Vulnerabilities > Cisco

DATE CVE VULNERABILITY TITLE RISK
2019-08-08 CVE-2019-1954 Improper Input Validation vulnerability in Cisco Webex Meetings Server
A vulnerability in the web-based management interface of Cisco Webex Meetings Server Software could allow an unauthenticated, remote attacker to redirect a user to an undesired web page.
network
low complexity
cisco CWE-20
6.1
2019-08-08 CVE-2019-1953 Information Exposure Through Log Files vulnerability in Cisco Enterprise Network Function Virtualization Infrastructure
A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to view a password in clear text.
network
low complexity
cisco CWE-532
6.5
2019-08-08 CVE-2019-1952 Improper Input Validation vulnerability in Cisco Enterprise Network Function Virtualization Infrastructure
A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to overwrite or read arbitrary files.
local
low complexity
cisco CWE-20
6.7
2019-08-08 CVE-2019-1951 Unspecified vulnerability in Cisco Sd-Wan Firmware
A vulnerability in the packet filtering features of Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters.
network
low complexity
cisco
5.8
2019-08-08 CVE-2019-1949 Cross-site Scripting vulnerability in Cisco Secure Firewall Management Center
A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system.
network
low complexity
cisco CWE-79
4.8
2019-08-08 CVE-2019-1946 Improper Authentication vulnerability in Cisco Enterprise Network Function Virtualization Infrastructure
A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to bypass authentication and get limited access to the web-based management interface.
network
low complexity
cisco CWE-287
6.5
2019-08-07 CVE-2019-1945 Improper Input Validation vulnerability in Cisco Adaptive Security Appliance Software
Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established.
local
low complexity
cisco CWE-20
7.8
2019-08-07 CVE-2019-1944 Incorrect Permission Assignment for Critical Resource vulnerability in Cisco Adaptive Security Appliance Software
Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated, local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established.
local
low complexity
cisco CWE-732
7.3
2019-08-07 CVE-2019-1934 Unspecified vulnerability in Cisco Adaptive Security Appliance Software
A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to elevate privileges and execute administrative functions on an affected device.
network
low complexity
cisco
8.8
2019-08-07 CVE-2019-1929 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Cisco products
Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system.
local
low complexity
cisco CWE-119
7.8