Cisco

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-4209 1Cisco 1Webex Meeting Center May 6, 2026 Jun 23, 2015 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Cisco WebEx Meeting Center does not properly determine authorization for reading a host calendar, which allows remote attackers to obtain sensitive information by obtaining a list of all meetings and then sending a calen...Show more Cisco WebEx Meeting Center does not properly determine authorization for reading a host calendar, which allows remote attackers to obtain sensitive information by obtaining a list of all meetings and then sending a calendar request for each one, aka Bug ID CSCur23913.Show less
CVE-2015-4207 1Cisco 1Webex Meeting Center May 6, 2026 Jun 23, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco WebEx Meeting Center places a meeting's access number in a URL, which allows remote attackers to obtain sensitive information and bypass intended attendance restrictions by visiting a meeting-registration page, aka...Show more Cisco WebEx Meeting Center places a meeting's access number in a URL, which allows remote attackers to obtain sensitive information and bypass intended attendance restrictions by visiting a meeting-registration page, aka Bug ID CSCus62147.Show less
CVE-2015-4205 1Cisco 1Ios Xr May 6, 2026 Jun 23, 2015 N/A· v4 N/A· v3 5.7 MEDIUM· v2 Cisco IOS XR 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service (NPU chip reset or line-card reload) by sending crafted IEEE 802.3x flow-control PAUSE frames on the local network, aka Bug ID C...Show more Cisco IOS XR 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service (NPU chip reset or line-card reload) by sending crafted IEEE 802.3x flow-control PAUSE frames on the local network, aka Bug ID CSCut19959.Show less
CVE-2015-4203 1Cisco 1Ios May 6, 2026 Jun 23, 2015 N/A· v4 N/A· v3 5.4 MEDIUM· v2 Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers to cause a denial of service (PXF process...Show more Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers to cause a denial of service (PXF process crash) by sending malformed MPLS 6VPE packets quickly, aka Bug ID CSCud83396.Show less
CVE-2015-4189 1Cisco 1Data Center Analytics Framework May 6, 2026 Jun 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in Cisco Data Center Analytics Framework (DCAF) 1.4 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun26807.
CVE-2015-4204 1Cisco 1Cisco Ios May 6, 2026 Jun 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Memory leak in Cisco IOS 12.2 in the Performance Routing Engine (PRE) module on uBR10000 devices allows remote authenticated users to cause a denial of service (memory consumption or PXF process crash) by sending docsIfM...Show more Memory leak in Cisco IOS 12.2 in the Performance Routing Engine (PRE) module on uBR10000 devices allows remote authenticated users to cause a denial of service (memory consumption or PXF process crash) by sending docsIfMCmtsMib SNMP requests quickly, aka Bug ID CSCue65051.Show less
CVE-2015-4200 1Cisco 1Ios May 6, 2026 Jun 23, 2015 N/A· v4 N/A· v3 7.8 HIGH· v2 Memory leak in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine (PRE) module on UBR devices allows remote attackers to cause a denial of service (memory consumption) by triggering an er...Show more Memory leak in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine (PRE) module on UBR devices allows remote attackers to cause a denial of service (memory consumption) by triggering an error during CPE negotiation, aka Bug ID CSCug00885.Show less
CVE-2015-4202 1Cisco 1Ios May 6, 2026 Jun 20, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems (CMTS) does not properly restrict access to the IP Detail Record (IPDR) service, which allows remote attackers to obtain potentially sensitive MAC addr...Show more Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems (CMTS) does not properly restrict access to the IP Detail Record (IPDR) service, which allows remote attackers to obtain potentially sensitive MAC address and network-utilization information via crafted IPDR packets, aka Bug ID CSCua39203.Show less
CVE-2015-4198 1Cisco 1Web Security Appliance May 6, 2026 Jun 20, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the web framework on Cisco Web Security Appliance (WSA) devices with software 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified HTTP h...Show more Cross-site scripting (XSS) vulnerability in the web framework on Cisco Web Security Appliance (WSA) devices with software 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified HTTP header, aka Bug ID CSCuu24409.Show less
CVE-2015-4197 1Cisco 1Nx Os May 6, 2026 Jun 20, 2015 N/A· v4 N/A· v3 6.1 MEDIUM· v2 Cisco NX-OS 5.2(5) on Nexus 7000 devices allows remote attackers to cause a denial of service (device crash) by sending a malformed LLDP packet on the local network, aka Bug ID CSCud89415.
