, and 9.1 before 9.1.1 allows remote attackers to cause a denial of service (CPU consumption) via crafte… Unified Presence Server Mitigation only Fix from $1,9502013-02-27 HIGH 7.1 CVE-2013-1134 The Location Bandwidth Manager (LBM) Intracluster-communication feature in Cisco Unified Communications Manager (CUCM) 9.x before 9.1(1) does not req… Unified Communications Manager Mitigation only Fix from $1,9502013-02-27