Cisco

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-4655 1Cisco 1Secure Desktop Apr 29, 2026 Sep 24, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving...Show more The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSCtz76128 and CSCtz78204.Show less
CVE-2012-3924 1Cisco 1Ios Apr 29, 2026 Sep 16, 2012 N/A· v4 N/A· v3 3.5 LOW· v2 The SSLVPN implementation in Cisco IOS 15.1 and 15.2, when DTLS is enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service (device crash...Show more The SSLVPN implementation in Cisco IOS 15.1 and 15.2, when DTLS is enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service (device crash) via a session involving a PPP over ATM (PPPoA) interface, aka Bug ID CSCty97961.Show less
CVE-2012-3923 1Cisco 1Ios Apr 29, 2026 Sep 16, 2012 N/A· v4 N/A· v3 3.5 LOW· v2 The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of serv...Show more The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service (device crash) via a session involving a PPP over ATM (PPPoA) interface, aka Bug ID CSCte41827.Show less
CVE-2012-3919 1Cisco 1Application Control Engine Module Apr 29, 2026 Sep 16, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Cisco Application Control Engine (ACE) module 3.0 for Cisco Catalyst switches and Cisco routers does not properly monitor Load Balancer (LB) queues, which allows remote attackers to cause a denial of service (incorre...Show more The Cisco Application Control Engine (ACE) module 3.0 for Cisco Catalyst switches and Cisco routers does not properly monitor Load Balancer (LB) queues, which allows remote attackers to cause a denial of service (incorrect memory access and module reboot) via application traffic, aka Bug ID CSCtw70879.Show less
CVE-2012-3915 1Cisco 1Ios Apr 29, 2026 Sep 16, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The DMVPN tunnel implementation in Cisco IOS 15.2 allows remote attackers to cause a denial of service (persistent IKE state) via a large volume of hub-to-spoke traffic, aka Bug ID CSCtq39602.
CVE-2012-3908 1Cisco 2Identity Services Engine Identity Services Engine Software Apr 29, 2026 Sep 16, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple cross-site request forgery (CSRF) vulnerabilities in the ISE Administrator user interface (aka the Apache Tomcat interface) on Cisco Identity Services Engine (ISE) 3300 series appliances before 1.1.0.665 Cumulat...Show more Multiple cross-site request forgery (CSRF) vulnerabilities in the ISE Administrator user interface (aka the Apache Tomcat interface) on Cisco Identity Services Engine (ISE) 3300 series appliances before 1.1.0.665 Cumulative Patch 1 allow remote attackers to hijack the authentication of administrators, aka Bug ID CSCty46684.Show less
CVE-2012-3901 1Cisco 6Intrusion Prevention System Ips 4240Ips 4250 Sx+3 more Apr 29, 2026 Sep 16, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The updateTime function in sensorApp on Cisco IPS 4200 series sensors 7.0 and 7.1 allows remote attackers to cause a denial of service (process crash and traffic-inspection outage) via network traffic, aka Bug ID CSCta96...Show more The updateTime function in sensorApp on Cisco IPS 4200 series sensors 7.0 and 7.1 allows remote attackers to cause a denial of service (process crash and traffic-inspection outage) via network traffic, aka Bug ID CSCta96144.Show less
CVE-2012-3899 1Cisco 6Intrusion Prevention System Ips 4240Ips 4250 Sx+3 more Apr 29, 2026 Sep 16, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and process crash, and traffic-inspection outa...Show more sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and process crash, and traffic-inspection outage) via network traffic, aka Bug ID CSCtn23051.Show less
CVE-2012-3895 1Cisco 1Ios Apr 29, 2026 Sep 16, 2012 N/A· v4 N/A· v3 6.3 MEDIUM· v2 Cisco IOS 15.0 through 15.3 allows remote authenticated users to cause a denial of service (device crash) via an MVPNv6 update, aka Bug ID CSCty89224.
CVE-2012-3893 1Cisco 1Ios Apr 29, 2026 Sep 16, 2012 N/A· v4 N/A· v3 6.3 MEDIUM· v2 The FlexVPN implementation in Cisco IOS 15.2 and 15.3 allows remote authenticated users to cause a denial of service (spoke crash) via spoke-to-spoke traffic, aka Bug ID CSCtz02622.
