Priority LOW 29
The ARP implementation in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 5.2(1)SV3(1.4), Nexus 3000 devices 7.3(0)ZD(0.47), Nexus 4000 devices 4.1(2)E1, Nexus 9000 devices 7.3(0)ZD(0.61), and MDS 9000 devices 7.0(…
CVSS 2.0MEDIUM 6.1· Adjacent network · No auth · Interaction — · EPSS 0.00885 · Published 2015-09-02 · No fix listed CWE-399
Priority LOW 38
The Message Transfer Service (MTS) in Cisco NX-OS before 6.2(7) on MDS 9000 devices and 6.0 before 6.0(2) on Nexus 7000 devices allows remote attackers to cause a denial of service (NULL pointer dereference and kernel pa…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01906 · Published 2014-05-24 · No fix listed
Priority MEDIUM 45
The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary commands on Windows client machines via a…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.02409 · Published 2013-04-25 · No fix listed CWE-20
Priority MEDIUM 45
Buffer overflow in the SNMP implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(5) and 6.x before 6.1(1) and MDS 9000 devices 4.x and 5.x before 5.2(5) allows remote authenticated users to execute…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.03363 · Published 2013-04-25 · No fix listed CWE-119
Priority MEDIUM 45
Multiple buffer overflows in the (1) SNMP and (2) License Manager implementations in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(5) and 6.x before 6.1(1) and MDS 9000 devices 4.x and 5.x before 5.2(5) allow…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.03363 · Published 2013-04-25 · No fix listed CWE-119
Priority LOW 39
Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x before 6.1(1), Nexus 5000 and 5500 devices 4.x and 5.x before 5.1(3)N1…
CVSS 2.0HIGH 8.3· Adjacent network · No auth · Interaction — · EPSS 0.01372 · Published 2013-04-25 · No fix listed CWE-119
Priority LOW 31
Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers to cause a denial of service (device reset) via certain malformed IKE p…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05188 · Published 2005-11-18 · No fix listed
Priority LOW 35
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a de…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.10424 · Published 2004-03-18 · Fixed CWE-125
Priority LOW 33
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.07229 · Published 2004-03-18 · Fixed
Priority MEDIUM 51
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.09537 · Published 2004-03-18 · Fixed CWE-476