Cisco
Page 42 of 69 — Cisco CVEs from a corpus of 6881, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-9204 | Medium | 6.5 | 2016-12-14 | A vulnerability in the Cisco Intercloud Fabric (ICF) Director could allow an unauthenticated, remote attacker to connect to internal services with an internal… |
CVE-2016-9203 | High | 7.5 | 2016-12-14 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco ASR 5000 Series Software could allow an unauthenticated, remote attacker to cau… |
CVE-2016-9202 | Medium | 6.1 | 2016-12-14 | A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) Switches could allow an unauthenticated, remote attacker to condu… |
CVE-2016-9201 | High | 7.5 | 2016-12-14 | A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that… |
CVE-2016-9200 | Medium | 6.1 | 2016-12-14 | A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site script… |
CVE-2016-9199 | Medium | 6.5 | 2016-12-14 | A vulnerability in the Cisco application-hosting framework (CAF) of Cisco IOx could allow an authenticated, remote attacker to read arbitrary files on a target… |
CVE-2016-9198 | High | 7.5 | 2016-12-14 | A vulnerability in the Active Directory integration component of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to perfor… |
CVE-2016-9193 | High | 7.5 | 2016-12-14 | A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center and Cisco FireSIGHT System Software could allow an u… |
CVE-2016-9192 | High | 7.8 | 2016-12-14 | A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executa… |
CVE-2016-6474 | High | 7.3 | 2016-12-14 | A vulnerability in the implementation of X.509 Version 3 for SSH authentication functionality in Cisco IOS and IOS XE Software could allow an unauthenticated… |
CVE-2016-6473 | Medium | 6.5 | 2016-12-14 | A vulnerability in Cisco IOS on Catalyst Switches and Nexus 9300 Series Switches could allow an unauthenticated, adjacent attacker to cause a Layer 2 network s… |
CVE-2016-6471 | Medium | 6.5 | 2016-12-14 | A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remo… |
CVE-2016-6470 | High | 7.8 | 2016-12-14 | A vulnerability in the installation procedure of the Cisco Hybrid Media Service could allow an authenticated, local attacker to elevate privileges to the root… |
CVE-2016-6469 | High | 7.5 | 2016-12-14 | A vulnerability in HTTP URL parsing of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to cause a denial o… |
CVE-2016-6468 | High | 8.8 | 2016-12-14 | A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a cross-site requ… |
CVE-2016-6467 | High | 7.5 | 2016-12-14 | A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Switch could allow an unauthenticated, rem… |
CVE-2016-6465 | Medium | 4.3 | 2016-12-14 | A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances and Cisco Web Security Appliances could al… |
CVE-2016-6464 | High | 7.5 | 2016-12-14 | A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote atta… |
CVE-2016-6449 | High | 7.8 | 2016-12-14 | A vulnerability in the system management of certain FireAMP system processes in Cisco FireAMP Connector Endpoint software could allow an authenticated, local a… |
CVE-2016-1411 | Medium | 5.9 | 2016-12-14 | A vulnerability in the update functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco C… |
CVE-2016-6472 | Medium | 6.1 | 2016-11-19 | A vulnerability in several parameters of the ccmivr page of Cisco Unified Communication Manager (CallManager) could allow an unauthenticated, remote attacker t… |
CVE-2016-6466 | High | 7.5 | 2016-11-19 | A vulnerability in the IPsec component of StarOS for Cisco ASR 5000 Series routers could allow an unauthenticated, remote attacker to terminate all active IPse… |
CVE-2016-6463 | Medium | 5.3 | 2016-11-19 | A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attac… |
CVE-2016-6462 | Medium | 5.3 | 2016-11-19 | A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attac… |
CVE-2016-6461 | Medium | 5.9 | 2016-11-19 | A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to in… |
