Cisco
Page 34 of 69 — Cisco CVEs from a corpus of 6881, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-0411 | Medium | 6.1 | 2018-08-01 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a refl… |
CVE-2018-0408 | Medium | 5.4 | 2018-08-01 | A vulnerability in the web-based management interface of Cisco Small Business 300 Series (Sx300) Managed Switches could allow an authenticated, remote attacker… |
CVE-2018-0407 | Medium | 5.4 | 2018-08-01 | A vulnerability in the web-based management interface of Cisco Small Business 300 Series (Sx300) Managed Switches could allow an authenticated, remote attacker… |
CVE-2018-0406 | Medium | 6.1 | 2018-08-01 | A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflec… |
CVE-2018-0397 | Medium | 5.9 | 2018-08-01 | A vulnerability in Cisco AMP for Endpoints Mac Connector Software installed on Apple macOS 10.12 could allow an unauthenticated, remote attacker to cause a ker… |
CVE-2018-0391 | Medium | 6.5 | 2018-08-01 | A vulnerability in the password change function of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to cause the system to… |
CVE-2018-0403 | Critical | 9.8 | 2018-07-18 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote att… |
CVE-2018-0402 | High | 8.8 | 2018-07-18 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote att… |
CVE-2018-0401 | Medium | 6.1 | 2018-07-18 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote att… |
CVE-2018-0400 | Medium | 6.1 | 2018-07-18 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote att… |
CVE-2018-0399 | Critical | 9.8 | 2018-07-18 | Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to retrieve a cleartext passwor… |
CVE-2018-0398 | Critical | 9.8 | 2018-07-18 | Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a server-side reques… |
CVE-2018-0396 | Medium | 6.1 | 2018-07-18 | A vulnerability in the web framework of the Cisco Unified Communications Manager IM and Presence Service software could allow an authenticated, remote attacker… |
CVE-2018-0394 | High | 8.8 | 2018-07-18 | A vulnerability in the web upload function of Cisco Cloud Services Platform 2100 could allow an authenticated, remote attacker to obtain restricted shell acces… |
CVE-2018-0393 | Medium | 6.5 | 2018-07-18 | A Read-Only User Effect Change vulnerability in the Policy Builder interface of Cisco Policy Suite could allow an authenticated, remote attacker to make policy… |
CVE-2018-0392 | Medium | 5.5 | 2018-07-18 | A vulnerability in the CLI of Cisco Policy Suite could allow an authenticated, local attacker to access files owned by another user. The vulnerability is due t… |
CVE-2018-0390 | Medium | 6.1 | 2018-07-18 | A vulnerability in the web framework of Cisco Webex could allow an unauthenticated, remote attacker to conduct a Document Object Model-based (DOM-based) cross-… |
CVE-2018-0387 | High | 8.8 | 2018-07-18 | A vulnerability in Cisco Webex Teams (for Windows and macOS) could allow an unauthenticated, remote attacker to execute arbitrary code on the user's device, po… |
CVE-2018-0380 | Medium | 5.5 | 2018-07-18 | Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attac… |
CVE-2018-0379 | High | 7.8 | 2018-07-18 | Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Format (ARF) and Webex Recording Format (WRF) files. An attac… |
CVE-2018-0377 | Critical | 9.8 | 2018-07-18 | A vulnerability in the Open Systems Gateway initiative (OSGi) interface of Cisco Policy Suite before 18.1.0 could allow an unauthenticated, remote attacker to… |
CVE-2018-0376 | Critical | 9.8 | 2018-07-18 | A vulnerability in the Policy Builder interface of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to access the Policy Builde… |
CVE-2018-0375 | Critical | 9.8 | 2018-07-18 | A vulnerability in the Cluster Manager of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to log in to an affected system usin… |
CVE-2018-0374 | Critical | 9.8 | 2018-07-18 | A vulnerability in the Policy Builder database of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to connect directly to the P… |
CVE-2018-0372 | High | 7.5 | 2018-07-18 | A vulnerability in the DHCPv6 feature of the Cisco Nexus 9000 Series Fabric Switches in Application-Centric Infrastructure (ACI) Mode could allow an unauthenti… |
CVE-2018-0351 | High | 7.8 | 2018-07-18 | A vulnerability in the command-line tcpdump utility in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that… |
CVE-2018-0350 | High | 8.8 | 2018-07-18 | A vulnerability in the VPN subsystem configuration in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that… |
CVE-2018-0349 | Critical | 9.8 | 2018-07-18 | A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of a… |
CVE-2018-0348 | High | 7.2 | 2018-07-18 | A vulnerability in the CLI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root… |
CVE-2018-0347 | High | 7.8 | 2018-07-18 | A vulnerability in the Zero Touch Provisioning (ZTP) subsystem of the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary co… |
CVE-2018-0346 | High | 7.5 | 2018-07-18 | A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of servic… |
CVE-2018-0345 | High | 8.8 | 2018-07-18 | A vulnerability in the configuration and management database of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to execute arbitrary co… |
