← Back

Cisco

cisco

6,588 CVEs • 6,222 products

Products (6,222)

Click to collapse
Toggle
Ios
ios
Ios Xe
ios_xe
Nx Os
nx_os
Ios Xr
ios_xr
Asyncos
asyncos
Asa 5500
asa_5500
Jabber
jabber

CVEs (6,588)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Cisco
1Ios
Apr 16, 2026
Aug 27, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The web server for Cisco Aironet AP1x00 Series Wireless devices running certain versions of IOS 12.2 allow remote attackers to cause a denial of service (reload) via a malformed URL.
1Cisco
3Ios
Ons 15454 Optical Transport PlatformOptical Networking Systems Software
Apr 16, 2026
Aug 18, 2003
N/A· v4
N/A· v3
7.8 HIGH· v2
Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that in...Show more
Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that interface to be marked as full.Show less
1Cisco
1Ios
Apr 16, 2026
Jun 9, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Service Assurance Agent (SAA) in Cisco IOS 12.0 through 12.2, aka Response Time Reporter (RTR), allows remote attackers to cause a denial of service (crash) via malformed RTR packets to port 1967.
1Cisco
6Vpn 3000 Concentrator Series Software
Vpn 3002 Hardware ClientVpn 3015 Concentrator+3 more
Apr 16, 2026
May 27, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7A allow remote attackers to cause a denial of service (slowdown and possibly reload) via a flood of malformed ICMP packets.
1Cisco
6Vpn 3000 Concentrator Series Software
Vpn 3002 Hardware ClientVpn 3015 Concentrator+3 more
Apr 16, 2026
May 27, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7 allows remote attackers to cause a denial of service (reload) via a malformed SSH initialization packet.
1Cisco
7Vpn 3000 Concentrator Series Software
Vpn 3002 Hardware ClientVpn 3005 Concentrator Software+4 more
Apr 16, 2026
May 27, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authe...Show more
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port on the concentrator, allow remote attackers to reach the private network without authentication.Show less
1Cisco
1Catos
Apr 16, 2026
May 12, 2003
N/A· v4
N/A· v3
9.3 HIGH· v2
Unknown vulnerability in Cisco Catalyst 7.5(1) allows local users to bypass authentication and gain access to the enable mode without a password.
1Cisco
1Secure Access Control Server
Apr 16, 2026
May 12, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS before 3.1.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long user parameter to port 2002.
1Cisco
1Vpn 5000 Client
Apr 16, 2026
Apr 2, 2003
N/A· v4
N/A· v3
7.2 HIGH· v2
Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, allow local users to gain root privileges via (1) close_tunnel and (2) open_tunnel.
1Cisco
1Vpn 5000 Client
Apr 16, 2026
Apr 2, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving "Default Connection" settings, which could allow local users to gain privileges.
1Cisco
1Optical Networking Systems Software
Apr 16, 2026
Mar 31, 2003
N/A· v4
N/A· v3
10.0 HIGH· v2
Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connect...Show more
Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet.Show less
1Cisco
1Optical Networking Systems Software
Apr 16, 2026
Mar 31, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset to TCC, TCC+, TCCi or XTC) via a malformed HTTP request that does not contain a leading / (slash) character.
1Cisco
1Optical Networking Systems Software
Apr 16, 2026
Mar 31, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset) via an HTTP request to the TCC, TCC+ or XTC, in which the request contains an invalid CORBA Interoperable Object Re...Show more
Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset) via an HTTP request to the TCC, TCC+ or XTC, in which the request contains an invalid CORBA Interoperable Object Reference (IOR).Show less
1Cisco
1Optical Networking Systems Software
Apr 16, 2026
Mar 31, 2003
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco ONS15454 and ONS15327 running ONS before 3.4 uses a "public" SNMP community string that cannot be changed, which allows remote attackers to obtain sensitive information.
1Cisco
1Optical Networking Systems Software
Apr 16, 2026
Mar 31, 2003
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords fro...Show more
Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup.Show less
1Cisco
1Optical Networking Systems Software
Apr 16, 2026
Mar 31, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
Cisco ONS15454 and ONS15327 running ONS before 3.4 allows remote attackers to modify the system configuration and delete files by establishing an FTP connection to the TCC, TCC+ or XTC using a username and password that...Show more
Cisco ONS15454 and ONS15327 running ONS before 3.4 allows remote attackers to modify the system configuration and delete files by establishing an FTP connection to the TCC, TCC+ or XTC using a username and password that does not exist.Show less
1Cisco
1Ios
Apr 16, 2026
Mar 3, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in Cisco IOS 11.2.x to 12.0.x allows remote attackers to cause a denial of service and possibly execute commands via a large number of OSPF neighbor announcements.
1Cisco
1As5350
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
7.8 HIGH· v2
Cisco AS5350 IOS 12.2(11)T with access control lists (ACLs) applied and possibly with ssh running allows remote attackers to cause a denial of service (crash) via a port scan, possibly due to an ssh bug. NOTE: this issue...Show more
Cisco AS5350 IOS 12.2(11)T with access control lists (ACLs) applied and possibly with ssh running allows remote attackers to cause a denial of service (crash) via a port scan, possibly due to an ssh bug. NOTE: this issue could not be reproduced by the vendorShow less
1Cisco
1Catos
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switch and allows remote a...Show more
Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switch and allows remote attackers to obtain sensitive network information by sniffing.Show less
1Cisco
1Ios
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
7.8 HIGH· v2
Cisco IOS 11.2.x and 12.0.x does not limit the size of its redirect table, which allows remote attackers to cause a denial of service (memory consumption) via spoofed ICMP redirect packets to the router.