Cisco

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-1368 1Cisco 1Firesight System Software May 6, 2026 May 5, 2016 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Cisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, and on the Advanced Malware Protection (AMP) for Networks component on these appliances, allows remot...Show more Cisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, and on the Advanced Malware Protection (AMP) for Networks component on these appliances, allows remote attackers to cause a denial of service (packet-processing outage) via crafted packets, aka Bug ID CSCuu86214.Show less
CVE-2016-1343 1Cisco 1Information Server May 6, 2026 Apr 30, 2016 N/A· v4 10.0 CRITICAL· v3 6.4 MEDIUM· v2 The XML parser in Cisco Information Server (CIS) 6.2 allows remote attackers to read arbitrary files or cause a denial of service (CPU and memory consumption) via an external entity declaration in conjunction with an ent...Show more The XML parser in Cisco Information Server (CIS) 6.2 allows remote attackers to read arbitrary files or cause a denial of service (CPU and memory consumption) via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCuy39059.Show less
CVE-2016-4349 1Cisco 1Webex Productivity Tools May 6, 2026 Apr 28, 2016 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Untrusted search path vulnerability in Cisco WebEx Productivity Tools 2.40.5001.10012 allows local users to gain privileges via a Trojan horse cryptsp.dll, dwmapi.dll, msimg32.dll, ntmarta.dll, propsys.dll, riched20.dll,...Show more Untrusted search path vulnerability in Cisco WebEx Productivity Tools 2.40.5001.10012 allows local users to gain privileges via a Trojan horse cryptsp.dll, dwmapi.dll, msimg32.dll, ntmarta.dll, propsys.dll, riched20.dll, rpcrtremote.dll, secur32.dll, sxs.dll, or uxtheme.dll file in the current working directory, aka Bug ID CSCuy56140.Show less
CVE-2016-1389 1Cisco 1Webex Meetings Server May 6, 2026 Apr 28, 2016 N/A· v4 7.4 HIGH· v3 4.3 MEDIUM· v2 Open redirect vulnerability in Cisco WebEx Meetings Server (CWMS) 2.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCuy44695.
CVE-2016-1386 1Cisco 1Application Policy Infrastructure Controller Enterprise Module May 6, 2026 Apr 28, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The API in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0(1) allows remote attackers to spoof administrative notifications via crafted attribute-value pairs, aka Bug ID CSCux15521.
CVE-2016-1367 1Cisco 1Adaptive Security Appliance Software May 6, 2026 Apr 21, 2016 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 The DHCPv6 relay implementation in Cisco Adaptive Security Appliance (ASA) Software 9.4.1 allows remote attackers to cause a denial of service (device reload) via crafted DHCPv6 packets, aka Bug ID CSCus23248.
CVE-2016-1364 1Cisco 1Wireless Lan Controller Software May 6, 2026 Apr 21, 2016 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Cisco Wireless LAN Controller (WLC) Software 7.4 before 7.4.130.0(MD) and 7.5, 7.6, and 8.0 before 8.0.110.0(ED) allows remote attackers to cause a denial of service (device reload) via crafted Bonjour traffic, aka Bug I...Show more Cisco Wireless LAN Controller (WLC) Software 7.4 before 7.4.130.0(MD) and 7.5, 7.6, and 8.0 before 8.0.110.0(ED) allows remote attackers to cause a denial of service (device reload) via crafted Bonjour traffic, aka Bug ID CSCur66908.Show less
CVE-2016-1363 1Cisco 1Wireless Lan Controller Software May 6, 2026 Apr 21, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers to execute arbitrary...Show more Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCus25617.Show less
CVE-2016-1362 1Cisco 1Aireos May 6, 2026 Apr 21, 2016 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 Cisco AireOS 4.1 through 7.4.120.0, 7.5.x, and 7.6.100.0 on Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of service (device reload) via a crafted HTTP request, aka Bug ID CSCun86747.
CVE-2015-6360 1Cisco 14Adaptive Security Appliance Software Dx Series Ip Phones FirmwareIos Xe+11 more May 6, 2026 Apr 21, 2016 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.
CVE-2016-1384 1Cisco 2Ios Ios Xe May 6, 2026 Apr 20, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898.
CVE-2016-1340 1Cisco 1Unified Computing System Platform Emulator May 6, 2026 Apr 16, 2016 N/A· v4 8.4 HIGH· v3 7.2 HIGH· v2 Heap-based buffer overflow in Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS9 allows local users to gain privileges via crafted libclimeta.so filename arguments, aka Bug ID CSCu...Show more Heap-based buffer overflow in Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS9 allows local users to gain privileges via crafted libclimeta.so filename arguments, aka Bug ID CSCux68837.Show less
CVE-2016-1339 1Cisco 1Unified Computing System Platform Emulator May 6, 2026 Apr 16, 2016 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS9 allows local users to gain privileges via crafted arguments on a ucspe-copy command line, aka Bug ID CSCux68832.
CVE-2016-1378 1Cisco 1Ios May 6, 2026 Apr 14, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Cisco IOS before 15.2(2)E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a request to the Network Mobility Services Protocol (NMSP) port, aka Bug ID CSCum62...Show more Cisco IOS before 15.2(2)E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a request to the Network Mobility Services Protocol (NMSP) port, aka Bug ID CSCum62591.Show less
CVE-2016-1352 1Cisco 1Unified Computing System Central Software May 6, 2026 Apr 14, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Cisco Unified Computing System (UCS) Central Software 1.3(1b) and earlier allows remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuv33856.
CVE-2016-1377 1Cisco 1Unity Connection May 6, 2026 Apr 12, 2016 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Cisco Unity Connection through 11.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCus21776.
CVE-2016-1376 1Cisco 1Ios Xr May 6, 2026 Apr 12, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Cisco IOS XR 4.2.3, 4.3.0, 4.3.4, and 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service (CRC and symbol errors, and interface flap) via crafted bit patterns in packets, aka Bug ID CSCuv78548.
CVE-2016-1375 1Cisco 1Ip Interoperability And Collaboration System May 6, 2026 Apr 8, 2016 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Cisco IP Interoperability and Collaboration System 4.10(1) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy12339.
CVE-2016-1313 1Cisco 1Ucs Invicta C3124sa Appliance May 6, 2026 Apr 6, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Cisco UCS Invicta C3124SA Appliance 4.3.1 through 5.0.1, UCS Invicta Scaling System and Appliance, and Whiptail Racerunner improperly store a default SSH private key, which allows remote attackers to obtain root access v...Show more Cisco UCS Invicta C3124SA Appliance 4.3.1 through 5.0.1, UCS Invicta Scaling System and Appliance, and Whiptail Racerunner improperly store a default SSH private key, which allows remote attackers to obtain root access via unspecified vectors, aka Bug ID CSCun71294.Show less
CVE-2016-1291 2Cisco Sun 3Evolved Programmable Network Manager OpensolarisPrime Infrastructure May 6, 2026 Apr 6, 2016 N/A· v4 9.8 CRITICAL· v3 9.3 HIGH· v2 Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID...Show more Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID CSCuw03192.Show less

Previous 1...207208209...334 Next