Advisories · Weakness
CWE-399.
Every Advisory and CVE whose sources give the weakness CWE-399, newest first.
-
A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Software and Cisco TelePresence Video Communication Server (VCS) Software could allow an authenticated, r…
- Cisco Expressway Series and Cisco TelePresence Video Communication Server
- CWE-399
-
Cisco Wide Area Application Services: A vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services…
- Cisco Wide Area Application Services
- CWE-399
-
A vulnerability in the implementation of the direct authentication feature in Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause an affected dev…
- Cisco Adaptive Security Appliance Software
- CWE-399
-
A vulnerability in SSL traffic decryption for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause depletion of system memory, aka a Firepower Detect…
- Cisco Firepower Detection Engine
- CWE-399
- CVSS 6.5 MediumCritical · KEVKEV
Cisco IOS: A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through…
- Cisco IOS
- CWE-399
- CVSS 7.5 HighCritical · KEVKEV
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthenticated, remote attacker to cause high CP…
- Cisco IOS and IOS XE
- CWE-399
- CVSS 6.5 MediumCritical · KEVKEV
Cisco IOS: A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers…
- Cisco IOS
- CWE-399
- CVSS 7.5 HighCritical · KEVKEV
Cisco IOS: A vulnerability in the implementation of Network Address Translation (NAT) functionality…
- Cisco IOS
- CWE-399
-
Cisco IOS XE: A vulnerability in the wireless controller manager of Cisco IOS XE could allow an…
- Cisco IOS XE
- CWE-399
-
Cisco Wide Area Application Services: A vulnerability in the HTTP web interface for Cisco Wide Area Application Services (WAAS)…
- Cisco Wide Area Application Services
- CWE-399
-
Cisco Small Business SPA300, SPA500…: A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300…
- Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones
- CWE-399
-
Cisco IoT Field Network Director: A vulnerability in the TCP throttling process for Cisco IoT Field Network Director…
- Cisco IoT Field Network Director
- CWE-399
-
A vulnerability in the HTTP remote procedure call (RPC) service of set-top box (STB) receivers manufactured by Cisco for Yes could allow an unauthenticated, remote attacker to cause a denial of servi…
- Cisco Yes Set-Top Box
- CWE-399
- CVSS 7.5 HighCritical · KEVKEV
A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote attacker to cause the input queue of an affected syste…
- Cisco IOS and Cisco IOS XE
- CWE-399
-
Cisco IOS and Cisco IOS XE: A vulnerability in the IPv6 Simple Network Management Protocol (SNMP) code of Cisco IOS…
- Cisco IOS and Cisco IOS XE
- CWE-399
-
Cisco Virtualized Packet Core-Distributed Instance: A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized…
- Cisco Virtualized Packet Core-Distributed Instance
- CWE-399
-
A vulnerability in the Session Initiation Protocol (SIP) of the Cisco TelePresence Codec (TC) and Collaboration Endpoint (CE) Software could allow an unauthenticated, remote attacker to cause a TeleP…
- Cisco TelePresence Endpoint Denial of Service Vulnerability
- CWE-399
-
Cisco Identity Services Engine: A vulnerability in the TCP throttling process for the GUI of the Cisco Identity Services…
- Cisco Identity Services Engine
- CWE-399
-
Cisco Remote Expert Manager: A vulnerability in the TCP connection handling functionality of Cisco Remote Expert…
- Cisco Remote Expert Manager
- CWE-399
-
Cisco FirePOWER System Software: A vulnerability in the logging configuration of Secure Sockets Layer (SSL) policies for…
- Cisco FirePOWER System Software
- CWE-399
-
Cisco IP Phone 8851: A vulnerability in the Session Initiation Protocol (SIP) implementation of Cisco IP Phone…
- Cisco IP Phone 8851
- CWE-399
-
Cisco IOS XR: A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers…
- Cisco IOS XR
- CWE-399
-
A vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allow an unauthenticated, remote attacker to cause a denial of s…
- Cisco Wide Area Application Services SMART-SSL Accelerator
- CWE-399
-
A "Cisco Firepower Threat Defense 6.0.0 through 6.2.2 and Cisco ASA with FirePOWER Module Denial of Service" vulnerability in the access control policy of Cisco Firepower System Software could allow…
- Cisco Firepower Threat Defense and Cisco ASA with FirePOWER Module
- CWE-399
-
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service (DoS) condition.
- Cisco IOS XE Software
- CWE-399
-
Cisco Prime Network Registrar: A vulnerability in the DNS input packet processor for Cisco Prime Network Registrar could…
- Cisco Prime Network Registrar
- CWE-399
-
Cisco ASA Software: A vulnerability in the Internet Key Exchange Version 1 (IKEv1) XAUTH code of Cisco ASA…
- Cisco ASA Software
- CWE-399
-
Cisco ASA Software: A vulnerability in the IPsec code of Cisco ASA Software could allow an authenticated…
- Cisco ASA Software
- CWE-399
-
Cisco ASA Software: A vulnerability in the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) code…
- Cisco ASA Software
- CWE-399
-
Cisco ASA Software: A vulnerability in the DNS code of Cisco ASA Software could allow an unauthenticated…
- Cisco ASA Software
- CWE-399
-
A vulnerability in the TCP normalizer of Cisco Adaptive Security Appliance (ASA) Software (8.0 through 8.7 and 9.0 through 9.6) and Cisco Firepower Threat Defense (FTD) Software could allow an unauth…
- Cisco ASA Software and Cisco FTD Software
- CWE-399
-
A vulnerability in the detection engine parsing of Pragmatic General Multicast (PGM) protocol packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause a de…
- Cisco Firepower Detection Engine
- CWE-399
-
Cisco Wireless LAN Controller: A vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing in…
- Cisco Wireless LAN Controller
- CWE-399
-
A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6) and Cisco IOS XE (3.3 through 3.7) could allow an unauthenticated, remote attacker to cause a denial…
- Cisco IOS and IOS XE
- CWE-399
-
A vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0 through 12.4 and 15.0 through 15.6) and Cisco IOS XE (3.1 through 3.18) could allow an unauthenticated, re…
- Cisco IOS and IOS XE
- CWE-399
-
Cisco IOS XE: A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an…
- Cisco IOS XE
- CWE-399
-
Cisco NetFlow Generation Appliance: A vulnerability in the Stream Control Transmission Protocol (SCTP) decoder of the Cisco…
- Cisco NetFlow Generation Appliance
- CWE-399
-
A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) software could allow an unauthenticated, remote attacker to cause a re…
- Cisco Expressway Series Software and Cisco TelePresence VCS Software All versions prior to version X8.8.2 are vulnerable
- CWE-399
-
all versions of the ASA CX Context-Aware Security module: A vulnerability in the data plane IP fragment handler of the Cisco Adaptive Security…
- all versions of the ASA CX Context-Aware Security module
- CWE-399
- CVSS 7.1 High
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other…
- CWE-399