Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: cisco'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-20148 4.9 A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to perform path traversal attacks on the underlying operating system and read arbitrary files. To exploit this vulnerability, the attacker must have valid ad 2026-09-25 16:41:53
CVE-2026-20181 9.1 A vulnerability in Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid administrative 2026-09-25 16:41:50
CVE-2026-20190 7.5 A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device. This vulnerability is due to improper authorization checks when a resource is accessed. An attacker could 2026-09-25 16:41:47
CVE-2026-20136 6.0 A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, local attacker with administrative privileges to perform a command injection attack on the underl 2026-09-25 16:41:45
CVE-2008-4128 9.3 Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via (1) a certain "show privilege" command to 2026-09-23 19:17:25
CVE-2000-0955 7.5 Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker who knows the community name to crack the password and gain privileges. 2026-09-23 13:10:00
CVE-2000-1056 7.5 CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords. 2026-09-23 13:10:00
CVE-2000-1027 5.0 Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established. 2026-09-23 13:10:00
CVE-2000-0984 5.0 The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/" string. 2026-09-23 10:10:00
CVE-2000-0945 10.0 The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory. 2026-09-23 10:10:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/687
Zapisa po stranici: