Cisco

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-3309 1Cisco 2Ios Ios Xe May 6, 2026 Jul 9, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a "deny all" configuration, which allows remote attackers to bypass intended restrictions on time synchronizati...Show more The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a "deny all" configuration, which allows remote attackers to bypass intended restrictions on time synchronization via a standard query, aka Bug ID CSCuj66318.Show less
CVE-2014-3308 1Cisco 8Asr 9000 Rsp440 Router Asr 9001Asr 9006+5 more May 6, 2026 Jul 7, 2014 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted packets, aka Bug ID CSCun83985.
CVE-2014-3300 1Cisco 2Unified Cdm Application Software Unified Communications Domain Manager May 6, 2026 Jul 7, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modi...Show more The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a crafted URL, aka Bug ID CSCum77041.Show less
CVE-2014-2198 1Cisco 2Unified Cdm Platform Software Unified Communications Domain Manager May 6, 2026 Jul 7, 2014 N/A· v4 N/A· v3 10.0 HIGH· v2 Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to obtain access to the support and root account...Show more Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to obtain access to the support and root accounts by extracting this key from a binary file found in a different installation of the product, aka Bug ID CSCud41130.Show less
CVE-2014-2197 1Cisco 2Unified Cdm Application Software Unified Communications Domain Manager May 6, 2026 Jul 7, 2014 N/A· v4 N/A· v3 9.0 HIGH· v2 The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authentica...Show more The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administrative credentials via a crafted URL, aka Bug ID CSCun49862.Show less
CVE-2014-3307 1Cisco 1Universal Small Cell Series Firmware May 6, 2026 Jul 2, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The DHCP client implementation in Universal Small Cell firmware on Cisco Small Cell products allows remote attackers to execute arbitrary commands via crafted DHCP messages, aka Bug ID CSCup47513.
CVE-2014-3298 1Cisco 1Cloud Portal May 6, 2026 Jul 2, 2014 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Form Data Viewer in Cisco Intelligent Automation for Cloud in Cisco Cloud Portal places passwords in form data, which allows remote authenticated users to obtain sensitive information by reading HTML source code, aka Bug...Show more Form Data Viewer in Cisco Intelligent Automation for Cloud in Cisco Cloud Portal places passwords in form data, which allows remote authenticated users to obtain sensitive information by reading HTML source code, aka Bug ID CSCui36976.Show less
CVE-2014-3297 1Cisco 1Cloud Portal May 6, 2026 Jul 2, 2014 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Cisco Intelligent Automation for Cloud in Cisco Cloud Portal does not properly restrict the content of MyServices action URLs, which allows remote authenticated users to obtain sensitive information by reading (1) web-se...Show more Cisco Intelligent Automation for Cloud in Cisco Cloud Portal does not properly restrict the content of MyServices action URLs, which allows remote authenticated users to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug IDs CSCui36937, CSCui37004, and CSCui36927.Show less
CVE-2014-3299 1Cisco 1Ios May 6, 2026 Jun 25, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Cisco IOS allows remote authenticated users to cause a denial of service (device reload) via malformed IPsec packets, aka Bug ID CSCui79745.
CVE-2014-3296 1Cisco 1Webex Meetings Server May 6, 2026 Jun 21, 2014 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The XML programmatic interface (XML PI) in Cisco WebEx Meeting Server 1.5(.1.131) and earlier allows remote authenticated users to obtain sensitive meeting information via a crafted URL, aka Bug ID CSCum03527.
CVE-2014-2151 1Cisco 1Adaptive Security Appliance Software May 6, 2026 Jun 18, 2014 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The WebVPN portal in Cisco Adaptive Security Appliance (ASA) Software 8.4(.7.15) and earlier allows remote authenticated users to obtain sensitive information via a crafted JavaScript file, aka Bug ID CSCui04520.
