Cisco

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-0671 1Cisco 1Mediasense Apr 29, 2026 Jan 22, 2014 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Open redirect vulnerability in Cisco MediaSense allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, aka Bug ID CSCum16749.
CVE-2014-0670 1Cisco 1Mediasense Apr 29, 2026 Jan 22, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum16686.
CVE-2014-0669 1Cisco 1Asr 5000 Series Software Apr 29, 2026 Jan 22, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Wireless Session Protocol (WSP) feature in the Gateway GPRS Support Node (GGSN) component on Cisco ASR 5000 series devices allows remote attackers to bypass intended Top-Up payment restrictions via unspecified WSP pa...Show more The Wireless Session Protocol (WSP) feature in the Gateway GPRS Support Node (GGSN) component on Cisco ASR 5000 series devices allows remote attackers to bypass intended Top-Up payment restrictions via unspecified WSP packets, aka Bug ID CSCuh28371.Show less
CVE-2014-0668 1Cisco 1Secure Access Control System Apr 29, 2026 Jan 20, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the portal in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCue65949.
CVE-2014-0667 1Cisco 1Secure Access Control System Apr 29, 2026 Jan 16, 2014 N/A· v4 N/A· v3 6.3 MEDIUM· v2 The RMI interface in Cisco Secure Access Control System (ACS) does not properly enforce authorization requirements, which allows remote authenticated users to read arbitrary files via a request to this interface, aka Bug...Show more The RMI interface in Cisco Secure Access Control System (ACS) does not properly enforce authorization requirements, which allows remote authenticated users to read arbitrary files via a request to this interface, aka Bug ID CSCud75169.Show less
CVE-2014-0666 1Cisco 1Jabber Apr 29, 2026 Jan 16, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary co...Show more Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary code, via modified packets, aka Bug ID CSCug48056.Show less
CVE-2014-0650 1Cisco 1Secure Access Control System Apr 29, 2026 Jan 16, 2014 N/A· v4 N/A· v3 10.0 HIGH· v2 The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating-system commands via a request to this interface, aka Bug ID CSCue65962.
CVE-2014-0649 1Cisco 1Secure Access Control System Apr 29, 2026 Jan 16, 2014 N/A· v4 N/A· v3 9.0 HIGH· v2 The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this...Show more The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this interface, aka Bug ID CSCud75180.Show less
CVE-2014-0648 1Cisco 1Secure Access Control System Apr 29, 2026 Jan 16, 2014 N/A· v4 N/A· v3 10.0 HIGH· v2 The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization requirements, which allows remote attackers to obtain administrative access via a re...Show more The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization requirements, which allows remote attackers to obtain administrative access via a request to this interface, aka Bug ID CSCud75187.Show less
CVE-2013-6687 1Cisco 1Webex Meetings Server Apr 29, 2026 Jan 16, 2014 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The web portal in the Enterprise License Manager component in Cisco WebEx Meetings Server allows remote authenticated users to discover the cleartext administrative password by reading HTML source code, aka Bug ID CSCul3...Show more The web portal in the Enterprise License Manager component in Cisco WebEx Meetings Server allows remote authenticated users to discover the cleartext administrative password by reading HTML source code, aka Bug ID CSCul33876.Show less
CVE-2013-2139 3Cisco FedoraprojectOpensuse 3Fedora LibsrtpOpensuse Apr 29, 2026 Jan 16, 2014 N/A· v4 N/A· v3 2.6 LOW· v2 Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) via vectors related to a length inconsistency in the crypto_policy_set_from_profile_for_rtp and...Show more Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) via vectors related to a length inconsistency in the crypto_policy_set_from_profile_for_rtp and srtp_protect functions.Show less
CVE-2014-0665 1Cisco 1Identity Services Engine Software Apr 29, 2026 Jan 15, 2014 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The RBAC implementation in Cisco Identity Services Engine (ISE) Software does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a dow...Show more The RBAC implementation in Cisco Identity Services Engine (ISE) Software does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, aka Bug ID CSCul83904.Show less
CVE-2014-0659 1Cisco 6Rvs4000 Rvs4000 FirmwareWap4410n+3 more Apr 29, 2026 Jan 12, 2014 N/A· v4 N/A· v3 10.0 HIGH· v2 The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read cr...Show more The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary commands, via requests to the test interface on TCP port 32764, aka Bug IDs CSCum37566, CSCum43693, CSCum43700, and CSCum43685.Show less
CVE-2014-0664 1Cisco 1Unity Connection Apr 29, 2026 Jan 10, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The server in Cisco Unity Connection allows remote authenticated users to cause a denial of service (CPU consumption) via unspecified IMAP commands, aka Bug ID CSCul49976.
CVE-2014-0663 1Cisco 1Secure Access Control System Apr 29, 2026 Jan 10, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the web framework in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum03625...Show more Cross-site scripting (XSS) vulnerability in the web framework in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum03625.Show less
CVE-2014-0658 1Cisco 3Unified Ip Phone 9951 Unified Ip Phone 9971Unified Ip Phones 9900 Series Firmware Apr 29, 2026 Jan 10, 2014 N/A· v4 N/A· v3 5.4 MEDIUM· v2 Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service (unregistration) via a crafted SIP header, aka Bug ID CSCul24898.
CVE-2013-6974 1Cisco 1Secure Access Control System Apr 29, 2026 Jan 10, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud89431...Show more Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud89431.Show less
CVE-2014-0657 1Cisco 1Unified Communications Manager Apr 29, 2026 Jan 8, 2014 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier does not properly handle role restrictions, which allows remote authenticated users to bypass role-based access control vi...Show more The administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier does not properly handle role restrictions, which allows remote authenticated users to bypass role-based access control via multiple visits to a forbidden portal URL, aka Bug ID CSCuj83540.Show less
CVE-2014-0656 1Cisco 1Context Directory Agent Apr 29, 2026 Jan 8, 2014 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Cisco Context Directory Agent (CDA) allows remote authenticated users to trigger the omission of certain user-interface data via crafted field values, aka Bug ID CSCuj45353.
CVE-2014-0655 1Cisco 1Adaptive Security Appliance Apr 29, 2026 Jan 8, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to change the user-cache contents via a replay attack involving crafted RADIUS Change of Authorizatio...Show more The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to change the user-cache contents via a replay attack involving crafted RADIUS Change of Authorization (CoA) messages, aka Bug ID CSCuj45332.Show less

Previous 1...249250251...330 Next