Browse CVEs

HIGH 7.1 CVE-2013-5526 Cisco 9900 fourth-generation IP phones do not properly perform SDP negotiation, which allows remote attackers to cause a denial of service (device re… Unified Ip Phone 9951 Mitigation only Fix from $1,9502013-10-10 MEDIUM 6.5 CVE-2013-5525 SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote authenticated users to execute… Identity Services Engine Software after 1.2 Fix from $1,6002013-10-10 MEDIUM 5.7 CVE-2013-5499 The remember feature in the DHCP server in Cisco IOS allows remote attackers to cause a denial of service (device reload) by acquiring a lease and th… iOS Mitigation only Fix from $1,6002013-10-10 MEDIUM 5.7 CVE-2013-5527 The OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) via crafted options in an LSA typ… iOS Mitigation only Fix from $1,6002013-10-10 HIGH 7.2 CVE-2012-4075 Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in unspecified command parameters, aka Bug … Nx Os Mitigation only Fix from $1,9502013-10-05 MEDIUM 6.8 CVE-2012-4084 Cross-site request forgery (CSRF) vulnerability in the web-management interface in the fabric interconnect (FI) component in Cisco Unified Computing … Unified Computing System Mitigation only Fix from $1,6002013-10-05 MEDIUM 6.2 CVE-2012-4122 The CLI parser in Cisco NX-OS allows local users to bypass intended access restrictions, and overwrite or create arbitrary files, via shell output re… Nx Os Mitigation only Fix from $1,6002013-10-05 MEDIUM 6.2 CVE-2012-4141 Directory traversal vulnerability in the CLI parser in Cisco NX-OS allows local users to create arbitrary script files via a relative pathname in the… Nx Os Mitigation only Fix from $1,6002013-10-05 MEDIUM 5.0 CVE-2012-4091 The RIP service engine in Cisco NX-OS allows remote attackers to cause a denial of service (engine restart) via a malformed (1) RIPv4 or (2) RIPv6 me… Nx Os Mitigation only Fix from $1,6002013-10-05 MEDIUM 5.0 CVE-2012-4098 The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP service rese… Nx Os Mitigation only Fix from $1,6002013-10-05 MEDIUM 6.8 CVE-2012-4136 The high-availability service in the Fabric Interconnect component in Cisco Unified Computing System (UCS) does not properly bind the cluster service… Unified Computing System Mitigation only Fix from $1,6002013-10-03 HIGH 7.8 CVE-2013-5503 The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause a denial … Ios Xr Mitigation only Fix from $1,9502013-10-02 MEDIUM 6.8 CVE-2012-4102 The activate firmware command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by e… Unified Computing System Mitigation only Fix from $1,6002013-10-02 MEDIUM 6.8 CVE-2012-4103 ethanalyzer in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands … Unified Computing System Mitigation only Fix from $1,6002013-10-02 MEDIUM 6.8 CVE-2012-4109 The clear sshkey command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedd… Unified Computing System Mitigation only Fix from $1,6002013-10-02 MEDIUM 6.8 CVE-2012-4110 run-script in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands i… Unified Computing System Mitigation only Fix from $1,6002013-10-02 MEDIUM 6.8 CVE-2012-4111 The create certreq command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embe… Unified Computing System Mitigation only Fix from $1,6002013-10-02 MEDIUM 6.6 CVE-2012-4104 Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System (UCS) allo… Unified Computing System Mitigation only Fix from $1,6002013-10-02 MEDIUM 5.5 CVE-2013-5517 SQL injection vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote authenticated users to execute arbitrar… Unified Communications Domain Manager Mitigation only Fix from $1,6002013-10-02 MEDIUM 5.5 CVE-2012-4095 The local file editor in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges, and read or… Unified Computing System Mitigation only Fix from $1,6002013-10-02 MEDIUM 6.3 CVE-2013-5516 The Media Snapshot implementation on Cisco TelePresence Multipoint Switch (CTMS) devices allows remote authenticated users to cause a denial of servi… Telepresence Multipoint Switch Mitigation only Fix from $1,6002013-10-01 MEDIUM 6.2 CVE-2012-4096 The local file editor in the Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local users to gain privileges and … Unified Computing System Mitigation only Fix from $1,6002013-10-01 MEDIUM 5.0 CVE-2013-3417 The administrative web interface in Cisco Video Surveillance Operations Manager does not properly perform authentication, which allows remote attacke… Video Surveillance Operations Manager Mitigation only Fix from $1,6002013-09-30 MEDIUM 5.0 CVE-2013-5498 The PPTP-ALG component in CRS Carrier Grade Services Engine (CGSE) and ASR 9000 Integrated Service Module (ISM) in Cisco IOS XR allows remote attacke… Ios Xr Mitigation only Fix from $1,6002013-09-27 MEDIUM 6.5 CVE-2012-1313 The remote debug shell on the PALO adapter card in Cisco Unified Computing System (UCS) allows local users to gain privileges via malformed show-macs… Unified Computing System Mitigation only Fix from $1,6002013-09-27 HIGH 7.8 CVE-2013-5473 Memory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS before 3.6.1S allows remote attackers to cause a denia… iOS Mitigation only Fix from $1,9502013-09-27 HIGH 7.8 CVE-2013-5474 Race condition in the IPv6 virtual fragmentation reassembly (VFR) implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.3 allows remote a… iOS Mitigation only Fix from $1,9502013-09-27 HIGH 7.8 CVE-2013-5475 Cisco IOS 12.2 through 12.4 and 15.0 through 15.3, and IOS XE 2.1 through 3.9, allows remote attackers to cause a denial of service (device reload) v… Ios Xe Mitigation only Fix from $1,9502013-09-27 HIGH 7.8 CVE-2013-5476 The Zone-Based Firewall (ZFW) feature in Cisco IOS 15.1 through 15.2, when content filtering or HTTP ALG inspection is enabled, allows remote attacke… iOS Mitigation only Fix from $1,9502013-09-27 HIGH 7.8 CVE-2013-5477 The T1/E1 driver-queue functionality in Cisco IOS 12.2 and 15.0 through 15.3, when an HDLC32 driver is used, allows remote attackers to cause a denia… iOS Mitigation only Fix from $1,9502013-09-27