Cisco

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2013-5519 1Cisco 1Wireless Lan Controller Apr 29, 2026 Oct 3, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the management interface on Cisco Wireless LAN Controller (WLC) devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuf77810.
CVE-2012-4136 1Cisco 1Unified Computing System Apr 29, 2026 Oct 3, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The high-availability service in the Fabric Interconnect component in Cisco Unified Computing System (UCS) does not properly bind the cluster service to the management interface, which allows remote attackers to obtain s...Show more The high-availability service in the Fabric Interconnect component in Cisco Unified Computing System (UCS) does not properly bind the cluster service to the management interface, which allows remote attackers to obtain sensitive information or cause a denial of service (peer-syncing outage) via a TELNET connection, aka Bug ID CSCtz72910.Show less
CVE-2013-5517 1Cisco 1Unified Communications Domain Manager Apr 29, 2026 Oct 2, 2013 N/A· v4 N/A· v3 5.5 MEDIUM· v2 SQL injection vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuh96567.
CVE-2013-5503 1Cisco 1Ios Xr Apr 29, 2026 Oct 2, 2013 N/A· v4 N/A· v3 7.8 HIGH· v2 The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause a denial of service (memory consumption) via UDP packets to listening ports, aka...Show more The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause a denial of service (memory consumption) via UDP packets to listening ports, aka Bug ID CSCue69413.Show less
CVE-2012-4111 1Cisco 1Unified Computing System Apr 29, 2026 Oct 2, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The create certreq command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq86563.
CVE-2012-4110 1Cisco 1Unified Computing System Apr 29, 2026 Oct 2, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 run-script in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq86560.
CVE-2012-4109 1Cisco 1Unified Computing System Apr 29, 2026 Oct 2, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The clear sshkey command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq86559.
CVE-2012-4104 1Cisco 1Unified Computing System Apr 29, 2026 Oct 2, 2013 N/A· v4 N/A· v3 6.6 MEDIUM· v2 Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to overwrite or delete arbitrary files via a full pathna...Show more Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to overwrite or delete arbitrary files via a full pathname in an image header, aka Bug ID CSCtq02706.Show less
CVE-2012-4103 1Cisco 1Unified Computing System Apr 29, 2026 Oct 2, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 ethanalyzer in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq02686.
CVE-2012-4102 1Cisco 1Unified Computing System Apr 29, 2026 Oct 2, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The activate firmware command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq02600.
CVE-2012-4095 1Cisco 1Unified Computing System Apr 29, 2026 Oct 2, 2013 N/A· v4 N/A· v3 5.5 MEDIUM· v2 The local file editor in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges, and read or modify arbitrary files, via unspecified key bindings, aka Bug ID CSCtn...Show more The local file editor in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges, and read or modify arbitrary files, via unspecified key bindings, aka Bug ID CSCtn04521.Show less
CVE-2013-5516 1Cisco 1Telepresence Multipoint Switch Apr 29, 2026 Oct 1, 2013 N/A· v4 N/A· v3 6.3 MEDIUM· v2 The Media Snapshot implementation on Cisco TelePresence Multipoint Switch (CTMS) devices allows remote authenticated users to cause a denial of service (device reload) by sending many Media Snapshot requests at the time...Show more The Media Snapshot implementation on Cisco TelePresence Multipoint Switch (CTMS) devices allows remote authenticated users to cause a denial of service (device reload) by sending many Media Snapshot requests at the time of a meeting termination, aka Bug ID CSCuh44796.Show less
CVE-2012-4096 1Cisco 1Unified Computing System Apr 29, 2026 Oct 1, 2013 N/A· v4 N/A· v3 6.2 MEDIUM· v2 The local file editor in the Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local users to gain privileges and modify arbitrary fabric-interconnect files, in the context of a vi proc...Show more The local file editor in the Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local users to gain privileges and modify arbitrary fabric-interconnect files, in the context of a vi process, via unspecified commands, aka Bug ID CSCtn06574.Show less
CVE-2013-5505 1Cisco 1Identity Services Engine Software Apr 29, 2026 Sep 30, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in an administration page in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui3027...Show more Cross-site scripting (XSS) vulnerability in an administration page in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30275.Show less
CVE-2013-5504 1Cisco 1Identity Services Engine Software Apr 29, 2026 Sep 30, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the Mobile Device Management (MDM) portal in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, a...Show more Cross-site scripting (XSS) vulnerability in the Mobile Device Management (MDM) portal in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30266.Show less
CVE-2013-3417 1Cisco 1Video Surveillance Operations Manager Apr 29, 2026 Sep 30, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The administrative web interface in Cisco Video Surveillance Operations Manager does not properly perform authentication, which allows remote attackers to watch video feeds via a crafted URL, aka Bug ID CSCtg72262.
CVE-2013-5498 1Cisco 1Ios Xr Apr 29, 2026 Sep 27, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The PPTP-ALG component in CRS Carrier Grade Services Engine (CGSE) and ASR 9000 Integrated Service Module (ISM) in Cisco IOS XR allows remote attackers to cause a denial of service (module reset) via crafted packet strea...Show more The PPTP-ALG component in CRS Carrier Grade Services Engine (CGSE) and ASR 9000 Integrated Service Module (ISM) in Cisco IOS XR allows remote attackers to cause a denial of service (module reset) via crafted packet streams, aka Bug ID CSCue91963.Show less
CVE-2012-1313 1Cisco 1Unified Computing System Apr 29, 2026 Sep 27, 2013 N/A· v4 N/A· v3 6.5 MEDIUM· v2 The remote debug shell on the PALO adapter card in Cisco Unified Computing System (UCS) allows local users to gain privileges via malformed show-macstats parameters, aka Bug ID CSCub13772.
CVE-2013-5481 1Cisco 1Ios Apr 29, 2026 Sep 27, 2013 N/A· v4 N/A· v3 7.1 HIGH· v2 The PPTP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service (device reload) via crafted TCP port-1723 packets, aka Bug ID CSCtq14817.
CVE-2013-5480 1Cisco 1Ios Apr 29, 2026 Sep 27, 2013 N/A· v4 N/A· v3 7.8 HIGH· v2 The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service (device reload) via a crafted IPv4 DNS TCP stream, aka Bug ID CSCuf28733.

Previous 1...257258259...330 Next