Cisco

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-4016 1Cisco 1Ios Apr 29, 2026 May 2, 2012 N/A· v4 N/A· v3 5.4 MEDIUM· v2 The PPP implementation in Cisco IOS 12.2 and 15.0 through 15.2, when Point-to-Point Termination and Aggregation (PTA) and L2TP are used, allows remote attackers to cause a denial of service (device crash) via crafted net...Show more The PPP implementation in Cisco IOS 12.2 and 15.0 through 15.2, when Point-to-Point Termination and Aggregation (PTA) and L2TP are used, allows remote attackers to cause a denial of service (device crash) via crafted network traffic, aka Bug ID CSCtf71673.Show less
CVE-2011-4015 1Cisco 1Ios Apr 29, 2026 May 2, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco IOS 15.2S allows remote attackers to cause a denial of service (interface queue wedge) via malformed UDP traffic on port 465, aka Bug ID CSCts48300.
CVE-2011-4014 1Cisco 1Wireless Control System Software Apr 29, 2026 May 2, 2012 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The TAC Case Attachment tool in Cisco Wireless Control System (WCS) 7.0 allows remote authenticated users to read arbitrary files under webnms/Temp/ via unspecified vectors, aka Bug ID CSCtq86807.
CVE-2011-4012 1Cisco 1Ios Apr 29, 2026 May 2, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Cisco IOS 12.0, 15.0, and 15.1, when a Policy Feature Card 3C (PFC3C) is used, does not create a fragment entry during processing of an ICMPv6 ACL, which has unspecified impact and remote attack vectors, aka Bug ID CSCtj...Show more Cisco IOS 12.0, 15.0, and 15.1, when a Policy Feature Card 3C (PFC3C) is used, does not create a fragment entry during processing of an ICMPv6 ACL, which has unspecified impact and remote attack vectors, aka Bug ID CSCtj90091.Show less
CVE-2011-4007 1Cisco 2Ios Ios Xe Apr 29, 2026 May 2, 2012 N/A· v4 N/A· v3 5.4 MEDIUM· v2 Cisco IOS 15.0 and 15.1 and IOS XE 3.x do not properly handle the "set mpls experimental imposition" command, which allows remote attackers to cause a denial of service (device crash) via network traffic that triggers (1...Show more Cisco IOS 15.0 and 15.1 and IOS XE 3.x do not properly handle the "set mpls experimental imposition" command, which allows remote attackers to cause a denial of service (device crash) via network traffic that triggers (1) fragmentation or (2) reassembly, aka Bug ID CSCtr56576.Show less
CVE-2011-4006 1Cisco 25500 Series Adaptive Security Appliance Adaptive Security Appliance Software Apr 29, 2026 May 2, 2012 N/A· v4 N/A· v3 7.8 HIGH· v2 The ESMTP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.5 allows remote attackers to cause a denial of service (CPU consumption) via an unspecified closing...Show more The ESMTP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.5 allows remote attackers to cause a denial of service (CPU consumption) via an unspecified closing sequence, aka Bug ID CSCtt32565.Show less
CVE-2011-3317 1Cisco 1Secure Access Control Server Apr 29, 2026 May 2, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID...Show more Multiple cross-site scripting (XSS) vulnerabilities in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCtr78192.Show less
CVE-2011-3309 1Cisco 25500 Series Adaptive Security Appliance Adaptive Security Appliance Software Apr 29, 2026 May 2, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 process IKE requests despite a vpnclient mode configuration, which allows remote attackers to obtain potentially sensitive inform...Show more Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 process IKE requests despite a vpnclient mode configuration, which allows remote attackers to obtain potentially sensitive information by reading IKE responder traffic, aka Bug ID CSCtt07749.Show less
CVE-2011-3295 1Cisco 1Ios Xr Apr 29, 2026 May 2, 2012 N/A· v4 N/A· v3 7.8 HIGH· v2 The NETIO and IPV4_IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service (CPU consumption) via crafted network traff...Show more The NETIO and IPV4_IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service (CPU consumption) via crafted network traffic, aka Bug ID CSCti59888.Show less
CVE-2011-3293 1Cisco 1Secure Access Control Server Apr 29, 2026 May 2, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple cross-site request forgery (CSRF) vulnerabilities in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.2 allow remote attackers to hijack the authentication of administrators for requests that in...Show more Multiple cross-site request forgery (CSRF) vulnerabilities in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.2 allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences, aka Bug ID CSCtr78143.Show less
CVE-2011-3289 1Cisco 1Ios Apr 29, 2026 May 2, 2012 N/A· v4 N/A· v3 3.6 LOW· v2 Cisco IOS 12.4 and 15.0 through 15.2 allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the start-up configuration via unspecified vectors, aka Bug ID CSCtr97640.
CVE-2011-3285 1Cisco 25500 Series Adaptive Security Appliance Adaptive Security Appliance Software Apr 29, 2026 May 2, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 CRLF injection vulnerability in /+CSCOE+/logon.html on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 through 8.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP...Show more CRLF injection vulnerability in /+CSCOE+/logon.html on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 through 8.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors, aka Bug ID CSCth63101.Show less
CVE-2011-3283 1Cisco 1Carrier Routing System Apr 29, 2026 May 2, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco Carrier Routing System 3.9.1 allows remote attackers to cause a denial of service (Metro subsystem crash) via a fragmented GRE packet, aka Bug ID CSCts14887.
CVE-2011-2586 1Cisco 1Ios Apr 29, 2026 May 2, 2012 N/A· v4 N/A· v3 5.4 MEDIUM· v2 The HTTP client in Cisco IOS 12.4 and 15.0 allows user-assisted remote attackers to cause a denial of service (device crash) via a malformed HTTP response to a request for service installation, aka Bug ID CSCts12249.
CVE-2011-2583 1Cisco 1Unified Contact Center Express Apr 29, 2026 May 2, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco Unified Contact Center Express (aka CCX) 8.0 and 8.5 allows remote attackers to cause a denial of service via network traffic, as demonstrated by an SEC-BE-STABLE test case, aka Bug ID CSCth33834.
CVE-2011-2578 1Cisco 1Ios Apr 29, 2026 May 2, 2012 N/A· v4 N/A· v3 7.8 HIGH· v2 Memory leak in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service (memory consumption) via malformed SIP packets on a NAT interface, aka Bug ID CSCts12366.
CVE-2012-1337 1Cisco 1Webex Recording Format Player Apr 29, 2026 Apr 5, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code vi...Show more Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code via a crafted WRF file, a different vulnerability than CVE-2012-1335 and CVE-2012-1336.Show less
CVE-2012-1336 1Cisco 1Webex Recording Format Player Apr 29, 2026 Apr 5, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code vi...Show more Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code via a crafted WRF file, a different vulnerability than CVE-2012-1335 and CVE-2012-1337.Show less
CVE-2012-1335 1Cisco 1Webex Recording Format Player Apr 29, 2026 Apr 5, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code vi...Show more Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP10, and T27 LD before SP32 CP1 allows remote attackers to execute arbitrary code via a crafted WRF file, a different vulnerability than CVE-2012-1336 and CVE-2012-1337.Show less
CVE-2012-1315 1Cisco 1Ios Apr 29, 2026 Mar 29, 2012 N/A· v4 N/A· v3 7.8 HIGH· v2 Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit...Show more Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted transit SIP traffic, aka Bug ID CSCti46171.Show less

Previous 1...278279280...331 Next