CVE-2018-0344 | High | 7.2 | 2018-07-18 | A vulnerability in the vManage dashboard for the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacke… |
CVE-2018-0343 | High | 8.8 | 2018-07-18 | A vulnerability in the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to execute arbitrary cod… |
CVE-2018-0342 | Medium | 6.7 | 2018-07-18 | A vulnerability in the configuration and monitoring service of the Cisco SD-WAN Solution could allow an authenticated, local attacker to execute arbitrary code… |
CVE-2018-0385 | High | 7.5 | 2018-07-16 | A vulnerability in the detection engine parsing of Security Socket Layer (SSL) protocol packets for Cisco Firepower System Software could allow an unauthentica… |
CVE-2018-0384 | Medium | 5.8 | 2018-07-16 | A vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass a URL-based access control… |
CVE-2018-0383 | High | 8.6 | 2018-07-16 | A vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass a file policy that is conf… |
CVE-2018-0370 | High | 7.5 | 2018-07-16 | A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause one of the detection engine… |
CVE-2018-0369 | High | 8.6 | 2018-07-16 | A vulnerability in the reassembly logic for fragmented IPv4 packets of Cisco StarOS running on virtual platforms could allow an unauthenticated, remote attacke… |
CVE-2018-0368 | High | 7.8 | 2018-07-16 | A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an authenticated, local attacker to access sensitive information on an affected… |
CVE-2018-0366 | Medium | 6.1 | 2018-07-16 | A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a reflec… |
CVE-2018-0341 | High | 8.8 | 2018-07-16 | A vulnerability in the web-based UI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware before 11.2(1) could allow an authenticated, remo… |
CVE-2018-0373 | Medium | 5.5 | 2018-06-21 | A vulnerability in vpnva-6.sys for 32-bit Windows and vpnva64-6.sys for 64-bit Windows of Cisco AnyConnect Secure Mobility Client for Windows Desktop could all… |
CVE-2018-0371 | Medium | 6.5 | 2018-06-21 | A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of service (DoS) condition… |
CVE-2018-0365 | High | 8.8 | 2018-06-21 | A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a cross-s… |
CVE-2018-0364 | High | 8.8 | 2018-06-21 | A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to conduct… |
CVE-2018-0363 | High | 8.8 | 2018-06-21 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service (formerly CUPS) could allow an unauthentica… |
CVE-2018-0362 | Medium | 4.3 | 2018-06-21 | A vulnerability in BIOS authentication management of Cisco 5000 Series Enterprise Network Compute System and Cisco Unified Computing (UCS) E-Series Servers cou… |
CVE-2018-0359 | Medium | 5.5 | 2018-06-21 | A vulnerability in the session identification management functionality of the web-based management interface for Cisco Meeting Server could allow an unauthenti… |
CVE-2018-0358 | High | 7.5 | 2018-06-21 | A vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server (VCS) Expressway could allow an unauthenticated, remote attack… |
CVE-2018-0337 | High | 7.8 | 2018-06-21 | A vulnerability in the role-based access-checking mechanisms of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands… |
CVE-2018-0331 | Medium | 6.5 | 2018-06-21 | A vulnerability in the Cisco Discovery Protocol (formerly known as CDP) subsystem of devices running, or based on, Cisco NX-OS Software contain a vulnerability… |
CVE-2018-0313 | High | 8.8 | 2018-06-21 | A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to send a malicious packet to the management interf… |
CVE-2018-0311 | High | 7.5 | 2018-06-21 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause… |
CVE-2018-0310 | Critical | 9.8 | 2018-06-21 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to obtai… |
CVE-2018-0309 | High | 7.7 | 2018-06-21 | A vulnerability in the implementation of a specific CLI command and the associated Simple Network Management Protocol (SNMP) MIB for Cisco NX-OS (in standalone… |
CVE-2018-0306 | High | 7.8 | 2018-06-21 | A vulnerability in the CLI parser of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-injection attack on an affected dev… |
CVE-2018-0305 | High | 8.6 | 2018-06-21 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause… |
CVE-2018-0303 | High | 8.8 | 2018-06-21 | A vulnerability in the Cisco Discovery Protocol component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to… |
CVE-2018-0302 | High | 7.8 | 2018-06-21 | A vulnerability in the CLI parser of Cisco FXOS Software and Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to cause a buf… |
CVE-2018-0300 | High | 7.2 | 2018-06-21 | A vulnerability in the process of uploading new application images to Cisco FXOS on the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepow… |
CVE-2018-0299 | Medium | 6.5 | 2018-06-21 | A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco NX-OS on the Cisco Nexus 4000 Series Switch could allow an authenticated, rem… |
CVE-2018-0298 | High | 7.5 | 2018-06-21 | A vulnerability in the web UI of Cisco FXOS and Cisco UCS Fabric Interconnect Software could allow an unauthenticated, remote attacker to cause a buffer overfl… |
CVE-2018-0330 | High | 8.8 | 2018-06-20 | A vulnerability in the NX-API management application programming interface (API) in devices running, or based on, Cisco NX-OS Software could allow an authentic… |