CVE-2016-6460 | High | 7.5 | 2016-11-19 | A vulnerability in the FTP Representational State Transfer Application Programming Interface (REST API) for Cisco Firepower System Software could allow an unau… |
CVE-2016-6459 | Medium | 5.5 | 2016-11-19 | Cisco TelePresence endpoints running either CE or TC software contain a vulnerability that could allow an authenticated, local attacker to execute a local shel… |
CVE-2016-6458 | High | 7.5 | 2016-11-19 | A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote att… |
CVE-2016-6457 | Medium | 6.5 | 2016-11-19 | A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure (ACI) could allow an unauthenticated, adjacent att… |
CVE-2016-6450 | Low | 2.5 | 2016-11-19 | A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local attacker to gain write access to some files in the… |
CVE-2016-6455 | High | 7.5 | 2016-11-03 | A vulnerability in the Slowpath of StarOS for Cisco ASR 5500 Series routers with Data Processing Card 2 (DPC2) could allow an unauthenticated, remote attacker… |
CVE-2016-6454 | Medium | 6.5 | 2016-11-03 | A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an unaut… |
CVE-2016-6453 | High | 7.3 | 2016-11-03 | A vulnerability in the web framework code of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary SQL comman… |
CVE-2016-6452 | Critical | 9.8 | 2016-11-03 | A vulnerability in the web-based graphical user interface (GUI) of Cisco Prime Home could allow an unauthenticated, remote attacker to bypass authentication. T… |
CVE-2016-6451 | Medium | 6.1 | 2016-11-03 | Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a c… |
CVE-2016-6448 | Critical | 9.8 | 2016-11-03 | A vulnerability in the Session Description Protocol (SDP) parser of Cisco Meeting Server could allow an unauthenticated, remote attacker to execute arbitrary c… |
CVE-2016-6447 | Critical | 9.8 | 2016-11-03 | A vulnerability in Cisco Meeting Server and Meeting App could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. This v… |
CVE-2016-6441 | Critical | 9.8 | 2016-11-03 | A vulnerability in the Transaction Language 1 (TL1) code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to cause a reload of… |
CVE-2016-6430 | High | 7.8 | 2016-11-03 | A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an authenticated, local attacker to… |
CVE-2016-6429 | Medium | 6.1 | 2016-11-03 | A vulnerability in the web framework code of the Cisco IP Interoperability and Collaboration System (IPICS) could allow an unauthenticated, remote attacker to… |
CVE-2016-6397 | Critical | 9.8 | 2016-10-28 | A vulnerability in the interdevice communications interface of the Cisco IP Interoperability and Collaboration System (IPICS) Universal Media Services (UMS) co… |
CVE-2016-6372 | High | 7.5 | 2016-10-28 | A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions (MIME) headers of Cisco AsyncOS Software for Cis… |
CVE-2016-6360 | High | 7.5 | 2016-10-28 | A vulnerability in Advanced Malware Protection (AMP) for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow an unauthenticated… |
CVE-2016-6358 | High | 7.5 | 2016-10-28 | A vulnerability in local FTP to the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a partial denial of service (… |
CVE-2016-6357 | High | 7.5 | 2016-10-28 | A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance (ESA) could allow an u… |
CVE-2016-6356 | High | 7.5 | 2016-10-28 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote att… |
CVE-2016-1486 | High | 7.5 | 2016-10-28 | A vulnerability in the email attachment scanning functionality of the Advanced Malware Protection (AMP) feature of Cisco AsyncOS Software for Cisco Email Secur… |
CVE-2016-1481 | High | 7.5 | 2016-10-28 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote att… |
CVE-2016-1480 | High | 7.5 | 2016-10-28 | A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Securit… |
CVE-2016-1423 | Medium | 6.1 | 2016-10-28 | A vulnerability in the display of email messages in the Messages in Quarantine (MIQ) view in Cisco AsyncOS for Cisco Email Security Appliance (ESA) could allow… |
