Vulnerabilities (CVE)

Filtered by vendor Cisco Subscribe
Total 6077 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-1038 1 Cisco 1 Sn 5420 Storage Router Firmware 2023-12-10 5.0 MEDIUM N/A
Cisco SN 5420 Storage Router 1.1(3) and earlier allows remote attackers to cause a denial of service (reboot) via a series of connections to TCP port 8023.
CVE-2001-0622 1 Cisco 1 Content Services Switch 11000 2023-12-10 7.5 HIGH N/A
The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s allows a remote attacker to gain additional privileges by directly requesting the web management URL instead of navigating through the interface.
CVE-2002-2052 1 Cisco 1 Ios 2023-12-10 5.0 MEDIUM N/A
Cisco 2611 router running IOS 12.1(6.5), possibly an interim release, allows remote attackers to cause a denial of service via port scans such as (1) scanning all ports on a single host and (2) scanning a network of hosts for a single open port through the router. NOTE: the vendor could not reproduce this issue, saying that the original reporter was using an interim release of the software.
CVE-2004-1458 1 Cisco 2 Secure Access Control Server, Secure Acs Solution Engine 2023-12-10 5.0 MEDIUM N/A
The CSAdmin web administration interface for Cisco Secure Access Control Server (ACS) 3.2(2) build 15 allows remote attackers to cause a denial of service (hang) via a flood of TCP connections to port 2002.
CVE-2001-0867 1 Cisco 1 12000 Router 2023-12-10 7.5 HIGH N/A
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fragments even when the "fragment" keyword is used in an ACL, which allows remote attackers to bypass the intended access controls.
CVE-1999-1100 1 Cisco 1 Pix Private Link 2023-12-10 7.5 HIGH N/A
Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier for an attacker to find the proper key via a brute force attack.
CVE-2001-1064 1 Cisco 1 Cbos 2023-12-10 5.0 MEDIUM N/A
Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the (1) HTTP or (2) telnet service, which causes the router to become unresponsive and stop forwarding packets.
CVE-2001-0020 1 Cisco 2 Arrowpoint, Content Services Switch 2023-12-10 2.1 LOW N/A
Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to read arbitrary files via a .. (dot dot) attack.
CVE-1999-0998 1 Cisco 1 Cache Engine 2023-12-10 5.0 MEDIUM N/A
Cisco Cache Engine allows an attacker to replace content in the cache.
CVE-2000-0380 1 Cisco 1 Ios 2023-12-10 7.1 HIGH N/A
The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.
CVE-2004-0081 23 4d, Apple, Avaya and 20 more 66 Webstar, Mac Os X, Mac Os X Server and 63 more 2023-12-10 5.0 MEDIUM N/A
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
CVE-2003-0259 1 Cisco 6 Vpn 3000 Concentrator Series Software, Vpn 3002 Hardware Client, Vpn 3015 Concentrator and 3 more 2023-12-10 5.0 MEDIUM N/A
Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client 2.x.x through 3.6.7 allows remote attackers to cause a denial of service (reload) via a malformed SSH initialization packet.
CVE-2002-0908 1 Cisco 1 Ids Device Manager 2023-12-10 5.0 MEDIUM N/A
Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTPS request.
CVE-2002-1107 1 Cisco 1 Vpn Client 2023-12-10 7.5 HIGH N/A
Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.2B, does not generate sufficiently random numbers, which may make it vulnerable to certain attacks such as spoofing.
CVE-1999-0416 1 Cisco 1 Cisco 7xx Routers 2023-12-10 5.0 MEDIUM N/A
Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port.
CVE-2001-0750 1 Cisco 1 Ios 2023-12-10 5.0 MEDIUM N/A
Cisco IOS 12.1(2)T, 12.1(3)T allow remote attackers to cause a denial of service (reload) via a connection to TCP ports 3100-3999, 5100-5999, 7100-7999 and 10100-10999.
CVE-2001-0056 1 Cisco 1 Broadband Operating System 2023-12-10 7.5 HIGH N/A
The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords without detection.
CVE-2002-2140 1 Cisco 1 Pix Firewall Software 2023-12-10 5.0 MEDIUM N/A
Buffer overflow in Cisco PIX Firewall 5.2.x to 5.2.8, 6.0.x to 6.0.3, 6.1.x to 6.1.3, and 6.2.x to 6.2.1 allows remote attackers to cause a denial of service via HTTP traffic authentication using (1) TACACS+ or (2) RADIUS.
CVE-2001-0163 1 Cisco 1 Aironet Ap340 2023-12-10 4.6 MEDIUM N/A
Cisco AP340 base station produces predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
CVE-2000-0267 1 Cisco 1 Catos 2023-12-10 4.6 MEDIUM N/A
Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password.