CVE-2018-0314 | Critical | 9.8 | 2018-06-20 | A vulnerability in the Cisco Fabric Services (CFS) component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to… |
CVE-2018-0312 | Critical | 9.8 | 2018-06-20 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to execu… |
CVE-2018-0308 | Critical | 9.8 | 2018-06-20 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to execu… |
CVE-2018-0307 | High | 7.8 | 2018-06-20 | A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-injection attack on an affected device. Th… |
CVE-2018-0304 | Critical | 9.8 | 2018-06-20 | A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to read… |
CVE-2018-0301 | Critical | 9.8 | 2018-06-20 | A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft a packet to the management interface on… |
CVE-2018-0295 | High | 7.5 | 2018-06-20 | A vulnerability in the Border Gateway Protocol (BGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial o… |
CVE-2018-0294 | Medium | 6.7 | 2018-06-20 | A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to configure an unautho… |
CVE-2018-0293 | High | 8.8 | 2018-06-20 | A vulnerability in role-based access control (RBAC) for Cisco NX-OS Software could allow an authenticated, remote attacker to execute CLI commands that should… |
CVE-2018-0292 | High | 8.8 | 2018-06-20 | A vulnerability in the Internet Group Management Protocol (IGMP) Snooping feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to… |
CVE-2018-0291 | Medium | 6.5 | 2018-06-20 | A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco NX-OS Software could allow an authenticated, remote attacker t… |
CVE-2018-0225 | Critical | 9.8 | 2018-06-08 | The Enterprise Console in Cisco AppDynamics App iQ Platform before 4.4.3.10598 (HF4) allows SQL injection, aka the Security Advisory 2089 issue. |
CVE-2018-0357 | Medium | 6.1 | 2018-06-07 | A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the… |
CVE-2018-0356 | Medium | 6.1 | 2018-06-07 | A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the… |
CVE-2018-0355 | Medium | 6.1 | 2018-06-07 | A vulnerability in the web UI of Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, remote attacker to conduct a cross-frame scr… |
CVE-2018-0354 | Medium | 6.1 | 2018-06-07 | A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack a… |
CVE-2018-0352 | Medium | 6.7 | 2018-06-07 | A vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to… |
CVE-2018-0340 | Medium | 5.4 | 2018-06-07 | A vulnerability in the web framework of the Cisco Unified Communications Manager (Unified CM) software could allow an authenticated, remote attacker to conduct… |
CVE-2018-0339 | Medium | 6.1 | 2018-06-07 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cros… |
CVE-2018-0338 | High | 7.8 | 2018-06-07 | A vulnerability in the role-based access-checking mechanisms of Cisco Unified Computing System (UCS) Software could allow an authenticated, local attacker to e… |
CVE-2018-0336 | High | 8.8 | 2018-06-07 | A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to escalate privilege… |
CVE-2018-0335 | High | 7.8 | 2018-06-07 | A vulnerability in the web portal authentication process of Cisco Prime Collaboration Provisioning could allow an unauthenticated, local attacker to view sensi… |
CVE-2018-0334 | Medium | 4.8 | 2018-06-07 | A vulnerability in the certificate management subsystem of Cisco AnyConnect Network Access Manager and of Cisco AnyConnect Secure Mobility Client for iOS, Mac… |
CVE-2018-0333 | Medium | 5.8 | 2018-06-07 | A vulnerability in the VPN configuration management of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass VPN security d… |
CVE-2018-0332 | High | 7.5 | 2018-06-07 | A vulnerability in the Session Initiation Protocol (SIP) ingress packet processing of Cisco Unified IP Phone software could allow an unauthenticated, remote at… |
CVE-2018-0329 | Medium | 5.3 | 2018-06-07 | A vulnerability in the default configuration of the Simple Network Management Protocol (SNMP) feature of Cisco Wide Area Application Services (WAAS) Software c… |
CVE-2018-0149 | Medium | 4.8 | 2018-06-07 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller Supervisor Software and Cisco UCS Director Software could allow… |
CVE-2018-0353 | High | 7.5 | 2018-06-07 | A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to circumvent Layer 4 Tra… |
CVE-2018-0322 | High | 8.8 | 2018-06-07 | A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to modify sensiti… |
CVE-2018-0321 | Critical | 9.8 | 2018-06-07 | A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation (RM… |
CVE-2018-0320 | Critical | 9.8 | 2018-06-07 | A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to execute arbitrary… |
CVE-2018-0319 | Critical | 9.8 | 2018-06-07 | A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to gain unaut… |
CVE-2018-0318 | Critical | 9.8 | 2018-06-07 | A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to gain unauthor… |
CVE-2018-0317 | High | 8.8 | 2018-06-07 | A vulnerability in the web interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to escalate their privileges… |
CVE-2018-0316 | High | 7.5 | 2018-06-07 | A vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP Phone 6800, 7800, and 8800 Series Phones with Multiplatform Fi… |