CVSS: 7.8EPSS: 0%CPEs: 17EXPL: 0CVE-2009-2871
https://notcve.org/view.php?id=CVE-2009-2871
28 Sep 2009 — Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when SSLVPN sessions, SSH sessions, or IKE encrypted nonces are enabled, allows remote attackers to cause a denial of service (device reload) via a crafted encrypted packet, aka Bug ID CSCsq24002. Vulnerabilidad sin especificar en Cisco IOS v12.2 y v12.4, cuando estan activadas las sesiones SSLVPN, las sesiones SSH o las "nonces" (cadenas de caracteres de un sólo uso) encriptadas IKE, permite a usuarios remotos provocar una denegación de servicio (recarg... • http://tools.cisco.com/security/center/viewAlert.x?alertId=18892 •
CVSS: 7.5EPSS: 1%CPEs: 288EXPL: 0CVE-2009-2872
https://notcve.org/view.php?id=CVE-2009-2872
28 Sep 2009 — Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote attackers to cause a denial of service (device reload) via a malformed packet that is not properly handled during switching from one tunnel to a second tunnel, aka Bug IDs CSCsh97579 and CSCsq31776. Cisco IOS v12.0 hasta la v12.4, cuando están activados los túneles basados en IP y la utilidad "Cisco Express Forwarding", permite a atacantes remotos provocar una denegación de servicio (recarg... • http://osvdb.org/58333 •
CVSS: 7.5EPSS: 0%CPEs: 304EXPL: 0CVE-2009-2873
https://notcve.org/view.php?id=CVE-2009-2873
28 Sep 2009 — Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote attackers to cause a denial of service (device reload) via malformed packets, aka Bug ID CSCsx70889. Cisco IOS v12.0 hasta 12.4, cuando está habilitada la funcionalidad de túnel basado en IP y el Cisco Express Forwarding, permite a atacantes remotos provocar una denegación de servicio (reinicio del dispositivo) mediante paquetes deformados, también conocido como Bug ID CSCsx70889. • http://osvdb.org/58334 •
CVSS: 7.8EPSS: 1%CPEs: 6EXPL: 0CVE-2009-2051
https://notcve.org/view.php?id=CVE-2009-2051
27 Aug 2009 — Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), and 7.x before 7.1(2) allow remote attackers to cause a denial of service (device reload or voice-services outage) via a malformed SIP INVITE message that triggers an improper call to the sipSafeStrlen function, aka Bug IDs CSCsz40392 and CSCsz43987. Cisco Unified Communications Manager (también con... • http://osvdb.org/57453 •
CVSS: 7.5EPSS: 1%CPEs: 15EXPL: 0CVE-2009-1168
https://notcve.org/view.php?id=CVE-2009-1168
30 Jul 2009 — Cisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 through 12.0(33)S4, 12.0(32)SY8 through 12.0(32)SY9, 12.2(33)SXI1, 12.2XNC before 12.2(33)XNC2, 12.2XND before 12.2(33)XND1, and 12.4(24)T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to cause a denial of service (memory corruption and device reload) by using an RFC4271 peer to send an update with a long series of AS numbers, aka Bug ID CSCsy86021. Cisco IOS v12.0(32)S12 hasta v12.... • http://secunia.com/advisories/36046 • CWE-399: Resource Management Errors •
CVSS: 7.5EPSS: 1%CPEs: 15EXPL: 0CVE-2009-2049
https://notcve.org/view.php?id=CVE-2009-2049
30 Jul 2009 — Cisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 through 12.0(33)S4, 12.0(32)SY8 through 12.0(32)SY9, 12.2(33)SXI1 through 12.2(33)SXI2, 12.2XNC before 12.2(33)XNC2, 12.2XND before 12.2(33)XND1, and 12.4(24)T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to cause a denial of service (device reload) by using an RFC4271 peer to send a malformed update, aka Bug ID CSCta33973. Cisco IOS v12.0(32)S12 hasta v12.0(32)S13 y v12.0(33)S3 ha... • http://secunia.com/advisories/36046 • CWE-16: Configuration •
CVSS: 6.1EPSS: 17%CPEs: 2EXPL: 2CVE-2009-1220 – Cisco ASA Appliance 7.x/8.0 WebVPN - Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2009-1220
01 Apr 2009 — Cross-site scripting (XSS) vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances (ASA) 5520 with software 7.2(4)30 and earlier 7.2 versions including 7.2(2)22, and 8.0(4)28 and earlier 8.0 versions, when clientless mode is enabled, allows remote attackers to inject arbitrary web script or HTML via the Host HTTP header. Una vulnerabilidad de tipo cross-site scripting (XSS) en archivo +webvpn+/index.html en el WebVPN en los Adaptive Security Appliances (ASA) 5520 de Cisco co... • https://www.exploit-db.com/exploits/32878 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.8EPSS: 1%CPEs: 77EXPL: 0CVE-2009-0626
https://notcve.org/view.php?id=CVE-2009-0626
27 Mar 2009 — The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (device reload or hang) via a crafted HTTPS packet. La funcionalidad SSLVPN en Cisco IOS v12.3 hasta v12.4 permite a atacantes remotos provocar una denegación de servicio (reinicio o cuelgue del dispositivo) mediante paquetes HTTPS manipulados. • http://secunia.com/advisories/34438 • CWE-399: Resource Management Errors •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2009-0635
https://notcve.org/view.php?id=CVE-2009-0635
27 Mar 2009 — Memory leak in the Cisco Tunneling Control Protocol (cTCP) encapsulation feature in Cisco IOS 12.4, when an Easy VPN (aka EZVPN) server is enabled, allows remote attackers to cause a denial of service (memory consumption and device crash) via a sequence of TCP packets. Perdida de memoria en la funcionalidad de encapsulado de Cisco Tunneling Control Protocol (cTCP) en Cisco IOS v12.4, cuando se ha habilitado un servidor Easy VPN (conocido como EZVPN), permite a atacantes remotos provocar una denegación de se... • http://secunia.com/advisories/34438 • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 1%CPEs: 310EXPL: 0CVE-2009-0636
https://notcve.org/view.php?id=CVE-2009-0636
27 Mar 2009 — Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when SIP voice services are enabled, allows remote attackers to cause a denial of service (device crash) via a valid SIP message. Vulnerabilidad no especificada en Cisco IOS v12.0 hasta v12.4, cuando están habilitados los servicios de voz SIP, permite a atacantes remotos provocar una denegación de servicio (caída del dispositivo) mediante un mensaje SIP válido. • http://secunia.com/advisories/34438 •