Browse CVEs

HIGH 7.8 CVE-2011-3281 Unspecified vulnerability in Cisco IOS 15.0 through 15.1, in certain HTTP Layer 7 Application Control and Inspection configurations, allows remote at… iOS Mitigation only Fix from $1,9502011-10-03 HIGH 7.5 CVE-2011-3280 Memory leak in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a de… Ios Xe Mitigation only Fix from $1,9502011-10-03 MEDIUM 6.1 CVE-2011-3274 Unspecified vulnerability in Cisco IOS 12.2SRE before 12.2(33)SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured… iOS Mitigation only Fix from $1,6002011-10-03 HIGH 9.0 CVE-2011-2543EPSS 12% Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote authenticated users to cause … Telepresence Codec C40 No fix yet Fix from $1,9502011-09-23 HIGH 10.0 CVE-2011-3290 Cisco Identity Services Engine (ISE) before 1.0.4.MR2 has default Oracle database credentials, which allows remote attackers to modify settings or pe… Identity Services Engine after 1.0.4 Fix from $1,9502011-09-21 HIGH 10.0 CVE-2011-2738EPSS 11% Multiple unspecified vulnerabilities in Cisco Unified Service Monitor before 8.6, as used in Unified Operations Manager before 8.6 and CiscoWorks LAN… Unified Service Monitor after 8.5 Fix from $1,9502011-09-19 MEDIUM 5.0 CVE-2011-2581 The ACL implementation in Cisco NX-OS 5.0(2) and 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches, and NX-OS before 5.0(3)U1(2a) on Nexus 3000… Nx Os after 5.0 Fix from $1,6002011-09-14 HIGH 7.8 CVE-2011-2577EPSS 13% Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions be… Telepresence Codec C40 No fix yet Fix from $1,9502011-08-31 HIGH 10.0 CVE-2011-2555 Cisco TelePresence Recording Server 1.7.2.x before 1.7.2.1 has a default password for the root administrator account, which makes it easier for remot… Telepresence Recording Server Software Mitigation only Fix from $1,9502011-08-29 HIGH 10.0 CVE-2011-1643 Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x, 7.x before 7.1(5b)su4, 8.0, and 8.5 before 8.5(1)su2 and Cisco Unified Pre… Unified Communications Manager Mitigation only Fix from $1,9502011-08-29 HIGH 7.8 CVE-2011-2560 The Packet Capture Service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x does not properly handle idle TCP connections… Unified Communications Manager Mitigation only Fix from $1,9502011-08-29 HIGH 7.8 CVE-2011-2562 Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)su2, 7.x before 7.1(5b)su3, 8.x b… Unified Communications Manager Mitigation only Fix from $1,9502011-08-29 HIGH 7.8 CVE-2011-2563 Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 8.x b… Unified Communications Manager Mitigation only Fix from $1,9502011-08-29 HIGH 7.8 CVE-2011-2564 Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 8.x b… Unified Communications Manager Mitigation only Fix from $1,9502011-08-29 HIGH 7.1 CVE-2011-2561 The SIP process in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 7.x before 7.1(5b)su4 and 8.x before 8.0(1) does not properl… Unified Communications Manager Mitigation only Fix from $1,9502011-08-29 HIGH 7.8 CVE-2011-1624 Cisco IOS 12.2(58)SE, when a login banner is configured, allows remote attackers to cause a denial of service (device reload) by establishing two SSH… iOS Mitigation only Fix from $1,9502011-08-18 MEDIUM 5.4 CVE-2011-1625 Cisco IOS 12.2, 12.3, 12.4, 15.0, and 15.1, when the data-link switching (DLSw) feature is configured, allows remote attackers to cause a denial of s… iOS Mitigation only Fix from $1,6002011-08-18 HIGH 9.0 CVE-2011-2547 The web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote authenticated users to execut… Sa500 Software after 2.1.18 Fix from $1,9502011-07-28 HIGH 7.8 CVE-2011-2549 Unspecified vulnerability in Cisco IOS XR 4.1.x before 4.1.1 on Cisco Aggregation Services Routers (ASR) 9000 series devices allows remote attackers … Ios Xr Mitigation only Fix from $1,9502011-07-28 MEDIUM 5.0 CVE-2011-2546 SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remot… Sa500 Software after 2.1.18 Fix from $1,6002011-07-28 HIGH 7.8 CVE-2011-2064 Cisco IOS 12.4MDA before 12.4(24)MDA5 on the Cisco Content Services Gateway - Second Generation (CSG2) allows remote attackers to cause a denial of s… iOS Mitigation only Fix from $1,9502011-07-11 MEDIUM 6.8 CVE-2011-2678 The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Windows platforms uses weak permissions (NT AUTHORITY\INTERACTIVE:F) for cvpnd.exe, which al… Vpn Client Mitigation only Fix from $1,6002011-07-07 MEDIUM 5.0 CVE-2011-2395 The Neighbor Discovery (ND) protocol implementation in Cisco IOS on unspecified switches allows remote attackers to bypass the Router Advertisement G… iOS Mitigation only Fix from $1,6002011-06-09 HIGH 10.0 CVE-2011-1623 Cisco Media Processing Software before 1.2 on Media Experience Engine (MXE) 5600 devices has a default root password, which makes it easier for conte… Media Processing Software after 1.1.3 Fix from $1,9502011-06-02 HIGH 10.0 CVE-2011-2024 Cisco Network Registrar before 7.2 has a default administrative password, which makes it easier for remote attackers to obtain access via a TCP sessi… Cns Network Registrar after 7.1.3 Fix from $1,9502011-06-02 HIGH 7.2 CVE-2011-2041 The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.254 on Windows, and… Anyconnect Secure Mobility Client after 2.3.2016 Fix from $1,9502011-06-02 MEDIUM 6.6 CVE-2011-1602 The su utility on Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.0.3 allows local users to gain privileges via unspecif… Unified Ip Phone 7906 Mitigation only Fix from $1,6002011-06-02 MEDIUM 6.6 CVE-2011-1603 Cisco Unified IP Phones 7900 devices (aka TNP phones) with software before 9.2.1 allow local users to gain privileges via unspecified vectors, aka Bu… Unified Ip Phone 7906 Mitigation only Fix from $1,6002011-06-02 HIGH 9.3 CVE-2011-2040EPSS 11% The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629, on Linu… Anyconnect Secure Mobility Client after 2.5.2019 Fix from $1,9502011-06-02 HIGH 7.6 CVE-2011-2039EPSS 70% The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows Mobile, … Anyconnect Secure Mobility Client after 2.3 Fix from $1,9502011-06-02