Cisco

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-3264 1Cisco 1Adaptive Security Appliance Software May 6, 2026 May 20, 2014 N/A· v4 N/A· v3 6.3 MEDIUM· v2 Cisco Adaptive Security Appliance (ASA) Software 9.1(.5) and earlier allows remote authenticated users to cause a denial of service (device reload) via crafted attributes in a RADIUS packet, aka Bug ID CSCun69561.
CVE-2014-2199 1Cisco 6Webex Business Suite Webex Event CenterWebex Meeting Center+3 more May 6, 2026 May 20, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before...Show more meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738.Show less
CVE-2014-2195 1Cisco 3Asyncos Content Security Management ApplianceEmail Security Appliance Firmware May 6, 2026 May 20, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is enabled, does not properly handle group names, which allows remote attackers to gain role...Show more Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is enabled, does not properly handle group names, which allows remote attackers to gain role privileges by leveraging group-name similarity, aka Bug ID CSCum86085.Show less
CVE-2014-2194 1Cisco 1Unified Web And E Mail Interaction Manager May 6, 2026 May 20, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity.
CVE-2014-2193 1Cisco 1Unified Web And E Mail Interaction Manager May 6, 2026 May 20, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid identifier, aka Bug ID CSCuj43084.
CVE-2014-2192 1Cisco 1Unified Web And E Mail Interaction Manager May 6, 2026 May 20, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj43033.
CVE-2013-6975 1Cisco 1Nx Os May 6, 2026 May 20, 2014 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.2(2a) and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217.
CVE-2014-3263 1Cisco 1Ios May 6, 2026 May 16, 2014 N/A· v4 N/A· v3 5.4 MEDIUM· v2 The ScanSafe module in Cisco IOS 15.3(3)M allows remote attackers to cause a denial of service (device reload) via HTTPS packets that require tower processing, aka Bug ID CSCum97038.
CVE-2014-3262 1Cisco 2Ios Ios Xe May 6, 2026 May 16, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.3(3)S and earlier and IOS XE does not properly validate parameters in ITR control messages, which allows remote attackers to cause a denial of serv...Show more The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.3(3)S and earlier and IOS XE does not properly validate parameters in ITR control messages, which allows remote attackers to cause a denial of service (CEF outage and packet drops) via malformed messages, aka Bug ID CSCun73782.Show less
CVE-2014-2136 1Cisco 2Webex Advanced Recording Format Player Webex Recording Format Player May 6, 2026 May 8, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr...Show more Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file, aka Bug IDs CSCui72223, CSCul01163, and CSCul01166.Show less
CVE-2014-2135 1Cisco 2Webex Advanced Recording Format Player Webex Recording Format Player May 6, 2026 May 8, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr...Show more Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file, aka Bug IDs CSCul87216 and CSCuj07603.Show less
CVE-2014-2134 1Cisco 2Webex Advanced Recording Format Player Webex Recording Format Player May 6, 2026 May 8, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Heap-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (mem...Show more Heap-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio channel in a .wrf file, aka Bug ID CSCuc39458.Show less
CVE-2014-2133 1Cisco 2Webex Advanced Recording Format Player Webex Recording Format Player May 6, 2026 May 8, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr...Show more Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file that triggers improper LZW decompression, aka Bug ID CSCuj87565.Show less
CVE-2014-2132 1Cisco 2Webex Advanced Recording Format Player Webex Recording Format Player May 6, 2026 May 8, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 Cisco WebEx Recording Format (WRF) player and Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allow remote attackers to cause a denial of service (application crash...Show more Cisco WebEx Recording Format (WRF) player and Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allow remote attackers to cause a denial of service (application crash) via a crafted (1) .wrf or (2) .arf file that triggers a buffer over-read, aka Bug ID CSCuh52768.Show less
CVE-2014-2191 1Cisco 1Broadband Access Center Telco Wireless Software May 6, 2026 May 7, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the web framework in Cisco Broadcast Access Center for Telco and Wireless (aka BAC-TW) allows remote attackers to inject arbitrary web script or HTML via an unspecified paramet...Show more Cross-site scripting (XSS) vulnerability in the web framework in Cisco Broadcast Access Center for Telco and Wireless (aka BAC-TW) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun91113.Show less
CVE-2014-2190 1Cisco 1Broadband Access Center Telco Wireless Software May 6, 2026 May 7, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Broadcast Access Center for Telco and Wireless (aka BAC-TW) allows remote attackers to hijack the authentication of arbitrary users for reques...Show more Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Broadcast Access Center for Telco and Wireless (aka BAC-TW) allows remote attackers to hijack the authentication of arbitrary users for requests that make BAC-TW changes, aka Bug IDs CSCuo23804 and CSCuo26389.Show less
CVE-2014-2181 1Cisco 1Adaptive Security Appliance Software May 6, 2026 May 7, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Cisco Adaptive Security Appliance (ASA) Software allows remote authenticated users to read files by sending a crafted URL to the HTTP server, as demonstrated by reading the running configuration, aka Bug ID CSCun78551.
CVE-2014-0685 1Cisco 1Cisco Nexus 1000v Intercloud May 6, 2026 May 7, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco Nexus 1000V InterCloud 5.2(1)IC1(1.2) and earlier for VMware allows remote attackers to bypass ACL deny statements via crafted (1) IGMPv2 or (2) IGMPv3 packets, aka Bug ID CSCug61691.
CVE-2014-0684 1Cisco 5Nexus 7000 Nexus 7000 10 SlotNexus 7000 18 Slot+2 more May 6, 2026 May 7, 2014 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Cisco NX-OS 6.2(2) on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136.
CVE-2014-2175 1Cisco 2Telepresence Tc Software Telepresence Te Software May 6, 2026 May 2, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allow remote attackers to cause a denial of service (memory consumption) via crafted H.225 packets, aka Bug ID CSCtq78849.

Previous 1...241242243...330 Next