Browse CVEs

HIGH 7.8 CVE-2014-3386 The GPRS Tunneling Protocol (GTP) inspection engine in Cisco ASA Software 8.2 before 8.2(5.51), 8.4 before 8.4(7.15), 8.7 before 8.7(1.13), 9.0 befor… Asa Mitigation only Fix from $1,9502014-10-10 HIGH 7.8 CVE-2014-3387 The SunRPC inspection engine in Cisco ASA Software 7.2 before 7.2(5.14), 8.2 before 8.2(5.51), 8.3 before 8.3(2.42), 8.4 before 8.4(7.23), 8.5 before… Asa Mitigation only Fix from $1,9502014-10-10 HIGH 7.8 CVE-2014-3388 The DNS inspection engine in Cisco ASA Software 9.0 before 9.0(4.13), 9.1 before 9.1(5.7), and 9.2 before 9.2(2) allows remote attackers to cause a d… Asa Mitigation only Fix from $1,9502014-10-10 MEDIUM 6.8 CVE-2014-3390 The Virtual Network Management Center (VNMC) policy implementation in Cisco ASA Software 8.7 before 8.7(1.14), 9.2 before 9.2(2.8), and 9.3 before 9.… Adaptive Security Appliance Software Mitigation only Fix from $1,6002014-10-10 MEDIUM 6.8 CVE-2014-3391 Untrusted search path vulnerability in Cisco ASA Software 8.x before 8.4(3), 8.5, and 8.7 before 8.7(1.13) allows local users to gain privileges by p… Adaptive Security Appliance Software Mitigation only Fix from $1,6002014-10-10 MEDIUM 5.0 CVE-2014-3394 The Smart Call Home (SCH) implementation in Cisco ASA Software 8.2 before 8.2(5.50), 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13)… Adaptive Security Virtual Appliance Mitigation only Fix from $1,6002014-10-10 MEDIUM 5.0 CVE-2014-3402 The authentication-manager process in the web framework in Cisco Intrusion Prevention System (IPS) 7.0(8)E4 and earlier in Cisco Intrusion Detection … Intrusion Prevention System after 7.0 Fix from $1,6002014-10-10 MEDIUM 5.0 CVE-2014-3403 The Autonomic Networking Infrastructure (ANI) component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to spo… Ios Xe Mitigation only Fix from $1,6002014-10-10 MEDIUM 5.5 CVE-2014-3399 The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.2(.2.4) and earlier does not properly manage session information dur… Adaptive Security Appliance Software after 9.2 Fix from $1,6002014-10-07 HIGH 7.5 CVE-2014-3396 Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass… Ios Xr Mitigation only Fix from $1,9502014-10-05 MEDIUM 5.0 CVE-2014-3398 The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to obtain potentially sensitive software-versi… Adaptive Security Appliance Software Mitigation only Fix from $1,6002014-10-05 MEDIUM 5.0 CVE-2014-3395 Cisco WebEx Meetings Server (WMS) 2.5 allows remote attackers to trigger the download of arbitrary files via a crafted URL, aka Bug ID CSCup10343. Webex Meetings Server Mitigation only Fix from $1,6002014-09-30 MEDIUM 6.8 CVE-2013-3068 Cross-site request forgery (CSRF) vulnerability in apply.cgi in Linksys WRT310Nv2 2.0.0.1 allows remote attackers to hijack the authentication of adm… Linksys Wrt310n Router Firmware No fix yet Fix from $1,6002014-09-29 HIGH 7.8 CVE-2014-3354 Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG … iOS Mitigation only Fix from $1,9502014-09-25 HIGH 7.8 CVE-2014-3355 The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and … Ios Xe Mitigation only Fix from $1,9502014-09-25 HIGH 7.8 CVE-2014-3356 The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and … Ios Xe Mitigation only Fix from $1,9502014-09-25 HIGH 7.8 CVE-2014-3357 Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE before 3.5.2E, and 3.11.xS before 3.11.1S allo… iOS Mitigation only Fix from $1,9502014-09-25 HIGH 7.8 CVE-2014-3358 Memory leak in Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE before 3.5.2E, and 3.11.xS befo… iOS Mitigation only Fix from $1,9502014-09-25 HIGH 7.8 CVE-2014-3359 Memory leak in Cisco IOS 15.1 through 15.4 and IOS XE 3.4.xS, 3.5.xS, 3.6.xS, and 3.7.xS before 3.7.6S; 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S; a… iOS Mitigation only Fix from $1,9502014-09-25 HIGH 7.8 CVE-2014-3360 Cisco IOS 12.4 and 15.0 through 15.4 and IOS XE 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, 3.5.xS, 3.6.xS, and 3.7.xS before 3.7.6S; 3.8.xS, 3.9.xS, and 3.10.xS… iOS Mitigation only Fix from $1,9502014-09-25 HIGH 7.1 CVE-2014-3361 The ALG module in Cisco IOS 15.0 through 15.4 does not properly implement SIP over NAT, which allows remote attackers to cause a denial of service (d… iOS Mitigation only Fix from $1,9502014-09-25 MEDIUM 5.0 CVE-2014-3380 Cisco Unified Communications Domain Manager Platform Software 4.4(.3) and earlier allows remote attackers to cause a denial of service (CPU consumpti… Unified Communications Domain Manager Platform Mitigation only Fix from $1,6002014-09-24 MEDIUM 6.1 CVE-2014-3379 Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (NPU and card hang or re… Ios Xr Mitigation only Fix from $1,6002014-09-20 MEDIUM 5.0 CVE-2014-3376 Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service (process reload) via a malformed RSVP packet, aka Bug ID CSCuq12031. Ios Xr Mitigation only Fix from $1,6002014-09-20 MEDIUM 5.0 CVE-2014-3378 tacacsd in Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service (process reload) via a malformed TACACS+ packet, aka Bug… Ios Xr Mitigation only Fix from $1,6002014-09-20 HIGH 7.8 CVE-2014-3362 Memory leak in Cisco TelePresence System Edge MXP Series Software F9.3.3 and earlier allows remote attackers to cause a denial of service (management… Telepresence System Software Mitigation only Fix from $1,9502014-09-12 MEDIUM 5.4 CVE-2014-5868 The Cisco Technical Support (aka com.cisco.swtg_android) application 3.7.1 for Android does not verify X.509 certificates from SSL servers, which all… Cisco Technical Support Mitigation only Fix from $1,6002014-09-11 MEDIUM 5.0 CVE-2014-3348 The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote a… Integrated Management Controller after 2.2.2 Fix from $1,6002014-09-10 HIGH 7.1 CVE-2014-3353 Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote attackers to cause a denial of service (CPU consumptio… Ios Xr after 4.3.2 Fix from $1,9502014-09-04 MEDIUM 6.3 CVE-2014-3346 The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) does not validate an unspeci… Transport Gateway Installation Software Mitigation only Fix from $1,6002014-08-29