Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco security agent 5.2 vulnerabilities and exploits

(subscribe to this query)

6.5
CVSSv2
CVE-2010-0147
SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors....
Cisco Security Agent 5.1Cisco Security Agent 5.2Cisco Security Agent 6.0
10
CVSSv2
CVE-2011-0364
The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request....
Cisco Security Agent 5.1Cisco Security Agent 5.2Cisco Security Agent 6.0
10
CVSSv2
CVE-2007-5580
Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2 before 5.2.0.238 on Windows allows remote attackers to execute arbitrary code via a crafted SMB packet in a TCP session on port (1) 139 or (2)...
Cisco Security Agent 2.1Cisco Security Agent 3Cisco Security Agent 4.0Cisco Security Agent 4.0.1Cisco Security Agent 4.0.2Cisco Security Agent 4.0.3Cisco Security Agent 4.0.3.728Cisco Security Agent 4.5Cisco Security Agent 4.5.1Cisco Security Agent 4.5.1.639Cisco Security Agent 4.5.1.657Cisco Security Agent 4.5.1.659Cisco Security Agent 5.0Cisco Security Agent 5.0.0.201Cisco Security Agent 5.0.193Cisco Security Agent 5.1Cisco Security Agent 5.1.79Cisco Security Agent 5.2
6.8
CVSSv2
CVE-2010-0146
Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authenticated users to read arbitrary files via unspecified vectors....
Cisco Security Agent 6.0
7.8
CVSSv2
CVE-2010-0148
Unspecified vulnerability in Cisco Security Agent 5.2 before 5.2.0.285, when running on Linux, allows remote attackers to cause a denial of service (kernel panic) via "a series of TCP packets."...
Cisco Security Agent 5.2
7.8
CVSSv2
CVE-2011-3192
The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in...
Apache Http Server 1.3Apache Http Server 1.3.0Apache Http Server 1.3.1Apache Http Server 1.3.1.1Apache Http Server 1.3.2Apache Http Server 1.3.3Apache Http Server 1.3.4Apache Http Server 1.3.5Apache Http Server 1.3.6Apache Http Server 1.3.7Apache Http Server 1.3.8Apache Http Server 1.3.9Apache Http Server 1.3.10Apache Http Server 1.3.11Apache Http Server 1.3.12Apache Http Server 1.3.13Apache Http Server 1.3.14Apache Http Server 1.3.15Apache Http Server 1.3.16Apache Http Server 1.3.17Apache Http Server 1.3.18Apache Http Server 1.3.19Apache Http Server 1.3.20Apache Http Server 1.3.22Apache Http Server 1.3.23Apache Http Server 1.3.24Apache Http Server 1.3.25Apache Http Server 1.3.26Apache Http Server 1.3.27Apache Http Server 1.3.28Apache Http Server 1.3.29Apache Http Server 1.3.30Apache Http Server 1.3.31Apache Http Server 1.3.32Apache Http Server 1.3.33Apache Http Server 1.3.34Apache Http Server 1.3.35Apache Http Server 1.3.36Apache Http Server 1.3.37Apache Http Server 1.3.38Apache Http Server 1.3.39Apache Http Server 1.3.41Apache Http Server 1.3.42Apache Http Server 1.3.65Apache Http Server 1.3.68Apache Http Server 2.0Apache Http Server 2.0.9Apache Http Server 2.0.28Apache Http Server 2.0.32Apache Http Server 2.0.34Apache Http Server 2.0.35Apache Http Server 2.0.36Apache Http Server 2.0.37Apache Http Server 2.0.38Apache Http Server 2.0.39Apache Http Server 2.0.40Apache Http Server 2.0.41Apache Http Server 2.0.42Apache Http Server 2.0.43Apache Http Server 2.0.44Apache Http Server 2.0.45Apache Http Server 2.0.46Apache Http Server 2.0.47Apache Http Server 2.0.48Apache Http Server 2.0.49Apache Http Server 2.0.50Apache Http Server 2.0.51Apache Http Server 2.0.52Apache Http Server 2.0.53Apache Http Server 2.0.54Apache Http Server 2.0.55Apache Http Server 2.0.56Apache Http Server 2.0.57Apache Http Server 2.0.58Apache Http Server 2.0.59Apache Http Server 2.0.60Apache Http Server 2.0.61Apache Http Server 2.0.63Apache Http Server 2.0.64Apache Http Server 2.2.0Apache Http Server 2.2.1Apache Http Server 2.2.2Apache Http Server 2.2.3Apache Http Server 2.2.4Apache Http Server 2.2.6Apache Http Server 2.2.8Apache Http Server 2.2.9Apache Http Server 2.2.10Apache Http Server 2.2.11Apache Http Server 2.2.12Apache Http Server 2.2.13Apache Http Server 2.2.14Apache Http Server 2.2.15Apache Http Server 2.2.16Apache Http Server 2.2.18Apache Http Server 2.2.19
1.8
CVSSv2
CVE-2015-1798
The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p2 requires a correct MAC only if the MAC field has a nonzero length, which makes it easier for man-in-the-middle attackers to spoof packets by omitting the MAC....
Ntp Ntp
4.3
CVSSv2
CVE-2015-1799
The symmetric-key feature in the receive function in ntp_proto.c in ntpd in NTP 3.x and 4.x before 4.2.8p2 performs state-variable updates upon receiving certain invalid packets, which makes it easier for man-in-the-middle attackers to cause a denial of service (synchronization...
Ntp Ntp
5
CVSSv2
CVE-2014-8275
OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprint-based certificate-blacklist protection mechanism by including crafted data within a...
Openssl OpensslOpenssl Openssl 1.0.0aOpenssl Openssl 1.0.0bOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0dOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0fOpenssl Openssl 1.0.0gOpenssl Openssl 1.0.0hOpenssl Openssl 1.0.0iOpenssl Openssl 1.0.0jOpenssl Openssl 1.0.0kOpenssl Openssl 1.0.0lOpenssl Openssl 1.0.0mOpenssl Openssl 1.0.0nOpenssl Openssl 1.0.0oOpenssl Openssl 1.0.1aOpenssl Openssl 1.0.1bOpenssl Openssl 1.0.1cOpenssl Openssl 1.0.1dOpenssl Openssl 1.0.1eOpenssl Openssl 1.0.1fOpenssl Openssl 1.0.1gOpenssl Openssl 1.0.1hOpenssl Openssl 1.0.1iOpenssl Openssl 1.0.1j
5
CVSSv2
CVE-2015-0206
Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate records for the next epoch, leading to failure of replay...
Openssl Openssl 1.0.0aOpenssl Openssl 1.0.0bOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0dOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0fOpenssl Openssl 1.0.0gOpenssl Openssl 1.0.0hOpenssl Openssl 1.0.0iOpenssl Openssl 1.0.0jOpenssl Openssl 1.0.0kOpenssl Openssl 1.0.0lOpenssl Openssl 1.0.0mOpenssl Openssl 1.0.0nOpenssl Openssl 1.0.0oOpenssl Openssl 1.0.1aOpenssl Openssl 1.0.1bOpenssl Openssl 1.0.1cOpenssl Openssl 1.0.1dOpenssl Openssl 1.0.1eOpenssl Openssl 1.0.1fOpenssl Openssl 1.0.1gOpenssl Openssl 1.0.1hOpenssl Openssl 1.0.1iOpenssl Openssl 1.0.1j
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-24686CVE-2021-21298CVE-2021-69420server-side request forgeryCVE-2021-23957microsoftSSTI.netSQLCVE-2021-21273CVE-2021-25281