← Back

Cisco

cisco

6,602 CVEs • 6,224 products

Products (6,224)

Click to collapse
Toggle
Ios
ios
Ios Xe
ios_xe
Nx Os
nx_os
Ios Xr
ios_xr
Asyncos
asyncos
Asa 5500
asa_5500
Jabber
jabber

CVEs (6,602)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Cisco
2Asa Cx Context Aware Security
Prime Security Manager
Apr 29, 2026
Sep 12, 2012
N/A· v4
N/A· v3
7.8 HIGH· v2
The Cisco ASA-CX Context-Aware Security module before 9.0.2-103 for Adaptive Security Appliances (ASA) devices, and Prime Security Manager (aka PRSM) before 9.0.2-103, allows remote attackers to cause a denial of service...Show more
The Cisco ASA-CX Context-Aware Security module before 9.0.2-103 for Adaptive Security Appliances (ASA) devices, and Prime Security Manager (aka PRSM) before 9.0.2-103, allows remote attackers to cause a denial of service (disk consumption and application hang) via unspecified IPv4 packets that trigger log entries, aka Bug ID CSCub70603.Show less
1Cisco
2Jabber Extensible Communications Platform
Unified Presence
Apr 29, 2026
Sep 12, 2012
N/A· v4
N/A· v3
7.8 HIGH· v2
Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header, a...Show more
Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header, aka Bug ID CSCtu32832.Show less
1Cisco
1Ios
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cisco IOS 15.1 and 15.2, when the Multicast Music-on-Hold (MMoH) feature of Cisco Unified Communications Manager (CUCM) is enabled, allows remote attackers to obtain sensitive crosstalk information by listening during a...Show more
Cisco IOS 15.1 and 15.2, when the Multicast Music-on-Hold (MMoH) feature of Cisco Unified Communications Manager (CUCM) is enabled, allows remote attackers to obtain sensitive crosstalk information by listening during a PSTN call, aka Bug ID CSCtx77750.Show less
1Cisco
2Nexus 5000
Nx Os
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The igmp_snoop_orib_fill_source_update function in the IGMP process in NX-OS 5.0 and 5.1 on Cisco Nexus 5000 series switches allows remote attackers to cause a denial of service (device reload) via IGMP packets, aka Bug...Show more
The igmp_snoop_orib_fill_source_update function in the IGMP process in NX-OS 5.0 and 5.1 on Cisco Nexus 5000 series switches allows remote attackers to cause a denial of service (device reload) via IGMP packets, aka Bug ID CSCts46521.Show less
1Cisco
19Aironet 1040
Aironet 1140Aironet 1260+16 more
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
7.8 HIGH· v2
Cisco IOS 12.3 and 12.4 on Aironet access points allows remote attackers to cause a denial of service (radio-interface input-queue hang) via IAPP 0x3281 packets, aka Bug ID CSCtc12426.
1Cisco
1Wide Area Application Services
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco Wide Area Application Services (WAAS) appliances with software 4.4, 5.0, and 5.1 include a one-way hash of a password within output text, which might allow remote attackers to obtain sensitive information via a bru...Show more
Cisco Wide Area Application Services (WAAS) appliances with software 4.4, 5.0, and 5.1 include a one-way hash of a password within output text, which might allow remote attackers to obtain sensitive information via a brute-force attack on the hash string, aka Bug ID CSCty17279.Show less
1Cisco
1Emergency Responder
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco Emergency Responder 8.6 and 9.2 allows remote attackers to cause a denial of service (CPU consumption) by sending malformed UDP packets to the CERPT port, aka Bug ID CSCtx38369.
1Cisco
1Ios
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
3.5 LOW· v2
Cisco IOS 15.1 and 15.2, when a clientless SSL VPN is configured, allows remote authenticated users to cause a denial of service (device reload) by using a web browser to refresh the SSL VPN portal page, as demonstrated...Show more
Cisco IOS 15.1 and 15.2, when a clientless SSL VPN is configured, allows remote authenticated users to cause a denial of service (device reload) by using a web browser to refresh the SSL VPN portal page, as demonstrated by the Android browser, aka Bug ID CSCtr86328.Show less
1Cisco
1Anyconnect Secure Mobility Client
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch of IPsec, which allows man-in-the-middle attackers to spoof servers via a crafted...Show more
Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch of IPsec, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29470.Show less
1Cisco
1Anyconnect Secure Mobility Client
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
5.8 MEDIUM· v2
The IPsec implementation in Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a craft...Show more
The IPsec implementation in Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz26985.Show less
1Cisco
1Anyconnect Secure Mobility Client
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle attackers to spoof servers via a craft...Show more
Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29197.Show less
1Cisco
1Ip Communicator
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco IP Communicator 8.6 allows man-in-the-middle attackers to modify the Certificate Trust List via unspecified vectors, aka Bug ID CSCtz01471.
1Cisco
25500 Series Adaptive Security Appliance
Adaptive Security Appliance Software
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 allows remote authenticated users to cause a denial of service (memory consumption and blank response page) by usi...Show more
Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 allows remote authenticated users to cause a denial of service (memory consumption and blank response page) by using the clientless WebVPN feature, aka Bug ID CSCth34278.Show less
1Cisco
25500 Series Adaptive Security Appliance
Adaptive Security Appliance Software
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
7.8 HIGH· v2
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identical pre-allocated secondary pinholes, which might allow remote attackers to cause...Show more
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identical pre-allocated secondary pinholes, which might allow remote attackers to cause a denial of service (CPU consumption) via crafted SIP traffic, aka Bug ID CSCtz63143.Show less
1Cisco
5Nexus 7000
Nexus 7000 10 SlotNexus 7000 18 Slot+2 more
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
7.8 HIGH· v2
Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series switches, when the High Availability (HA) policy is configured for Reset, allows remote attackers to cause a denial of service (device reset) via a malformed Cisco...Show more
Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series switches, when the High Availability (HA) policy is configured for Reset, allows remote attackers to cause a denial of service (device reset) via a malformed Cisco Discovery Protocol (CDP) packet, aka Bug IDs CSCtk34535 and CSCtk19132.Show less
1Cisco
1Carrier Routing System
Apr 29, 2026
Aug 6, 2012
N/A· v4
5.8 MEDIUM· v3
5.0 MEDIUM· v2
Cisco Carrier Routing System (CRS) 3.9, 4.0, and 4.1 allows remote attackers to bypass ACL entries via fragmented packets, aka Bug ID CSCtj10975.
1Cisco
1Mds 9000 Nx Os
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Fibre Channel over IP (FCIP) implementation in Cisco MDS NX-OS 4.2 and 5.2 on MDS 9000 series switches allows remote attackers to cause a denial of service (module reload) via a crafted FCIP header, aka Bug ID CSCtn9...Show more
The Fibre Channel over IP (FCIP) implementation in Cisco MDS NX-OS 4.2 and 5.2 on MDS 9000 series switches allows remote attackers to cause a denial of service (module reload) via a crafted FCIP header, aka Bug ID CSCtn93151.Show less
1Cisco
1Unified Computing System Infrastructure And Unified Computing System Software
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Fabric Interconnect component in Cisco Unified Computing System (UCS) 2.0 allows remote attackers to cause a denial of service (process crash) via an attempted SSH session, aka Bug ID CSCtt94543.
1Cisco
9Catalyst 3560
Catalyst 3560 ECatalyst 3560 X+6 more
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
6.3 MEDIUM· v2
Cisco IOS 15.0 and 15.1 on Catalyst 3560 and 3750 series switches allows remote authenticated users to cause a denial of service (device reload) by completing local web authentication quickly, aka Bug ID CSCts88664.
1Cisco
1Anyconnect Secure Mobility Client
Apr 29, 2026
Aug 6, 2012
N/A· v4
N/A· v3
3.5 LOW· v2
Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 allows remote authenticated users to cause a denial of service (vpnagentd process crash) via a crafted packet, aka Bug ID CSCty01670.