Vulnerabilities > Cisco

DATE CVE VULNERABILITY TITLE RISK
2019-07-17 CVE-2019-1917 Improper Authentication vulnerability in Cisco Vision Dynamic Signage Director
A vulnerability in the REST API interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on an affected system.
network
low complexity
cisco CWE-287
critical
9.8
2019-07-10 CVE-2019-1873 Improper Input Validation vulnerability in Cisco products
A vulnerability in the cryptographic driver for Cisco Adaptive Security Appliance Software (ASA) and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reboot unexpectedly.
network
low complexity
cisco CWE-20
8.6
2019-07-06 CVE-2019-1933 Improper Input Validation vulnerability in Cisco Email Security Appliance 11.1.2023
A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured filters on the device.
network
low complexity
cisco CWE-20
7.4
2019-07-06 CVE-2019-1932 Insufficient Verification of Data Authenticity vulnerability in Cisco Advanced Malware Protection for Endpoints 6.2(3)
A vulnerability in Cisco Advanced Malware Protection (AMP) for Endpoints for Windows could allow an authenticated, local attacker with administrator privileges to execute arbitrary code.
local
low complexity
cisco CWE-345
6.7
2019-07-06 CVE-2019-1931 Cross-site Scripting vulnerability in Cisco Secure Firewall Management Center
Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device.
network
low complexity
cisco CWE-79
6.1
2019-07-06 CVE-2019-1930 Cross-site Scripting vulnerability in Cisco Secure Firewall Management Center
Multiple vulnerabilities in the RSS dashboard in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device.
network
low complexity
cisco CWE-79
6.1
2019-07-06 CVE-2019-1922 NULL Pointer Dereference vulnerability in Cisco products
A vulnerability in Cisco SIP IP Phone Software for Cisco IP Phone 7800 Series and 8800 Series could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected phone.
network
low complexity
cisco CWE-476
7.5
2019-07-06 CVE-2019-1921 Improper Input Validation vulnerability in Cisco Email Security Appliance 12.0.0419
A vulnerability in the attachment scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass configured content filters on the device.
network
low complexity
cisco CWE-20
7.5
2019-07-06 CVE-2019-1911 Containment Errors (Container Errors) vulnerability in Cisco Hosted Collaboration Solution
A vulnerability in the CLI of Cisco Unified Communications Domain Manager (Cisco Unified CDM) Software could allow an authenticated, local attacker to escape the restricted shell.
local
low complexity
cisco CWE-216
7.8
2019-07-06 CVE-2019-1909 Improper Input Validation vulnerability in Cisco IOS XR
A vulnerability in the implementation of Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected system.
network
high complexity
cisco CWE-20
5.9