Cisco

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-1483 1Cisco 1Webex Meetings Server May 6, 2026 Sep 19, 2016 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Cisco WebEx Meetings Server 2.6 allows remote attackers to cause a denial of service (CPU consumption) by repeatedly accessing the account-validation component of an unspecified service, aka Bug ID CSCuy92704.
CVE-2016-6405 1Cisco 1Fog Director May 6, 2026 Sep 18, 2016 N/A· v4 6.5 MEDIUM· v3 6.8 MEDIUM· v2 Cisco Fog Director 1.0(0) for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka Bug ID CSCuz89368.
CVE-2016-6404 1Cisco 1Ios May 6, 2026 Sep 18, 2016 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.5(2)T and IOS XE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy19854.
CVE-2016-6403 1Cisco 1Ios May 6, 2026 Sep 18, 2016 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The Data in Motion (DMo) application in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a denial of service via a crafted packet, aka Bug IDs CSCuy82904, CSCuy82909, a...Show more The Data in Motion (DMo) application in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a denial of service via a crafted packet, aka Bug IDs CSCuy82904, CSCuy82909, and CSCuy82912.Show less
CVE-2016-6402 1Cisco 1Unified Computing System May 6, 2026 Sep 18, 2016 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System (UCS) through 3.0(2d) allow local users to obtain OS root access via crafted CLI input, aka Bug ID CSCuz91263.
CVE-2016-1433 1Cisco 1Ios Xr May 6, 2026 Sep 18, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Cisco IOS XR 6.0 and 6.0.1 on NCS 6000 devices allows remote attackers to cause a denial of service (OSPFv3 process reload) via crafted OSPFv3 packets, aka Bug ID CSCuz66289.
CVE-2016-1482 1Cisco 1Webex Meetings Server May 6, 2026 Sep 17, 2016 N/A· v4 8.1 HIGH· v3 9.3 HIGH· v2 Cisco WebEx Meetings Server 2.6 allows remote attackers to execute arbitrary commands by injecting these commands into an application script, aka Bug ID CSCuy83130.
CVE-2016-6407 1Cisco 1Web Security Appliance May 6, 2026 Sep 17, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Cisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (link saturation) by making many HTTP requests for overlapping byte ranges simultaneously, aka...Show more Cisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (link saturation) by making many HTTP requests for overlapping byte ranges simultaneously, aka Bug ID CSCuz27219.Show less
CVE-2016-6401 1Cisco 1Carrier Routing System May 6, 2026 Sep 17, 2016 N/A· v4 5.3 MEDIUM· v3 5.7 MEDIUM· v2 Cisco Carrier Routing System (CRS) 5.1 and 5.1.4, as used in CRS Carrier Grade Services for CRS-1 and CRS-3 devices, allows remote attackers to cause a denial of service (line-card reload) via crafted IPv6-over-MPLS pack...Show more Cisco Carrier Routing System (CRS) 5.1 and 5.1.4, as used in CRS Carrier Grade Services for CRS-1 and CRS-3 devices, allows remote attackers to cause a denial of service (line-card reload) via crafted IPv6-over-MPLS packets, aka Bug ID CSCva32494.Show less
CVE-2016-6399 1Cisco 9Ace 4700 Series Application Control Engine Appliance Ace 4700 Series Application Control Engine Appliance A1Ace 4700 Series Application Control Engine Appliance A3+6 more May 6, 2026 Sep 12, 2016 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Cisco ACE30 Application Control Engine Module through A5 3.3 and ACE 4700 Application Control Engine appliances through A5 3.3 allow remote attackers to cause a denial of service (device reload) via crafted (1) SSL or (2...Show more Cisco ACE30 Application Control Engine Module through A5 3.3 and ACE 4700 Application Control Engine appliances through A5 3.3 allow remote attackers to cause a denial of service (device reload) via crafted (1) SSL or (2) TLS packets, aka Bug ID CSCvb16317.Show less
CVE-2016-6398 1Cisco 1Ios May 6, 2026 Sep 12, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The PPTP server in Cisco IOS 15.5(3)M does not properly initialize packet buffers, which allows remote attackers to obtain sensitive information from earlier network communication by reading packet data, aka Bug ID CSCvb...Show more The PPTP server in Cisco IOS 15.5(3)M does not properly initialize packet buffers, which allows remote attackers to obtain sensitive information from earlier network communication by reading packet data, aka Bug ID CSCvb16274.Show less
CVE-2016-6396 1Cisco 1Firesight System Software May 6, 2026 Sep 12, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1, when certain malware blocking options are enabled, allow remote attackers to bypass malware detection via crafted fields in HTTP head...Show more Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1, when certain malware blocking options are enabled, allow remote attackers to bypass malware detection via crafted fields in HTTP headers, aka Bug ID CSCuz44482.Show less
CVE-2016-6395 1Cisco 1Firesight System Software May 6, 2026 Sep 12, 2016 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1 allows remote authenticated users to inject arbitrar...Show more Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz58658.Show less
CVE-2016-6394 1Cisco 1Firesight System Software May 6, 2026 Sep 12, 2016 N/A· v4 9.1 CRITICAL· v3 5.8 MEDIUM· v2 Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attackers to hijack web sessions via a session identifier, aka Bug ID CSCuz80503.
CVE-2016-6371 1Cisco 1Hosted Collaboration Mediation Fulfillment May 6, 2026 Sep 12, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote attackers to write to arbitrary files via a crafted URL, aka Bug ID CSC...Show more Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote attackers to write to arbitrary files via a crafted URL, aka Bug ID CSCuz64717.Show less
CVE-2016-6370 1Cisco 1Hosted Collaboration Mediation Fulfillment May 6, 2026 Sep 12, 2016 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote authenticated users to read arbitrary files via a crafted pathname in a...Show more Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote authenticated users to read arbitrary files via a crafted pathname in an HTTP request, aka Bug ID CSCuz27255.Show less
CVE-2016-6375 1Cisco 6Wireless Lan Controller Software Wireless Lan Controller Software 6.0Wireless Lan Controller Software 7.0+3 more May 6, 2026 Sep 12, 2016 N/A· v4 5.3 MEDIUM· v3 5.7 MEDIUM· v2 Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow remote attackers to cause a denial of service (device reload) by sending crafted Inter-Acce...Show more Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow remote attackers to cause a denial of service (device reload) by sending crafted Inter-Access Point Protocol (IAPP) packets and then sending a traffic stream metrics (TSM) information request over SNMP, aka Bug ID CSCuz40221.Show less
CVE-2016-1469 1Cisco 2Spa300 Firmware Spa500 Firmware May 6, 2026 Sep 12, 2016 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a denial of service (device outage) via a series of malformed HTTP requests, aka Bug ID CSCut67385.
CVE-2016-6377 1Cisco 1Media Origination System Suite May 6, 2026 Sep 3, 2016 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager (PAM) API calls via unsp...Show more Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager (PAM) API calls via unspecified vectors, aka Bug ID CSCuz52110.Show less
CVE-2016-1464 1Cisco 1Webex Wrf Player T29 May 6, 2026 Sep 3, 2016 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code via a crafted file, aka Bug ID CSCva09375.

Previous 1...196197198...329 Next