CVE-2012-3096 1Cisco 1Unity Connection Apr 29, 2026 Sep 16, 2012 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Cisco Unity Connection (UC) 7.1, 8.0, and 8.5 allows remote authenticated users to cause a denial of service (resource consumption and administration outage) via extended use of the product, aka Bug ID CSCtd79132.
CVE-2012-3094 1Cisco 1Anyconnect Secure Mobility Client Apr 29, 2026 Sep 16, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The VPN downloader in the download_install component in Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495 on Linux accepts arbitrary X.509 server certificates without user interaction, which allows remote at...Show more The VPN downloader in the download_install component in Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495 on Linux accepts arbitrary X.509 server certificates without user interaction, which allows remote attackers to obtain sensitive information via vectors involving an invalid certificate, aka Bug ID CSCua11967.Show less
CVE-2012-3088 1Cisco 1Anyconnect Secure Mobility Client Apr 29, 2026 Sep 16, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe headers, which allows remote attackers to have an unspecified impact via a cr...Show more Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe headers, which allows remote attackers to have an unspecified impact via a crafted request, aka Bug ID CSCua13166.Show less
CVE-2012-3079 1Cisco 1Ios Apr 29, 2026 Sep 16, 2012 N/A· v4 N/A· v3 7.8 HIGH· v2 Cisco IOS 12.2 allows remote attackers to cause a denial of service (CPU consumption) by establishing many IPv6 neighbors, aka Bug ID CSCtn78957.
CVE-2012-3060 1Cisco 1Unity Connection Apr 29, 2026 Sep 16, 2012 N/A· v4 N/A· v3 7.8 HIGH· v2 Cisco Unity Connection (UC) 8.6, 9.0, and 9.5 allows remote attackers to cause a denial of service (CPU consumption) via malformed UDP packets, aka Bug ID CSCtz76269.
CVE-2012-3052 1Cisco 1Vpn Client Apr 29, 2026 Sep 16, 2012 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747.
CVE-2012-3051 1Cisco 5Nexus 7000 Nexus 7000 10 SlotNexus 7000 18 Slot+2 more Apr 29, 2026 Sep 16, 2012 N/A· v4 N/A· v3 6.1 MEDIUM· v2 Cisco NX-OS 5.2 and 6.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service (process crash or packet loss) via a large number of ARP packets, aka Bug ID CSCtr44822.
CVE-2012-4629 1Cisco 2Asa Cx Context Aware Security Prime Security Manager Apr 29, 2026 Sep 12, 2012 N/A· v4 N/A· v3 7.8 HIGH· v2 The Cisco ASA-CX Context-Aware Security module before 9.0.2-103 for Adaptive Security Appliances (ASA) devices, and Prime Security Manager (aka PRSM) before 9.0.2-103, allows remote attackers to cause a denial of service...Show more The Cisco ASA-CX Context-Aware Security module before 9.0.2-103 for Adaptive Security Appliances (ASA) devices, and Prime Security Manager (aka PRSM) before 9.0.2-103, allows remote attackers to cause a denial of service (disk consumption and application hang) via unspecified IPv4 packets that trigger log entries, aka Bug ID CSCub70603.Show less
CVE-2012-3935 1Cisco 2Jabber Extensible Communications Platform Unified Presence Apr 29, 2026 Sep 12, 2012 N/A· v4 N/A· v3 7.8 HIGH· v2 Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header, a...Show more Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header, aka Bug ID CSCtu32832.Show less
CVE-2012-1361 1Cisco 1Ios Apr 29, 2026 Aug 6, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cisco IOS 15.1 and 15.2, when the Multicast Music-on-Hold (MMoH) feature of Cisco Unified Communications Manager (CUCM) is enabled, allows remote attackers to obtain sensitive crosstalk information by listening during a...Show more Cisco IOS 15.1 and 15.2, when the Multicast Music-on-Hold (MMoH) feature of Cisco Unified Communications Manager (CUCM) is enabled, allows remote attackers to obtain sensitive crosstalk information by listening during a PSTN call, aka Bug ID CSCtx77750.Show less

Previous 1...274275276...330 Next