Browse CVEs

MEDIUM 6.5 CVE-2016-6440 The Cisco Unified Communications Manager (CUCM) may be vulnerable to data that can be displayed inside an iframe within a web page, which in turn cou… Unified Communications Manager Mitigation only Fix from $1,6002016-10-27 HIGH 7.5 CVE-2016-6439 A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software before 6.0.1 could allow an unauthenticated, r… Secure Firewall Management Center Mitigation only Fix from $1,9502016-10-27 MEDIUM 5.9 CVE-2016-6438 A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause … Ios Xe Mitigation only Fix from $1,6002016-10-27 MEDIUM 5.9 CVE-2016-6437 A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to… Wide Area Application Services Mitigation only Fix from $1,6002016-10-27 HIGH 8.1 CVE-2016-6432EPSS 7% A vulnerability in the Identity Firewall feature of Cisco ASA Software before 9.6(2.1) could allow an unauthenticated, remote attacker to cause a rel… Adaptive Security Appliance Software Mitigation only Fix from $1,9502016-10-27 HIGH 7.5 CVE-2016-6431 A vulnerability in the local Certificate Authority (CA) feature of Cisco ASA Software before 9.6(1.5) could allow an unauthenticated, remote attacker… Adaptive Security Appliance Software Mitigation only Fix from $1,9502016-10-27 MEDIUM 6.1 CVE-2016-6436 Cross-site scripting (XSS) vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allow… Hostscan Engine Mitigation only Fix from $1,6002016-10-06 MEDIUM 6.5 CVE-2016-6435EPSS 37% The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug … Secure Firewall Management Center No fix yet Fix from $1,6002016-10-06 HIGH 7.8 CVE-2016-6434 Cisco Firepower Management Center 6.0.1 has hardcoded database credentials, which allows local users to obtain sensitive information by leveraging CL… Secure Firewall Management Center No fix yet Fix from $1,9502016-10-06 HIGH 8.8 CVE-2016-6433EPSS 76% The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users to execute arbitrary command… Secure Firewall Management Center No fix yet Fix from $1,9502016-10-06 HIGH 7.8 CVE-2016-6428 Cisco IOS XR 6.1.1 allows local users to execute arbitrary OS commands as root by leveraging admin privileges, aka Bug ID CSCva38349. Ios Xr Mitigation only Fix from $1,9502016-10-06 HIGH 8.8 CVE-2016-6427 Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center E… Unified Contact Center Express Mitigation only Fix from $1,9502016-10-06 MEDIUM 6.1 CVE-2016-6425 Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express … Unified Contact Center Express Mitigation only Fix from $1,6002016-10-06 MEDIUM 6.5 CVE-2016-6424 The DHCP Relay implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4.7.29 and 9.1.7.4 allows remote attackers to cause a denial of s… Adaptive Security Appliance Software Mitigation only Fix from $1,6002016-10-06 HIGH 7.5 CVE-2016-6422 Cisco IOS 12.2(33)SXJ9 on Supervisor Engine 32 and 720 modules for 6500 and 7600 devices mishandles certain operators, flags, and keywords in TCAM sh… iOS Mitigation only Fix from $1,9502016-10-06 MEDIUM 6.5 CVE-2016-1454 Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote atta… Nx Os 5.2 / 6.0+ Fix from $1,6002016-10-06 CRITICAL 9.8 CVE-2016-1453EPSS 8% Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote… Nx Os Mitigation only Fix from $2,3002016-10-06 HIGH 7.5 CVE-2015-6393 Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attac… Nx Os Mitigation only Fix from $1,9502016-10-06 HIGH 8.0 CVE-2015-0721 Cisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allo… Nx Os Mitigation only Fix from $1,9502016-10-06 HIGH 7.5 CVE-2015-6392 Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to caus… Nx Os Mitigation only Fix from $1,9502016-10-06 HIGH 7.5 CVE-2016-6426 The j_spring_security_switch_user function in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Expres… Unified Contact Center Express Mitigation only Fix from $1,9502016-10-05 MEDIUM 6.5 CVE-2016-6423 The IKEv2 client and initiator implementations in Cisco IOS 15.5(3)M and IOS XE allow remote IKEv2 servers to cause a denial of service (device reloa… iOS Mitigation only Fix from $1,6002016-10-05 MEDIUM 5.3 CVE-2016-6421 Cisco IOS XR 5.2.2 allows remote attackers to cause a denial of service (process restart) via a crafted OSPF Link State Advertisement (LSA) update, a… Ios Xr Mitigation only Fix from $1,6002016-10-05 HIGH 7.5 CVE-2016-6393 The AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial o… iOS after 15.6 Fix from $1,9502016-10-05 HIGH 7.5 CVE-2016-6391 Cisco IOS 12.2 and 15.0 through 15.3 allows remote attackers to cause a denial of service (traffic-processing outage) via a crafted series of Common … iOS Mitigation only Fix from $1,9502016-10-05 HIGH 7.5 CVE-2016-6385 Memory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.2 through 3.8 allows remote attackers to … iOS Mitigation only Fix from $1,9502016-10-05 HIGH 8.1 CVE-2016-6380 The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive inform… iOS Mitigation only Fix from $1,9502016-10-05 HIGH 7.5 CVE-2016-6379 Cisco IOS 12.2 and IOS XE 3.14 through 3.16 and 16.1 allow remote attackers to cause a denial of service (device reload) via crafted IP Detail Record… iOS Mitigation only Fix from $1,9502016-10-05 HIGH 7.5 CVE-2016-6378 Cisco IOS XE 3.1 through 3.17 and 16.1 through 16.2 allows remote attackers to cause a denial of service (device reload) via crafted ICMP packets tha… Ios Xe Mitigation only Fix from $1,9502016-10-05 HIGH 7.5 CVE-2016-1455 Cisco NX-OS before 7.0(3)I2(2e) and 7.0(3)I4 before 7.0(3)I4(1) has an incorrect iptables local-interface configuration, which allows remote attacker… Nx Os Mitigation only Fix from $1,9502016-10-05