Vulnerabilities (CVE)

Filtered by vendor Cisco Subscribe
Total 6082 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-0647 1 Cisco 1 Ios 2024-02-28 7.5 HIGH N/A
Buffer overflow in the HTTP server for Cisco IOS 12.2 and earlier allows remote attackers to execute arbitrary code via an extremely long (2GB) HTTP GET request.
CVE-2001-1038 1 Cisco 1 Sn 5420 Storage Router Firmware 2024-02-28 5.0 MEDIUM N/A
Cisco SN 5420 Storage Router 1.1(3) and earlier allows remote attackers to cause a denial of service (reboot) via a series of connections to TCP port 8023.
CVE-2001-0741 1 Cisco 1 Hsrp 2024-02-28 2.1 LOW N/A
Cisco Hot Standby Routing Protocol (HSRP) allows local attackers to cause a denial of service by spoofing HSRP packets.
CVE-2002-0908 1 Cisco 1 Ids Device Manager 2024-02-28 5.0 MEDIUM N/A
Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTPS request.
CVE-2003-0100 1 Cisco 1 Ios 2024-02-28 7.5 HIGH N/A
Buffer overflow in Cisco IOS 11.2.x to 12.0.x allows remote attackers to cause a denial of service and possibly execute commands via a large number of OSPF neighbor announcements.
CVE-1999-1001 1 Cisco 1 Cache Engine 2024-02-28 2.6 LOW N/A
Cisco Cache Engine allows a remote attacker to gain access via a null username and password.
CVE-2002-1554 1 Cisco 1 Optical Networking Systems Software 2024-02-28 4.6 MEDIUM N/A
Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup.
CVE-1999-0415 1 Cisco 1 Cisco 7xx Routers 2024-02-28 7.5 HIGH N/A
The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's configuration.
CVE-2001-0058 1 Cisco 2 Broadband Operating System, Cisco 6xx Routers 2024-02-28 5.0 MEDIUM N/A
The Web interface to Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a URL that does not end in a space character.
CVE-2003-0216 1 Cisco 1 Catos 2024-02-28 9.3 HIGH N/A
Unknown vulnerability in Cisco Catalyst 7.5(1) allows local users to bypass authentication and gain access to the enable mode without a password.
CVE-2001-0537 1 Cisco 1 Ios 2024-02-28 9.3 HIGH N/A
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.
CVE-2001-1098 1 Cisco 1 Pix Firewall Manager 2024-02-28 2.1 LOW N/A
Cisco PIX firewall manager (PFM) 4.3(2)g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain the password by reading the file.
CVE-2001-0863 1 Cisco 1 12000 Router 2024-02-28 5.0 MEDIUM N/A
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL (Turbo ACL) for packets that are sent to the router, which allows remote attackers to cause a denial of service via a flood of fragments.
CVE-2002-1024 1 Cisco 4 Catos, Css11000 Content Services Switch, Ios and 1 more 2024-02-28 7.1 HIGH N/A
Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service (CPU consumption) via a large packet that was designed to exploit the SSH CRC32 attack detection overflow (CVE-2001-0144).
CVE-2004-1776 1 Cisco 1 Ios 2024-02-28 7.5 HIGH N/A
Cisco IOS 12.1(3) and 12.1(3)T allows remote attackers to read and modify device configuration data via the cable-docsis read-write community string used by the Data Over Cable Service Interface Specification (DOCSIS) standard.
CVE-2001-0019 1 Cisco 2 Arrowpoint, Content Services Switch 2024-02-28 2.1 LOW N/A
Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to the "show script," "clear script," "show archive," "clear archive," "show log," or "clear log" commands.
CVE-2004-1459 1 Cisco 2 Secure Access Control Server, Secure Acs Solution Engine 2024-02-28 5.0 MEDIUM N/A
Cisco Secure Access Control Server (ACS) 3.2, when configured as a Light Extensible Authentication Protocol (LEAP) RADIUS proxy, allows remote attackers to cause a denial of service (device crash) via certain LEAP authentication requests.
CVE-2001-0427 1 Cisco 6 Vpn 3000 Concentrator, Vpn 3005 Concentrator, Vpn 3015 Concentrator and 3 more 2024-02-28 7.1 HIGH N/A
Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via a flood of invalid login requests to (1) the SSL service, or (2) the telnet service, which do not properly disconnect the user after several failed login attempts.
CVE-1999-1465 1 Cisco 1 Ios 2024-02-28 7.5 HIGH N/A
Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled input interface to an output interface with a logical subinterface, as described by Cisco bug CSCdk43862.
CVE-2002-0339 1 Cisco 1 Ios 2024-02-28 5.0 MEDIUM N/A
Cisco IOS 11.1CC through 12.2 with Cisco Express Forwarding (CEF) enabled includes portions of previous packets in the padding of a MAC level packet when the MAC packet's length is less than the IP level packet length.