Filtered by vendor Cisco
Subscriptions
Total
6544 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-1999-1582 | 1 Cisco | 1 Pix Firewall | 2025-04-03 | N/A |
By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit has already been allowed, which can cause administrators to configure less restrictive access controls than intended if they do not understand this functionality. | ||||
CVE-1999-1465 | 1 Cisco | 1 Ios | 2025-04-03 | N/A |
Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled input interface to an output interface with a logical subinterface, as described by Cisco bug CSCdk43862. | ||||
CVE-1999-1464 | 1 Cisco | 1 Ios | 2025-04-03 | N/A |
Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled interface to an interface that does not have DFS enabled, as described by Cisco bug CSCdk35564. | ||||
CVE-1999-1216 | 1 Cisco | 1 Router | 2025-04-03 | N/A |
Cisco routers 9.17 and earlier allow remote attackers to bypass security restrictions via certain IP source routed packets that should normally be denied using the "no ip source-route" command. | ||||
CVE-1999-1175 | 1 Cisco | 1 Ios | 2025-04-03 | N/A |
Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote attackers to redirect HTTP traffic to arbitrary hosts via WCCP packets to UDP port 2048. | ||||
CVE-1999-1129 | 1 Cisco | 2 Catalyst 2900 Vlan, Ios | 2025-04-03 | N/A |
Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking tag. | ||||
CVE-1999-1000 | 1 Cisco | 1 Cache Engine | 2025-04-03 | N/A |
The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics. | ||||
CVE-1999-0998 | 1 Cisco | 1 Cache Engine | 2025-04-03 | N/A |
Cisco Cache Engine allows an attacker to replace content in the cache. | ||||
CVE-2004-1432 | 1 Cisco | 1 Optical Networking Systems Software | 2025-04-03 | N/A |
Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, allows remote attackers to cause a denial of service (control card reset) via malformed (1) IP or (2) ICMP packets. | ||||
CVE-2006-4650 | 1 Cisco | 1 Ios | 2025-04-03 | N/A |
Cisco IOS 12.0, 12.1, and 12.2, when GRE IP tunneling is used and the RFC2784 compliance fixes are missing, does not verify the offset field of a GRE packet during decapsulation, which leads to an integer overflow that references data from incorrect memory locations, which allows remote attackers to inject crafted packets into the routing queue, possibly bypassing intended router ACLs. | ||||
CVE-1999-0843 | 1 Cisco | 1 Router | 2025-04-03 | N/A |
Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port. | ||||
CVE-1999-0775 | 1 Cisco | 1 Ios | 2025-04-03 | N/A |
Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established" keyword in an access list. | ||||
CVE-1999-0734 | 1 Cisco | 1 Ciscosecure | 2025-04-03 | N/A |
A default configuration of CiscoSecure Access Control Server (ACS) allows remote users to modify the server database without authentication. | ||||
CVE-1999-0453 | 1 Cisco | 1 Router | 2025-04-03 | N/A |
An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP). | ||||
CVE-1999-0445 | 1 Cisco | 1 Ios | 2025-04-03 | N/A |
In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters. | ||||
CVE-1999-0222 | 1 Cisco | 1 Router | 2025-04-03 | N/A |
Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL. | ||||
CVE-1999-0162 | 1 Cisco | 1 Ios | 2025-04-03 | N/A |
The "established" keyword in some Cisco IOS software allowed an attacker to bypass filtering. | ||||
CVE-1999-0160 | 1 Cisco | 1 Ios | 2025-04-03 | N/A |
Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections. | ||||
CVE-1999-0157 | 1 Cisco | 2 Ios, Pix Firewall Software | 2025-04-03 | N/A |
Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service. | ||||
CVE-2006-4910 | 1 Cisco | 2 Ids Sensor Software, Ips Sensor Software | 2025-04-03 | N/A |
The web administration interface (mainApp) to Cisco IDS before 4.1(5c), and IPS 5.0 before 5.0(6p1) and 5.1 before 5.1(2) allows remote attackers to cause a denial of service (unresponsive device) via a crafted SSLv2 Client Hello packet. |