CVE-2014-3290 1Cisco 1Ios Xe May 6, 2026 Jun 14, 2014 N/A· v4 N/A· v3 4.8 MEDIUM· v2 The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by sniffing the network or overwrite n...Show more The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by sniffing the network or overwrite networking-services data via a crafted mDNS response, aka Bug ID CSCun64867.Show less
CVE-2014-2176 1Cisco 7Asr 9001 Asr 9006Asr 9010+4 more May 6, 2026 Jun 14, 2014 N/A· v4 N/A· v3 7.1 HIGH· v2 Cisco IOS XR 4.1.2 through 5.1.1 on ASR 9000 devices, when a Trident-based line card is used, allows remote attackers to cause a denial of service (NP chip and line card reload) via malformed IPv6 packets, aka Bug ID CSC...Show more Cisco IOS XR 4.1.2 through 5.1.1 on ASR 9000 devices, when a Trident-based line card is used, allows remote attackers to cause a denial of service (NP chip and line card reload) via malformed IPv6 packets, aka Bug ID CSCun71928.Show less
CVE-2014-3295 1Cisco 1Nx Os May 6, 2026 Jun 14, 2014 N/A· v4 N/A· v3 4.8 MEDIUM· v2 The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass authentication and cause a denial of service (group-member state modification and traffic blackholing) via malformed HSRP packe...Show more The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass authentication and cause a denial of service (group-member state modification and traffic blackholing) via malformed HSRP packets, aka Bug ID CSCup11309.Show less
CVE-2014-3294 1Cisco 1Webex Meetings Server May 6, 2026 Jun 10, 2014 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Cisco WebEx Meeting Server does not properly restrict the content of URLs, which allows remote authenticated users to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3...Show more Cisco WebEx Meeting Server does not properly restrict the content of URLs, which allows remote authenticated users to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug ID CSCuj81691.Show less
CVE-2014-3292 1Cisco 1Unified Communications Manager May 6, 2026 Jun 10, 2014 N/A· v4 N/A· v3 5.5 MEDIUM· v2 The Real Time Monitoring Tool (RTMT) implementation in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to (1) read or (2) delete arbitrary files via a crafted URL, aka Bug IDs CSCuo173...Show more The Real Time Monitoring Tool (RTMT) implementation in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to (1) read or (2) delete arbitrary files via a crafted URL, aka Bug IDs CSCuo17302 and CSCuo17199.Show less
CVE-2014-3289 1Cisco 4Content Security Management Appliance Email Security Appliance FirmwareIronport Asyncos+1 more May 6, 2026 Jun 10, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.0, Web Security Appliance (WSA) 8.0 (.5 Hot Patch 1) and earlier, and Content Security Man...Show more Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.0, Web Security Appliance (WSA) 8.0 (.5 Hot Patch 1) and earlier, and Content Security Management Appliance (SMA) 8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, as demonstrated by the date_range parameter to monitor/reports/overview on the IronPort ESA, aka Bug IDs CSCun07998, CSCun07844, and CSCun07888.Show less
CVE-2014-3287 1Cisco 1Unified Communications Manager May 6, 2026 Jun 10, 2014 N/A· v4 N/A· v3 4.0 MEDIUM· v2 SQL injection vulnerability in BulkViewFileContentsAction.java in the Java interface in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to execute arbitrary SQL commands via crafted fi...Show more SQL injection vulnerability in BulkViewFileContentsAction.java in the Java interface in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to execute arbitrary SQL commands via crafted filename parameters in a URL, aka Bug ID CSCuo17337.Show less
CVE-2014-3291 1Cisco 1Wireless Lan Controller May 6, 2026 Jun 8, 2014 N/A· v4 N/A· v3 5.7 MEDIUM· v2 Cisco Wireless LAN Controller (WLC) devices allow remote attackers to cause a denial of service (NULL pointer dereference and device restart) via a zero value in Cisco Discovery Protocol packet data that is not properly...Show more Cisco Wireless LAN Controller (WLC) devices allow remote attackers to cause a denial of service (NULL pointer dereference and device restart) via a zero value in Cisco Discovery Protocol packet data that is not properly handled during SNMP polling, aka Bug ID CSCuo12321.Show less
CVE-2014-3286 1Cisco 1Webex Meetings Server May 6, 2026 Jun 8, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The web framework in Cisco WebEx Meeting Server does not properly restrict the content of reply messages, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug IDs CSCuj81685, CSCuj8168...Show more The web framework in Cisco WebEx Meeting Server does not properly restrict the content of reply messages, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug IDs CSCuj81685, CSCuj81688, CSCuj81665, CSCuj81744, and CSCuj81661.Show less

Previous 1...243244245...334 Next