Cisco Security Vulnerabilities (CVEs)

This vulnerability allows a low-privileged local attacker on Windows systems with Cisco AnyConnect or Secure Client to elevate privileges to SYSTEM le...

Multiple vulnerabilities in Cisco Small Business Series Switches web interface allow unauthenticated remote attackers to cause denial of service or ex...

Multiple vulnerabilities in Cisco Small Business Series Switches web interface allow unauthenticated remote attackers to cause denial of service or ex...

This vulnerability in Cisco Small Business Series Switches allows unauthenticated remote attackers to cause denial of service or execute arbitrary cod...

This vulnerability in Cisco Small Business Series Switches allows unauthenticated remote attackers to execute arbitrary code with root privileges or c...

This vulnerability allows unauthenticated remote attackers to execute arbitrary code with root privileges or cause denial of service on affected Cisco...

This vulnerability in Cisco Small Business Series Switches allows unauthenticated remote attackers to execute arbitrary code with root privileges or c...

Authenticated remote attackers can execute arbitrary commands as root on Cisco RV320/RV325 routers via web interface input validation flaws. This affe...

This vulnerability allows authenticated remote attackers to execute arbitrary code as administrator on Cisco Secure Network Analytics devices. Attacke...

Authenticated remote attackers can execute arbitrary commands as root on Cisco RV320/RV325 routers via the web management interface. This affects admi...

This CSRF vulnerability in Cisco SD-WAN vManage allows unauthenticated attackers to trick authenticated users into performing malicious actions via ma...

This vulnerability allows unauthenticated remote attackers to discover private cryptographic keys on affected Cisco ASA/FTD devices due to insufficien...

An unauthenticated remote attacker can cause denial of service on Cisco wireless controllers by exploiting a logic error in the CAPWAP AP joining proc...

This vulnerability in Cisco Catalyst 9300 switches allows authenticated local attackers with level-15 privileges or unauthenticated attackers with phy...

An unauthenticated remote attacker can send crafted DHCPv6 messages to Cisco IOS/IOS XE devices with DHCPv6 relay or server features enabled, causing ...

An unauthenticated attacker on the same network can send crafted traffic through a wireless access point to exploit insufficient input validation in C...

This vulnerability allows an authenticated local attacker to escape the Cisco IOx application container and execute arbitrary commands with root privi...

This vulnerability allows authenticated local attackers to cause Cisco access points to reboot by submitting specially crafted CLI commands. It affect...

This vulnerability allows authenticated local attackers on Cisco IOS XE SD-WAN devices to execute arbitrary commands with root privileges due to insuf...

This vulnerability in Cisco IOS XE Software allows authenticated local attackers to gain root privileges by exploiting insufficient memory protection ...

An unauthenticated remote attacker can send crafted IPv4 BFD packets to cause line card resets on affected Cisco routers, resulting in denial of servi...

An unauthenticated remote attacker can cause denial of service on Cisco Nexus Dashboard by sending continuous DNS requests. This vulnerability affects...

An unauthenticated attacker on the same network segment can send crafted LLDP packets to Cisco Nexus 9000 ACI switches, causing a memory leak that lea...

This CSRF vulnerability in Cisco APIC and Cloud Network Controller web interfaces allows unauthenticated attackers to trick authenticated users into e...

This vulnerability in Cisco IOx allows authenticated remote attackers to execute arbitrary commands as root on the host operating system by deploying ...

This vulnerability in Cisco SD-WAN Software allows authenticated local attackers to gain root privileges by exploiting improper access controls in the...

This vulnerability allows an unauthenticated remote attacker to perform man-in-the-middle attacks on SSL/TLS connections between Cisco Nexus Dashboard...

This vulnerability in Cisco Smart Software Manager On-Prem allows an authenticated remote attacker to cause a denial of service (DoS) by sending multi...

This vulnerability allows authenticated attackers with operator-level credentials to retrieve sensitive information from LDAP authentication servers c...

A vulnerability in the CHM file parser of ClamAV allows an unauthenticated remote attacker to cause a denial of service condition on affected devices....

This vulnerability allows unauthenticated remote attackers to cause denial of service on Cisco Firepower Threat Defense devices by sending crafted UDP...

This vulnerability allows authenticated but unprivileged remote attackers to escalate privileges to level 15 (highest administrative level) on Cisco A...

This vulnerability in Cisco Firepower Threat Defense (FTD) Software allows an unauthenticated remote attacker to cause a denial of service (DoS) by ex...

An unauthenticated remote attacker can cause a denial of service (DoS) by sending a crafted HTTPS request to Cisco ASA or FTD devices with web service...

This vulnerability allows an unauthenticated remote attacker in a man-in-the-middle position to decrypt, read, modify, and re-encrypt data transmitted...

A heap-based buffer overflow vulnerability in Cisco ASA's Clientless SSL VPN portal allows authenticated remote attackers to cause denial of service o...

This vulnerability allows an unauthenticated remote attacker to cause a denial of service (DoS) by sending crafted requests to the SSL VPN features of...