Browse CVEs

HIGH 9.3 CVE-2012-3938EPSS 5% Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbi… Webex Recording Format Player Mitigation only Fix from $1,9502012-10-25 HIGH 9.3 CVE-2012-3936EPSS 5% Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 before T28.4 allows remote attackers to execute arbi… Webex Recording Format Player Mitigation only Fix from $1,9502012-10-25 HIGH 7.8 CVE-2012-4620 Cisco IOS 12.2 and 15.0 through 15.2 on Cisco 10000 series routers, when a tunnel interface exists, allows remote attackers to cause a denial of serv… 10008 Router Mitigation only Fix from $1,9502012-09-27 HIGH 7.8 CVE-2012-4621 The Device Sensor feature in Cisco IOS 15.0 through 15.2 allows remote attackers to cause a denial of service (device reload) via a DHCP packet, aka … iOS Mitigation only Fix from $1,9502012-09-27 HIGH 7.8 CVE-2012-4623 The DHCPv6 server in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x, 3.1.xS before 3.1.4S, 3.1.xSG and 3.2.xSG befo… Ios Xe Mitigation only Fix from $1,9502012-09-27 HIGH 7.1 CVE-2012-4622 Cisco IOS XE 03.02.00.XO.15.0(2)XO on Catalyst 4500E series switches, when a Supervisor Engine 7L-E card is installed, allows remote attackers to cau… Ios Xe Mitigation only Fix from $1,9502012-09-27 HIGH 7.8 CVE-2012-3949 The SIP implementation in Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su5, 8.x before 8.5(1)su4, and 8.6 before 8.6(2a)su1;… Unified Communications Manager Mitigation only Fix from $1,9502012-09-27 HIGH 7.8 CVE-2012-4618 The SIP ALG feature in the NAT implementation in Cisco IOS 12.2, 12.4, and 15.0 through 15.2 allows remote attackers to cause a denial of service (de… iOS Mitigation only Fix from $1,9502012-09-27 HIGH 7.8 CVE-2012-4619 The NAT implementation in Cisco IOS 12.2, 12.4, and 15.0 through 15.2 allows remote attackers to cause a denial of service (device reload) via transi… iOS Mitigation only Fix from $1,9502012-09-27 HIGH 7.1 CVE-2012-3950 The Intrusion Prevention System (IPS) feature in Cisco IOS 12.3 through 12.4 and 15.0 through 15.2, in certain configurations of enabled categories a… iOS Mitigation only Fix from $1,9502012-09-27 HIGH 7.1 CVE-2012-4617 The BGP implementation in Cisco IOS 15.2, IOS XE 3.5.xS before 3.5.2S, and IOS XR 4.1.0 through 4.2.2 allows remote attackers to cause a denial of se… iOS Mitigation only Fix from $1,9502012-09-27 HIGH 9.3 CVE-2012-4655 The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which … Secure Desktop Mitigation only Fix from $1,9502012-09-24 MEDIUM 6.8 CVE-2012-3908 Multiple cross-site request forgery (CSRF) vulnerabilities in the ISE Administrator user interface (aka the Apache Tomcat interface) on Cisco Identit… Identity Services Engine Software Mitigation only Fix from $1,6002012-09-16 MEDIUM 5.0 CVE-2012-3915 The DMVPN tunnel implementation in Cisco IOS 15.2 allows remote attackers to cause a denial of service (persistent IKE state) via a large volume of h… iOS Mitigation only Fix from $1,6002012-09-16 MEDIUM 5.0 CVE-2012-3919 The Cisco Application Control Engine (ACE) module 3.0 for Cisco Catalyst switches and Cisco routers does not properly monitor Load Balancer (LB) queu… Application Control Engine Module Mitigation only Fix from $1,6002012-09-16 HIGH 9.3 CVE-2012-3088 Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe header… Anyconnect Secure Mobility Client Mitigation only Fix from $1,9502012-09-16 HIGH 7.8 CVE-2012-3060 Cisco Unity Connection (UC) 8.6, 9.0, and 9.5 allows remote attackers to cause a denial of service (CPU consumption) via malformed UDP packets, aka B… Unity Connection Mitigation only Fix from $1,9502012-09-16 HIGH 7.8 CVE-2012-3079 Cisco IOS 12.2 allows remote attackers to cause a denial of service (CPU consumption) by establishing many IPv6 neighbors, aka Bug ID CSCtn78957. iOS Mitigation only Fix from $1,9502012-09-16 MEDIUM 6.9 CVE-2012-3052 Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working direc… Vpn Client Mitigation only Fix from $1,6002012-09-16 MEDIUM 6.3 CVE-2012-3893 The FlexVPN implementation in Cisco IOS 15.2 and 15.3 allows remote authenticated users to cause a denial of service (spoke crash) via spoke-to-spoke… iOS Mitigation only Fix from $1,6002012-09-16 MEDIUM 6.3 CVE-2012-3895 Cisco IOS 15.0 through 15.3 allows remote authenticated users to cause a denial of service (device crash) via an MVPNv6 update, aka Bug ID CSCty89224. iOS Mitigation only Fix from $1,6002012-09-16 MEDIUM 6.1 CVE-2012-3051 Cisco NX-OS 5.2 and 6.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service (process crash or packet loss) via a large… Nx Os Mitigation only Fix from $1,6002012-09-16 MEDIUM 5.0 CVE-2012-3094 The VPN downloader in the download_install component in Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495 on Linux accepts arbitrary X.5… Anyconnect Secure Mobility Client Mitigation only Fix from $1,6002012-09-16 MEDIUM 5.0 CVE-2012-3899 sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a denial of se… Intrusion Prevention System Mitigation only Fix from $1,6002012-09-16 MEDIUM 5.0 CVE-2012-3901 The updateTime function in sensorApp on Cisco IPS 4200 series sensors 7.0 and 7.1 allows remote attackers to cause a denial of service (process crash… Intrusion Prevention System Mitigation only Fix from $1,6002012-09-16 MEDIUM 5.0 CVE-2012-1357 The igmp_snoop_orib_fill_source_update function in the IGMP process in NX-OS 5.0 and 5.1 on Cisco Nexus 5000 series switches allows remote attackers … Nx Os Mitigation only Fix from $1,6002012-08-06 HIGH 7.8 CVE-2012-1350 Cisco IOS 12.3 and 12.4 on Aironet access points allows remote attackers to cause a denial of service (radio-interface input-queue hang) via IAPP 0x3… iOS Mitigation only Fix from $1,9502012-08-06 MEDIUM 5.0 CVE-2012-1346 Cisco Emergency Responder 8.6 and 9.2 allows remote attackers to cause a denial of service (CPU consumption) by sending malformed UDP packets to the … Emergency Responder Mitigation only Fix from $1,6002012-08-06 MEDIUM 5.0 CVE-2012-1348 Cisco Wide Area Application Services (WAAS) appliances with software 4.4, 5.0, and 5.1 include a one-way hash of a password within output text, which… Wide Area Application Services Mitigation only Fix from $1,6002012-08-06 MEDIUM 5.8 CVE-2012-2499 The IPsec implementation in Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate… Anyconnect Secure Mobility Client Mitigation only Fix from $1,6002012-08-06