CVE-2016-6446 | High | 7.5 | 2016-10-27 | A vulnerability in Web Bridge for Cisco Meeting Server could allow an unauthenticated, remote attacker to retrieve memory from a connected server. More Informa… |
CVE-2016-6445 | Critical | 9.1 | 2016-10-27 | A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of the Cisco Meeting Server (CMS) before 2.0.6 and Acano Server before 1.8.18… |
CVE-2016-6444 | High | 8.8 | 2016-10-27 | A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a Web Bri… |
CVE-2016-6443 | High | 8.8 | 2016-10-27 | A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote attacker… |
CVE-2016-6442 | High | 8.8 | 2016-10-27 | A vulnerability in Cisco Finesse Agent and Supervisor Desktop Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery… |
CVE-2016-6440 | Medium | 6.5 | 2016-10-27 | The Cisco Unified Communications Manager (CUCM) may be vulnerable to data that can be displayed inside an iframe within a web page, which in turn could lead to… |
CVE-2016-6439 | High | 7.5 | 2016-10-27 | A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software before 6.0.1 could allow an unauthenticated, remote atta… |
CVE-2016-6438 | Medium | 5.9 | 2016-10-27 | A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause a configur… |
CVE-2016-6437 | Medium | 5.9 | 2016-10-27 | A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a d… |
CVE-2016-6432 | High | 8.1 | 2016-10-27 | A vulnerability in the Identity Firewall feature of Cisco ASA Software before 9.6(2.1) could allow an unauthenticated, remote attacker to cause a reload of the… |
CVE-2016-6431 | High | 7.5 | 2016-10-27 | A vulnerability in the local Certificate Authority (CA) feature of Cisco ASA Software before 9.6(1.5) could allow an unauthenticated, remote attacker to cause… |
CVE-2016-6436 | Medium | 6.1 | 2016-10-06 | Cross-site scripting (XSS) vulnerability in HostScan Engine 3.0.08062 through 3.1.14018 in the Cisco Host Scan package, as used in ASA Web VPN, allows remote a… |
CVE-2016-6435 | Medium | 6.5 | 2016-10-06 | The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug ID CSCva30… |
CVE-2016-6434 | High | 7.8 | 2016-10-06 | Cisco Firepower Management Center 6.0.1 has hardcoded database credentials, which allows local users to obtain sensitive information by leveraging CLI access… |
CVE-2016-6433 | High | 8.8 | 2016-10-06 | The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users to execute arbitrary commands via craf… |
CVE-2016-6428 | High | 7.8 | 2016-10-06 | Cisco IOS XR 6.1.1 allows local users to execute arbitrary OS commands as root by leveraging admin privileges, aka Bug ID CSCva38349. |
CVE-2016-6427 | High | 8.8 | 2016-10-06 | Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10… |
CVE-2016-6425 | Medium | 6.1 | 2016-10-06 | Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) th… |
CVE-2016-6424 | Medium | 6.5 | 2016-10-06 | The DHCP Relay implementation in Cisco Adaptive Security Appliance (ASA) Software 8.4.7.29 and 9.1.7.4 allows remote attackers to cause a denial of service (in… |
CVE-2016-6422 | High | 7.5 | 2016-10-06 | Cisco IOS 12.2(33)SXJ9 on Supervisor Engine 32 and 720 modules for 6500 and 7600 devices mishandles certain operators, flags, and keywords in TCAM share ACLs… |
CVE-2016-1454 | Medium | 6.5 | 2016-10-06 | Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to c… |
CVE-2016-1453 | Critical | 9.8 | 2016-10-06 | Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote attackers… |
CVE-2015-6393 | High | 7.5 | 2016-10-06 | Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to ca… |
CVE-2015-0721 | High | 8.0 | 2016-10-06 | Cisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote… |
CVE-2015-6392 | High | 7.5 | 2016-10-06 | Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial… |
CVE-2016-6426 | High | 7.5 | 2016-10-05 | The j_spring_security_switch_user function in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1)… |
CVE-2016-6423 | Medium | 6.5 | 2016-10-05 | The IKEv2 client and initiator implementations in Cisco IOS 15.5(3)M and IOS XE allow remote IKEv2 servers to cause a denial of service (device reload) via cra… |
