Cisco

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-3273 1Cisco 1Ios May 6, 2026 May 20, 2014 N/A· v4 N/A· v3 6.1 MEDIUM· v2 The LLDP implementation in Cisco IOS allows remote attackers to cause a denial of service (device reload) via a malformed packet, aka Bug ID CSCum96282.
CVE-2014-3271 1Cisco 1Ios Xr May 6, 2026 May 20, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug IDs CSCum85558, CSCum20949, CSCul61849, and CSCul71149.
CVE-2014-3270 1Cisco 1Ios Xr May 6, 2026 May 20, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (process hang) via a malformed packet, aka Bug ID CSCul80924.
CVE-2014-3269 1Cisco 1Ios Xe May 6, 2026 May 20, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The SNMP module in Cisco IOS XE 3.5E allows remote authenticated users to cause a denial of service (device reload) by polling frequently, aka Bug ID CSCug65204.
CVE-2014-3268 1Cisco 2Ios Unified Border Element May 6, 2026 May 20, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco IOS 15.2(4)M4 on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service (input-queue consumption and traffic-processing outage) via crafted RTCP packets, aka Bug ID CSCuj72...Show more Cisco IOS 15.2(4)M4 on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service (input-queue consumption and traffic-processing outage) via crafted RTCP packets, aka Bug ID CSCuj72215.Show less
CVE-2014-3265 1Cisco 1Security Manager May 6, 2026 May 20, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the Auto Update Server (AUS) web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter...Show more Cross-site scripting (XSS) vulnerability in the Auto Update Server (AUS) web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuo06900.Show less
CVE-2014-3264 1Cisco 1Adaptive Security Appliance Software May 6, 2026 May 20, 2014 N/A· v4 N/A· v3 6.3 MEDIUM· v2 Cisco Adaptive Security Appliance (ASA) Software 9.1(.5) and earlier allows remote authenticated users to cause a denial of service (device reload) via crafted attributes in a RADIUS packet, aka Bug ID CSCun69561.
CVE-2014-2199 1Cisco 6Webex Business Suite Webex Event CenterWebex Meeting Center+3 more May 6, 2026 May 20, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before...Show more meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5(.1.131) and earlier, and WebEx Business Suite (WBS) 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive meeting information by leveraging knowledge of a meeting identifier, aka Bug IDs CSCuo68624 and CSCue46738.Show less
CVE-2014-2195 1Cisco 3Asyncos Content Security Management ApplianceEmail Security Appliance Firmware May 6, 2026 May 20, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is enabled, does not properly handle group names, which allows remote attackers to gain role...Show more Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA) devices, when Active Directory is enabled, does not properly handle group names, which allows remote attackers to gain role privileges by leveraging group-name similarity, aka Bug ID CSCum86085.Show less
CVE-2014-2194 1Cisco 1Unified Web And E Mail Interaction Manager May 6, 2026 May 20, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 system/egain/chat/entrypoint in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to have an unspecified impact by injecting a spoofed XML external entity.
CVE-2014-2193 1Cisco 1Unified Web And E Mail Interaction Manager May 6, 2026 May 20, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cisco Unified Web and E-Mail Interaction Manager places session identifiers in GET requests, which allows remote attackers to inject conversation text by obtaining a valid identifier, aka Bug ID CSCuj43084.
CVE-2014-2192 1Cisco 1Unified Web And E Mail Interaction Manager May 6, 2026 May 20, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-mail Interaction Manager 9.0(2) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj43033.
CVE-2013-6975 1Cisco 1Nx Os May 6, 2026 May 20, 2014 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.2(2a) and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217.
CVE-2014-3263 1Cisco 1Ios May 6, 2026 May 16, 2014 N/A· v4 N/A· v3 5.4 MEDIUM· v2 The ScanSafe module in Cisco IOS 15.3(3)M allows remote attackers to cause a denial of service (device reload) via HTTPS packets that require tower processing, aka Bug ID CSCum97038.
CVE-2014-3262 1Cisco 2Ios Ios Xe May 6, 2026 May 16, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.3(3)S and earlier and IOS XE does not properly validate parameters in ITR control messages, which allows remote attackers to cause a denial of serv...Show more The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.3(3)S and earlier and IOS XE does not properly validate parameters in ITR control messages, which allows remote attackers to cause a denial of service (CEF outage and packet drops) via malformed messages, aka Bug ID CSCun73782.Show less
CVE-2014-2136 1Cisco 2Webex Advanced Recording Format Player Webex Recording Format Player May 6, 2026 May 8, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr...Show more Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file, aka Bug IDs CSCui72223, CSCul01163, and CSCul01166.Show less
CVE-2014-2135 1Cisco 2Webex Advanced Recording Format Player Webex Recording Format Player May 6, 2026 May 8, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr...Show more Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file, aka Bug IDs CSCul87216 and CSCuj07603.Show less
CVE-2014-2134 1Cisco 2Webex Advanced Recording Format Player Webex Recording Format Player May 6, 2026 May 8, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Heap-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (mem...Show more Heap-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio channel in a .wrf file, aka Bug ID CSCuc39458.Show less
CVE-2014-2133 1Cisco 2Webex Advanced Recording Format Player Webex Recording Format Player May 6, 2026 May 8, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr...Show more Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file that triggers improper LZW decompression, aka Bug ID CSCuj87565.Show less
CVE-2014-2132 1Cisco 2Webex Advanced Recording Format Player Webex Recording Format Player May 6, 2026 May 8, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 Cisco WebEx Recording Format (WRF) player and Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allow remote attackers to cause a denial of service (application crash...Show more Cisco WebEx Recording Format (WRF) player and Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allow remote attackers to cause a denial of service (application crash) via a crafted (1) .wrf or (2) .arf file that triggers a buffer over-read, aka Bug ID CSCuh52768.Show less

Previous 1...245246247...334 Next