Cisco
Page 69 of 69 — Cisco CVEs from a corpus of 6881, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2001-0711 | | 2001-08-31 | Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interface (ILMI) SNMP comm… | |
CVE-2001-0622 | | 2001-08-14 | The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s allows a remote attacker to gain additi… | |
CVE-2001-0621 | | 2001-08-14 | The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and… | |
CVE-2001-0566 | | 2001-08-14 | Cisco Catalyst 2900XL switch allows a remote attacker to create a denial of service via an empty UDP packet sent to port 161 (SNMP) when SNMP is disabled. | |
CVE-2001-1097 | | 2001-07-24 | Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets. | |
CVE-2001-0537 | | 2001-07-21 | HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by spe… | |
CVE-2001-1183 | | 2001-07-12 | PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service (crash) via a malformed packet. | |
CVE-2001-1038 | | 2001-07-11 | Cisco SN 5420 Storage Router 1.1(3) and earlier allows remote attackers to cause a denial of service (reboot) via a series of connections to TCP port 8023. | |
CVE-2001-0444 | | 2001-07-02 | Cisco CBOS 2.3.0.053 sends output of the "sh nat" (aka "show nat") command to the terminal of the next user who attempts to connect to the router via telnet, w… | |
CVE-2001-0429 | | 2001-07-02 | Cisco Catalyst 5000 series switches 6.1(2) and earlier will forward an 802.1x frame on a Spanning Tree Protocol (STP) blocked port, which causes a network stor… | |
CVE-2001-0428 | | 2001-07-02 | Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via an IP packet with an invalid IP option. | |
CVE-2001-0455 | | 2001-06-27 | Cisco Aironet 340 Series wireless bridge before 8.55 does not properly disable access to the web interface, which allows remote attackers to modify its configu… | |
CVE-2001-0427 | | 2001-06-18 | Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via a flood of invalid login requests to (1) the SSL se… | |
CVE-2001-0412 | | 2001-06-18 | Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allows local users to gain privileges by entering debug mode. | |
CVE-2001-0375 | | 2001-06-18 | Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to cause a denial of service via a large nu… | |
CVE-2001-0288 | | 2001-05-03 | Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hija… | |
CVE-2000-0368 | | 2001-03-12 | Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow t… | |
CVE-2004-1776 | | 2001-02-28 | Cisco IOS 12.1(3) and 12.1(3)T allows remote attackers to read and modify device configuration data via the cable-docsis read-write community string used by th… | |
CVE-2001-1434 | | 2001-02-28 | Cisco IOS 12.0(5)XU through 12.1(2) allows remote attackers to read system administration and topology information via an "snmp-server host" command, which cre… | |
CVE-2001-0058 | | 2001-02-16 | The Web interface to Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a URL that does not end in a spac… | |
CVE-2001-0057 | | 2001-02-16 | Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP echo (ping) packet. | |
CVE-2001-0056 | | 2001-02-16 | The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords with… | |
CVE-2001-0055 | | 2001-02-16 | CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of service via a slow stream of TCP SYN packets. | |
CVE-2001-0041 | | 2001-02-16 | Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service via a series of failed telnet authentic… | |
CVE-2001-0080 | | 2001-02-12 | Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of service by connecting to the SSH service with a non-SSH client, which g… | |
CVE-2001-0020 | | 2001-02-12 | Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to read arbitrary files via a .. (dot dot)… | |
CVE-2001-0019 | | 2001-02-12 | Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to the "show script," "clear script," "show… | |
CVE-2001-1037 | | 2001-01-08 | Cisco SN 5420 Storage Router 1.1(3) and earlier allows local users to access a developer's shell without a password and execute certain restricted commands wit… | |
CVE-2001-0163 | | 2001-01-01 | Cisco AP340 base station produces predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections. | |
CVE-2001-0161 | | 2001-01-01 | Cisco 340-series Aironet access point using firmware 11.01 does not use 6 of the 24 available IV bits for WEP encryption, which makes it easier for remote atta… | |
CVE-2000-0984 | | 2000-12-19 | The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/" string. | |
CVE-2000-0955 | | 2000-12-19 | Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the commun… | |
CVE-2000-0945 | | 2000-12-19 | The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable pass… | |
CVE-2000-1056 | | 2000-12-11 | CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords. | |
CVE-2000-1055 | | 2000-12-11 | Buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a… | |
