Cisco

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-0654 1Cisco 1Context Directory Agent Apr 29, 2026 Jan 8, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cisco Context Directory Agent (CDA) allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages, aka Bug ID CSCuj45383.
CVE-2014-0653 1Cisco 1Adaptive Security Appliance Apr 29, 2026 Jan 8, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to trigger authentication-state modifications via a crafted NetBIOS logout probe response, aka Bug ID...Show more The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to trigger authentication-state modifications via a crafted NetBIOS logout probe response, aka Bug ID CSCuj45340.Show less
CVE-2014-0652 1Cisco 1Context Directory Agent Apr 29, 2026 Jan 8, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the Mappings page in Cisco Context Directory Agent (CDA) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuj45358.
CVE-2014-0651 1Cisco 1Context Directory Agent Apr 29, 2026 Jan 8, 2014 N/A· v4 N/A· v3 4.9 MEDIUM· v2 The administrative interface in Cisco Context Directory Agent (CDA) does not properly enforce authorization requirements, which allows remote authenticated users to obtain administrative access by hijacking a session, ak...Show more The administrative interface in Cisco Context Directory Agent (CDA) does not properly enforce authorization requirements, which allows remote authenticated users to obtain administrative access by hijacking a session, aka Bug ID CSCuj45347.Show less
CVE-2013-6982 1Cisco 1Nx Os Apr 29, 2026 Jan 8, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a...Show more The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service (peer reset) via a crafted message, aka Bug ID CSCuj03174.Show less
CVE-2013-6983 1Cisco 1Unified Presence Server Apr 29, 2026 Dec 31, 2013 N/A· v4 N/A· v3 6.5 MEDIUM· v2 SQL injection vulnerability in the web interface in Cisco Unified Presence Server allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuh35615.
CVE-2013-6981 1Cisco 1Ios Xe Apr 29, 2026 Dec 28, 2013 N/A· v4 N/A· v3 5.4 MEDIUM· v2 Cisco IOS XE 3.7S(.1) and earlier allows remote attackers to cause a denial of service (Packet Processor crash) via fragmented MPLS IP packets, aka Bug ID CSCul00709.
CVE-2013-6979 1Cisco 1Ios Xe Apr 29, 2026 Dec 23, 2013 N/A· v4 N/A· v3 5.4 MEDIUM· v2 The VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly relies on the Linux-IOS internal-network configuration, which allows remote attackers to bypass authentication by leveraging acc...Show more The VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly relies on the Linux-IOS internal-network configuration, which allows remote attackers to bypass authentication by leveraging access to a 192.168.x.2 source IP address, aka Bug ID CSCuj90227.Show less
CVE-2013-6978 1Cisco 1Unified Communications Manager Apr 29, 2026 Dec 21, 2013 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated users to obtain sensitive device information by reading "extraneous information" i...Show more The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated users to obtain sensitive device information by reading "extraneous information" in HTML source code, aka Bug ID CSCuj39249.Show less
CVE-2012-4135 1Cisco 1Nx Os Apr 29, 2026 Dec 21, 2013 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Directory traversal vulnerability in filesys in Cisco NX-OS 6.1(2) and earlier allows local users to access arbitrary files via crafted command-line arguments during a delete action, aka Bug IDs CSCty07270, CSCty07271, C...Show more Directory traversal vulnerability in filesys in Cisco NX-OS 6.1(2) and earlier allows local users to access arbitrary files via crafted command-line arguments during a delete action, aka Bug IDs CSCty07270, CSCty07271, CSCty07273, and CSCty07275.Show less
CVE-2012-4131 1Cisco 1Nx Os Apr 29, 2026 Dec 21, 2013 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Directory traversal vulnerability in tar in Cisco NX-OS allows local users to access arbitrary files via crafted command-line arguments, aka Bug IDs CSCty07157, CSCty07159, CSCty07162, and CSCty07164.
CVE-2013-6976 1Cisco 1Epc3925 Apr 29, 2026 Dec 19, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in goform/Quick_setup on Cisco EPC3925 devices allows remote attackers to hijack the authentication of administrators for requests that change a password via the Password a...Show more Cross-site request forgery (CSRF) vulnerability in goform/Quick_setup on Cisco EPC3925 devices allows remote attackers to hijack the authentication of administrators for requests that change a password via the Password and PasswordReEnter parameters, aka Bug ID CSCuh37496.Show less
CVE-2013-6701 1Cisco 8Cisco Ons 15454 System Software Ons 15454Ons 15454 Mspp+5 more Apr 29, 2026 Dec 18, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The tNetTaskLimit process on the Transport Node Controller (TNC) on Cisco ONS 15454 devices with software 9.6 and earlier does not properly prioritize health pings, which allows remote attackers to cause a denial of serv...Show more The tNetTaskLimit process on the Transport Node Controller (TNC) on Cisco ONS 15454 devices with software 9.6 and earlier does not properly prioritize health pings, which allows remote attackers to cause a denial of service (watchdog timeout and TNC reset) via a flood of network traffic, aka Bug ID CSCud97155.Show less
CVE-2013-6966 1Cisco 1Webex Training Center Apr 29, 2026 Dec 17, 2013 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul36031.
CVE-2013-6973 1Cisco 1Webex Training Center Apr 29, 2026 Dec 14, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul57121.
CVE-2013-6972 1Cisco 1Webex Training Center Apr 29, 2026 Dec 14, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance, by reading HTML source code, aka Bug ID CSCul57126.
CVE-2013-6971 1Cisco 1Webex Training Center Apr 29, 2026 Dec 14, 2013 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul57140.
CVE-2013-6970 1Cisco 1Webex Meeting Center Apr 29, 2026 Dec 14, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information by reading verbose error messages within server responses, aka Bug ID CSCul35928.
CVE-2013-6969 1Cisco 1Webex Training Center Apr 29, 2026 Dec 14, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The training-registration page in Cisco WebEx Training Center allows remote attackers to modify unspecified fields via unknown vectors, aka Bug ID CSCul35990.
CVE-2013-6968 1Cisco 1Webex Training Center Apr 29, 2026 Dec 14, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail address exists, which allows remote attackers to enumerate attendees via a series of requests, aka B...Show more Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail address exists, which allows remote attackers to enumerate attendees via a series of requests, aka Bug ID CSCul36003.Show less

Previous 1...250251252...330 Next