Cisco
cisco
6,669 CVEs • 6,229 products
Products (6,229)
Click to collapseToggle
Products (6,229)
Click to collapse
CVEs (6,669)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Cisco Unity Connection (UC) 7.1, 8.0, and 8.5 allows remote authenticated users to cause a denial of service (resource consumption and administration outage) via extended use of the product, aka Bug ID CSCtd79132. |
1Cisco 1Anyconnect Secure Mobility Client Apr 29, 2026 Sep 16, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The VPN downloader in the download_install component in Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495 on Linux accepts arbitrary X.509 server certificates without user interaction, which allows remote at...Show more |
1Cisco 1Anyconnect Secure Mobility Client Apr 29, 2026 Sep 16, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSafe headers, which allows remote attackers to have an unspecified impact via a cr...Show more |
Cisco IOS 12.2 allows remote attackers to cause a denial of service (CPU consumption) by establishing many IPv6 neighbors, aka Bug ID CSCtn78957. |
Cisco Unity Connection (UC) 8.6, 9.0, and 9.5 allows remote attackers to cause a denial of service (CPU consumption) via malformed UDP packets, aka Bug ID CSCtz76269. |
Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747. |
1Cisco 5Nexus 7000 Nexus 7000 10 SlotNexus 7000 18 Slot+2 moreApr 29, 2026 Sep 16, 2012 N/A· v4 N/A· v3 6.1 MEDIUM· v2 Cisco NX-OS 5.2 and 6.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service (process crash or packet loss) via a large number of ARP packets, aka Bug ID CSCtr44822. |
1Cisco 2Asa Cx Context Aware Security Prime Security ManagerApr 29, 2026 Sep 12, 2012 N/A· v4 N/A· v3 7.8 HIGH· v2 The Cisco ASA-CX Context-Aware Security module before 9.0.2-103 for Adaptive Security Appliances (ASA) devices, and Prime Security Manager (aka PRSM) before 9.0.2-103, allows remote attackers to cause a denial of service...Show more |
1Cisco 2Jabber Extensible Communications Platform Unified PresenceApr 29, 2026 Sep 12, 2012 N/A· v4 N/A· v3 7.8 HIGH· v2 Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header, a...Show more |
Cisco IOS 15.1 and 15.2, when the Multicast Music-on-Hold (MMoH) feature of Cisco Unified Communications Manager (CUCM) is enabled, allows remote attackers to obtain sensitive crosstalk information by listening during a...Show more |
The igmp_snoop_orib_fill_source_update function in the IGMP process in NX-OS 5.0 and 5.1 on Cisco Nexus 5000 series switches allows remote attackers to cause a denial of service (device reload) via IGMP packets, aka Bug...Show more |
1Cisco 19Aironet 1040 Aironet 1140Aironet 1260+16 moreApr 29, 2026 Aug 6, 2012 N/A· v4 N/A· v3 7.8 HIGH· v2 Cisco IOS 12.3 and 12.4 on Aironet access points allows remote attackers to cause a denial of service (radio-interface input-queue hang) via IAPP 0x3281 packets, aka Bug ID CSCtc12426. |
1Cisco 1Wide Area Application Services Apr 29, 2026 Aug 6, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco Wide Area Application Services (WAAS) appliances with software 4.4, 5.0, and 5.1 include a one-way hash of a password within output text, which might allow remote attackers to obtain sensitive information via a bru...Show more |
Cisco Emergency Responder 8.6 and 9.2 allows remote attackers to cause a denial of service (CPU consumption) by sending malformed UDP packets to the CERPT port, aka Bug ID CSCtx38369. |
Cisco IOS 15.1 and 15.2, when a clientless SSL VPN is configured, allows remote authenticated users to cause a denial of service (device reload) by using a web browser to refresh the SSL VPN portal page, as demonstrated...Show more |
1Cisco 1Anyconnect Secure Mobility Client Apr 29, 2026 Aug 6, 2012 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch of IPsec, which allows man-in-the-middle attackers to spoof servers via a crafted...Show more |
1Cisco 1Anyconnect Secure Mobility Client Apr 29, 2026 Aug 6, 2012 N/A· v4 N/A· v3 5.8 MEDIUM· v2 The IPsec implementation in Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a craft...Show more |
1Cisco 1Anyconnect Secure Mobility Client Apr 29, 2026 Aug 6, 2012 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle attackers to spoof servers via a craft...Show more |
Cisco IP Communicator 8.6 allows man-in-the-middle attackers to modify the Certificate Trust List via unspecified vectors, aka Bug ID CSCtz01471. |
1Cisco 25500 Series Adaptive Security Appliance Adaptive Security Appliance SoftwareApr 29, 2026 Aug 6, 2012 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 allows remote authenticated users to cause a denial of service (memory consumption and blank response page) by usi...Show more |