Cisco

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-3354 1Cisco 2Ios Ios Xe May 6, 2026 Sep 25, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG before 3.4.4SG; and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allow re...Show more Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG before 3.4.4SG; and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allow remote attackers to cause a denial of service (device reload) via malformed RSVP packets, aka Bug ID CSCui11547.Show less
CVE-2014-3380 1Cisco 1Unified Communications Domain Manager Platform May 6, 2026 Sep 24, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco Unified Communications Domain Manager Platform Software 4.4(.3) and earlier allows remote attackers to cause a denial of service (CPU consumption) by sending crafted TCP packets quickly, aka Bug ID CSCuo42063.
CVE-2014-3379 1Cisco 3Ios Xr Network Convergence System 6000Network Convergence System 6008 May 6, 2026 Sep 20, 2014 N/A· v4 N/A· v3 6.1 MEDIUM· v2 Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (NPU and card hang or reload) via a malformed MPLS packet, aka Bug ID CSCuq10466.
CVE-2014-3378 1Cisco 1Ios Xr May 6, 2026 Sep 20, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 tacacsd in Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service (process reload) via a malformed TACACS+ packet, aka Bug ID CSCum00468.
CVE-2014-3377 1Cisco 1Ios Xr May 6, 2026 Sep 20, 2014 N/A· v4 N/A· v3 4.0 MEDIUM· v2 snmpd in Cisco IOS XR 5.1 and earlier allows remote authenticated users to cause a denial of service (process reload) via a malformed SNMPv2 packet, aka Bug ID CSCun67791.
CVE-2014-3376 1Cisco 1Ios Xr May 6, 2026 Sep 20, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service (process reload) via a malformed RSVP packet, aka Bug ID CSCuq12031.
CVE-2014-3367 1Cisco 1Cisco Nexus 1000v Intercloud May 6, 2026 Sep 20, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the vCloud Director component in Cisco Nexus 1000V InterCloud for VMware allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSC...Show more Cross-site scripting (XSS) vulnerability in the vCloud Director component in Cisco Nexus 1000V InterCloud for VMware allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq90524.Show less
CVE-2014-3363 1Cisco 1Unified Communications Manager May 6, 2026 Sep 12, 2014 N/A· v4 N/A· v3 3.5 LOW· v2 Cross-site scripting (XSS) vulnerability in the web framework in Cisco Unified Communications Manager (UCM) 9.1(2.10000.28) allows remote authenticated users to inject arbitrary web script or HTML via an unspecified para...Show more Cross-site scripting (XSS) vulnerability in the web framework in Cisco Unified Communications Manager (UCM) 9.1(2.10000.28) allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuq68443.Show less
CVE-2014-3362 1Cisco 4Telepresence System Edge 75 Mxp Telepresence System Edge 85 MxpTelepresence System Edge 95 Mxp+1 more May 6, 2026 Sep 12, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 Memory leak in Cisco TelePresence System Edge MXP Series Software F9.3.3 and earlier allows remote attackers to cause a denial of service (management outage) via multiple TELNET connections, aka Bug ID CSCuo63677.
CVE-2014-3342 1Cisco 2Cli Ios Xr May 6, 2026 Sep 12, 2014 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The CLI in Cisco IOS XR allows remote authenticated users to obtain sensitive information via unspecified commands, aka Bug IDs CSCuq42336, CSCuq76853, CSCuq76873, and CSCuq45383.
CVE-2014-5868 1Cisco 1Cisco Technical Support May 6, 2026 Sep 11, 2014 N/A· v4 N/A· v3 5.4 MEDIUM· v2 The Cisco Technical Support (aka com.cisco.swtg_android) application 3.7.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive i...Show more The Cisco Technical Support (aka com.cisco.swtg_android) application 3.7.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.Show less
CVE-2014-3348 1Cisco 8Integrated Management Controller Unified Computing System E140dUnified Computing System E140dp+5 more May 6, 2026 Sep 10, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang) via a crafted SSH pack...Show more The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang) via a crafted SSH packet, aka Bug ID CSCuo69206.Show less
CVE-2014-3343 1Cisco 1Ios Xr May 6, 2026 Sep 10, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cisco IOS XR 5.1 allows remote attackers to cause a denial of service (DHCPv6 daemon crash) via a malformed DHCPv6 packet, aka Bug ID CSCuo59052.
CVE-2014-3353 1Cisco 1Ios Xr May 6, 2026 Sep 4, 2014 N/A· v4 N/A· v3 7.1 HIGH· v2 Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote attackers to cause a denial of service (CPU consumption and IPv6 packet drops) via a malformed IPv6 packet, aka Bug ID CSCuo9...Show more Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote attackers to cause a denial of service (CPU consumption and IPv6 packet drops) via a malformed IPv6 packet, aka Bug ID CSCuo95165.Show less
CVE-2014-3352 1Cisco 1Cloud Portal May 6, 2026 Aug 30, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) 2008.3_SP9 and earlier does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive informa...Show more Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) 2008.3_SP9 and earlier does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive information via crafted packets, related to an "iFrame vulnerability," aka Bug ID CSCuh84801.Show less
CVE-2014-3351 1Cisco 1Cloud Portal May 6, 2026 Aug 29, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive information via crafted packet...Show more Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive information via crafted packets, aka Bug IDs CSCuh87398 and CSCuh87380.Show less
CVE-2014-3350 1Cisco 1Cloud Portal May 6, 2026 Aug 29, 2014 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly implement URL redirection, which allows remote authenticated users to obtain sensitive information via a crafted URL, aka Bug ID CSCuh8487...Show more Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly implement URL redirection, which allows remote authenticated users to obtain sensitive information via a crafted URL, aka Bug ID CSCuh84870.Show less
CVE-2014-3349 1Cisco 1Cloud Portal May 6, 2026 Aug 29, 2014 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not validate file types during the handling of file submission, which allows remote authenticated users to upload arbitrary files via a crafted request...Show more Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not validate file types during the handling of file submission, which allows remote authenticated users to upload arbitrary files via a crafted request, aka Bug ID CSCuh87410.Show less
CVE-2014-3346 1Cisco 1Transport Gateway Installation Software May 6, 2026 Aug 29, 2014 N/A· v4 N/A· v3 6.3 MEDIUM· v2 The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) does not validate an unspecified parameter, which allows remote authenticated users to cause a deni...Show more The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) does not validate an unspecified parameter, which allows remote authenticated users to cause a denial of service (service crash) via a crafted string, aka Bug ID CSCuq31819.Show less
CVE-2014-3347 1Cisco 81801 Integrated Service Router 1802 Integrated Service Router1803 Integrated Service Router+5 more May 6, 2026 Aug 28, 2014 N/A· v4 N/A· v3 5.4 MEDIUM· v2 Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service (device hang) by leveraging knowledge of the ISDN phone number to trigger...Show more Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service (device hang) by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid state of the hardware encryption module, aka Bug ID CSCul77897.Show less

Previous 1...240241242...334 Next