CVE-2000-1054 | | 2000-12-11 | Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitr… | |
CVE-2000-1027 | | 2000-12-11 | Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, whi… | |
CVE-2000-1022 | | 2000-12-11 | The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to exec… | |
CVE-2000-0700 | | 2000-10-20 | Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some versions of 12.0, d… | |
CVE-2000-0486 | | 2000-05-30 | Buffer overflow in Cisco TACACS+ tac_plus server allows remote attackers to cause a denial of service via a malformed packet with a long length field. | |
CVE-2000-0345 | | 2000-05-03 | The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command. | |
CVE-2000-0380 | | 2000-04-26 | The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that… | |
CVE-2000-0268 | | 2000-04-20 | Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it… | |
CVE-2000-0267 | | 2000-04-20 | Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password. | |
CVE-2000-0613 | | 2000-03-20 | Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to force the firewall to close legitimate co… | |
CVE-2000-0150 | | 2000-02-12 | Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misi… | |
CVE-1999-1465 | | 1999-12-31 | Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when… | |
CVE-1999-1464 | | 1999-12-31 | Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when… | |
CVE-1999-1175 | | 1999-12-31 | Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect H… | |
CVE-1999-1126 | | 1999-12-31 | Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration informati… | |
CVE-1999-1100 | | 1999-12-31 | Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DE… | |
CVE-1999-1042 | | 1999-12-31 | Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as u… | |
CVE-1999-1001 | | 1999-12-16 | Cisco Cache Engine allows a remote attacker to gain access via a null username and password. | |
CVE-1999-1000 | | 1999-12-16 | The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics. | |
CVE-1999-0998 | | 1999-12-16 | Cisco Cache Engine allows an attacker to replace content in the cache. | |
CVE-1999-0843 | | 1999-11-04 | Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port. | |
CVE-1999-1129 | | 1999-09-01 | Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking… | |
CVE-1999-0734 | | 1999-08-19 | A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database without authentication. | |
CVE-1999-0889 | | 1999-07-01 | Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set. | |
CVE-1999-0775 | | 1999-06-10 | Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established" keyword in an acc… | |
CVE-1999-0445 | | 1999-04-01 | In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters. | |
CVE-1999-0416 | | 1999-03-11 | Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port. | |
CVE-1999-0415 | | 1999-03-11 | The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration. | |
CVE-1999-0430 | | 1999-03-01 | Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the supervisor module t… | |
CVE-1999-0222 | | 1999-03-01 | Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL. | |
CVE-1999-0063 | | 1999-01-11 | Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port. | |
CVE-1999-0453 | | 1999-01-01 | An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP). | |
CVE-1999-0162 | | 1998-09-01 | The "established" keyword in some Cisco IOS software allowed an attacker to bypass filtering. | |
CVE-1999-0158 | | 1998-08-31 | Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is know… | |
CVE-1999-0157 | | 1998-08-18 | Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service. | |
CVE-1999-0159 | Low | 3.5 | 1998-08-12 | Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login). This applies to some IOS 9.x, 10.x, and 11… |
CVE-1999-1582 | | 1998-07-15 | By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit h… | |
CVE-1999-0293 | | 1998-01-01 | AAA authentication on Cisco systems allows attackers to execute commands without authorization. | |
CVE-1999-0230 | | 1997-12-15 | Buffer overflow in Cisco 7xx routers through the telnet service. | |
CVE-1999-0016 | | 1997-12-01 | Land IP denial of service. | |
CVE-1999-0160 | | 1997-10-01 | Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections. | |
CVE-1999-0524 | Medium | 4.0 | 1997-08-01 | ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts. |
CVE-1999-0161 | | 1995-07-31 | In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering. | |
CVE-1999-1216 | | 1993-04-22 | Cisco routers 9.17 and earlier allow remote attackers to bypass security restrictions via certain IP source routed packets that should normally be denied using… | |
CVE-1999-1466 | | 1992-12-10 | Vulnerability in Cisco routers versions 8.2 through 9.1 allows remote attackers to bypass access control lists when extended IP access lists are used on certai… | |
CVE-1999-1306 | | 1992-12-10 | Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the "established" keyword is set, which coul… |