https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 18:30:11 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-09169 bdu:2024-09169 https://cve.radiocsirt.org/vuln/bdu:2024-09169 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0813 certfr-2024-avi-0813 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0813 https://cve.radiocsirt.org/vuln/cisco-sa-httpsrvr-dos-yozthut <p>A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a null pointer dereference when accessing specific URLs. An attacker could exploit this vulnerability by sending crafted HTTP traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, causing a DoS condition on the affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is part of the September 2024 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: September 2024 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication [&#34;https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75169&#34;].</p> <p>A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a null pointer dereference when accessing specific URLs. An attacker could exploit this vulnerability by sending crafted HTTP traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, causing a DoS condition on the affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is part of the September 2024 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: September 2024 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication [&#34;https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75169&#34;].</p> https://cve.radiocsirt.org/vuln/cisco-sa-httpsrvr-dos-yozthut https://cve.radiocsirt.org/vuln/euvd-2026-188230 EUVD-2026-188230 https://cve.radiocsirt.org/vuln/euvd-2026-188230 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20436 <p>A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a null pointer dereference when accessing specific URLs. An attacker could exploit this vulnerability by sending crafted HTTP traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, causing a DoS condition on the affected device.</p> <p>A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a null pointer dereference when accessing specific URLs. An attacker could exploit this vulnerability by sending crafted HTTP traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, causing a DoS condition on the affected device.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-20436 https://cve.radiocsirt.org/vuln/ghsa-mm34-xr6q-46qf <p>A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.</p> <p>This vulnerability is due to a null pointer dereference when accessing specific URLs. An attacker could exploit this vulnerability by sending crafted HTTP traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, causing a DoS condition on the affected device.</p> <p>A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.</p> <p>This vulnerability is due to a null pointer dereference when accessing specific URLs. An attacker could exploit this vulnerability by sending crafted HTTP traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, causing a DoS condition on the affected device.</p> https://cve.radiocsirt.org/vuln/ghsa-mm34-xr6q-46qf https://cve.radiocsirt.org/vuln/gsd-2024-20436 gsd-2024-20436 https://cve.radiocsirt.org/vuln/gsd-2024-20436 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2221 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco IOS XE ausnutzen, um einen Denial of Service Angriff durchzuführen, die Zugriffskontrollliste (ACL) vor der Authentifizierung zu umgehen oder Daten zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco IOS XE ausnutzen, um einen Denial of Service Angriff durchzuführen, die Zugriffskontrollliste (ACL) vor der Authentifizierung zu umgehen oder Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2221