CVE-2015-4201 1Cisco 1Asr 5000 Series Software May 6, 2026 Jun 20, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Gateway General Packet Radio Service Support Node (GGSN) component on Cisco ASR 5000 devices with software 17.2.0.59184 and 18.0.L0.59219 allows remote attackers to cause a denial of service (Session Manager restart)...Show more The Gateway General Packet Radio Service Support Node (GGSN) component on Cisco ASR 5000 devices with software 17.2.0.59184 and 18.0.L0.59219 allows remote attackers to cause a denial of service (Session Manager restart) via an invalid TCP/IP header, aka Bug ID CSCut68058.Show less
CVE-2015-4195 1Cisco 1Ios Xr May 6, 2026 Jun 19, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Cisco IOS XR 5.1.1.K9SEC allows remote authenticated users to cause a denial of service (vty error, and SSH and TELNET outage) via a crafted disconnect action within an SSH session, aka Bug ID CSCul63127.
CVE-2015-4194 1Cisco 1Webex Meeting Center May 6, 2026 Jun 19, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The web-based administrative interface in Cisco WebEx Meeting Center provides different error messages for failed login attempts depending on whether the username exists or corresponds to a privileged account, which allo...Show more The web-based administrative interface in Cisco WebEx Meeting Center provides different error messages for failed login attempts depending on whether the username exists or corresponds to a privileged account, which allows remote attackers to enumerate account names and obtain sensitive information via a series of requests, aka Bug ID CSCuf28861.Show less
CVE-2015-4191 1Cisco 1Ios Xr May 6, 2026 Jun 19, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco IOS XR 5.2.1 allows remote attackers to cause a denial of service (ipv6_io service reload) via a malformed IPv6 packet, aka Bug ID CSCuq95565.
CVE-2015-4550 1Cisco 1Adaptive Security Appliance Software May 6, 2026 Jun 17, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The Cavium cryptographic-module firmware on Cisco Adaptive Security Appliance (ASA) devices with software 9.3(3) and 9.4(1.1) does not verify the AES-GCM Integrity Check Value (ICV) octets, which makes it easier for man-...Show more The Cavium cryptographic-module firmware on Cisco Adaptive Security Appliance (ASA) devices with software 9.3(3) and 9.4(1.1) does not verify the AES-GCM Integrity Check Value (ICV) octets, which makes it easier for man-in-the-middle attackers to spoof IPSec and IKEv2 traffic by modifying packet data, aka Bug ID CSCuu66218.Show less
CVE-2015-4190 1Cisco 1Prime Service Catalog May 6, 2026 Jun 17, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cisco Cloud Portal in Cisco Prime Service Catalog 9.4.1_vortex on Cloud Portal appliances allows man-in-the-middle attackers to modify data via unspecified vectors, aka Bug ID CSCuh19683.
CVE-2015-4188 1Cisco 1Prime Collaboration May 6, 2026 Jun 17, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 SQL injection vulnerability in the Manager interface in Cisco Prime Collaboration 10.5(1) allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug IDs CSCuu29910, CSCuu29928, and CSCuu59104.
CVE-2015-4186 1Cisco 1Virtualization Experience Client 6000 Series Firmware May 6, 2026 Jun 17, 2015 N/A· v4 N/A· v3 7.2 HIGH· v2 The diagnostics subsystem in the administrative web interface on Cisco Virtualization Experience (aka VXC) Client 6215 devices with firmware 11.2(27.4) allows local users to gain privileges for OS command execution via a...Show more The diagnostics subsystem in the administrative web interface on Cisco Virtualization Experience (aka VXC) Client 6215 devices with firmware 11.2(27.4) allows local users to gain privileges for OS command execution via a crafted option value, aka Bug ID CSCug54412.Show less
CVE-2015-4183 1Cisco 1Unified Computing System May 6, 2026 Jun 17, 2015 N/A· v4 N/A· v3 7.2 HIGH· v2 Cisco UCS Central Software 1.2(1a) allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka Bug ID CSCut32795.
CVE-2015-4185 1Cisco 1Ios May 6, 2026 Jun 13, 2015 N/A· v4 N/A· v3 6.9 MEDIUM· v2 The TCL interpreter in Cisco IOS 15.2 does not properly maintain the vty state, which allows local users to gain privileges by starting a session very soon after a TCL script execution, aka Bug ID CSCuq24202.

Previous 1...220221222...329 Next