CVE-2016-6421 | Medium | 5.3 | 2016-10-05 | Cisco IOS XR 5.2.2 allows remote attackers to cause a denial of service (process restart) via a crafted OSPF Link State Advertisement (LSA) update, aka Bug ID… |
CVE-2016-6393 | High | 7.5 | 2016-10-05 | The AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial of service… |
CVE-2016-6391 | High | 7.5 | 2016-10-05 | Cisco IOS 12.2 and 15.0 through 15.3 allows remote attackers to cause a denial of service (traffic-processing outage) via a crafted series of Common Industrial… |
CVE-2016-6385 | High | 7.5 | 2016-10-05 | Memory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.2 through 3.8 allows remote attackers to cause a de… |
CVE-2016-6380 | High | 8.1 | 2016-10-05 | The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive information from… |
CVE-2016-6379 | High | 7.5 | 2016-10-05 | Cisco IOS 12.2 and IOS XE 3.14 through 3.16 and 16.1 allow remote attackers to cause a denial of service (device reload) via crafted IP Detail Record (IPDR) pa… |
CVE-2016-6378 | High | 7.5 | 2016-10-05 | Cisco IOS XE 3.1 through 3.17 and 16.1 through 16.2 allows remote attackers to cause a denial of service (device reload) via crafted ICMP packets that require… |
CVE-2016-1455 | High | 7.5 | 2016-10-05 | Cisco NX-OS before 7.0(3)I2(2e) and 7.0(3)I4 before 7.0(3)I4(1) has an incorrect iptables local-interface configuration, which allows remote attackers to obtai… |
CVE-2016-6418 | Medium | 6.1 | 2016-10-05 | Cross-site scripting (XSS) vulnerability in Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.0 through 3.4.0 allows remote attackers to inject ar… |
CVE-2016-6417 | High | 8.8 | 2016-10-05 | Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers… |
CVE-2016-6416 | Medium | 5.9 | 2016-10-05 | The FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 through 9.9.6-026, Web Security Appliance (WSA) devices 9.0.0-162 through… |
CVE-2016-6392 | High | 7.5 | 2016-10-05 | Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a denial of service (device restart) via a crafted IPv4 Multica… |
CVE-2016-6386 | High | 7.5 | 2016-10-05 | Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service (data-structure corruption and device reload) v… |
CVE-2016-6384 | High | 7.5 | 2016-10-05 | Cisco IOS 12.2 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.17 and 16.2 allow remote attackers to cause a denial of service (device reload) via… |
CVE-2016-6382 | High | 7.5 | 2016-10-05 | Cisco IOS 15.2 through 15.6 and IOS XE 3.6 through 3.17 and 16.1 allow remote attackers to cause a denial of service (device restart) via a malformed IPv6 Prot… |
CVE-2016-6381 | High | 7.5 | 2016-10-05 | Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service (memory consumption or device rel… |
CVE-2016-6420 | Medium | 6.5 | 2016-10-05 | Cisco FireSIGHT System Software 4.10.3 through 5.4.0 in Firepower Management Center allows remote authenticated users to bypass authorization checks and gain p… |
CVE-2016-6419 | High | 7.5 | 2016-10-05 | SQL injection vulnerability in Cisco Firepower Management Center 4.10.3 through 5.4.0 allows remote authenticated users to execute arbitrary SQL commands via u… |
CVE-2016-6413 | High | 7.8 | 2016-09-24 | The installation procedure on Cisco Application Policy Infrastructure Controller (APIC) devices 1.3(2f) mishandles binary files, which allows local users to ob… |
CVE-2016-6412 | Medium | 6.5 | 2016-09-24 | The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows man-in-the-middle attack… |
CVE-2016-6411 | High | 7.5 | 2016-09-24 | Cisco Firepower Management Center and FireSIGHT System Software 6.0.1 mishandle comparisons between URLs and X.509 certificates, which allows remote attackers… |
CVE-2016-6410 | Medium | 6.5 | 2016-09-24 | The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows remote authenticated use… |
CVE-2016-6409 | High | 7.5 | 2016-09-24 | The Data in Motion (DMo) component in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a denial of service… |