PT-2015-1620 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.47 through 8.61.2 Description: The issue is related to the SNMP implementation and is caused by resource management errors. It allows a remote authenticated user to cause a denial of...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-0764

Cisco Unified MeetingPlace 8.6(1.9) is affected by CVE-2015-0764, where an unauthenticated, remote attacker can read arbitrary files through a crafted resource request. The root cause is improper handling of resource requests by the affected device, enabling arbitrary file download. The vulnerabi...

CVE-2015-0758

The web-based user interface in Cisco Unified MeetingPlace 8.61.9 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, aka Bug ID CSCus97452...

Cisco ASA VPN XML Parser DoS Vulnerability (cisco-sa-20150408-asa)

Cisco ASA is prone to a DoS vulnerability in the VPN XML Parser. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2015-0705

Cross-site request forgery CSRF vulnerability in the SOAP API endpoints of the web-services directory in Cisco Unified MeetingPlace 8.61.9 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts, aka Bug ID CSCus97494...

Unrestricted file upload

Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.61.9 allows remote authenticated users to execute arbitrary code by using the languageShortName parameter to upload a file that provides shell access, aka Bug ID CSCus95712...

CVE-2015-0703

Cisco Unified MeetingPlace 8.6(1.9) admin web interface is affected by a reflected cross-site scripting (XSS) vulnerability. The issue stems from improper validation of user-supplied input, allowing an unauthenticated, remote attacker to craft a malicious link that executes arbitrary JavaScript/H...

Cisco Unity Connection Multiple Remote DoS (cisco-sa-20150401-cuc)

The version of Cisco Unity Connection installed on the remote host is 8.5 prior to 8.51SU7 / 8.6 prior to 8.62aSU4 / 9.x prior to 9.12SU2 / 10.x prior to 10.01SU1. It is, therefore, affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists in the Connecti...

CVE-2015-0615

CVE-2015-0615 affects Cisco Unity Connection; DoS via SIP call handling when SIP trunk integration is enabled. Affected versions: 8.5 (before 8.5(1)SU7), 8.6 (before 8.6(2a)SU4), 9.x (before 9.1(2)SU2), 10.0 (before 10.0(1)SU1). Root cause: SIP session termination can fail to release resources, l...

Cisco ASA IKEv2 DoS Vulnerability (cisco-sa-20141008-asa)

A vulnerability in the IKEv2 code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause the reload of an affected system. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

CVE-2014-6123

IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow local users to obtain sensitive credential information by reading installation logs...

CVE-2014-6122

IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote authenticated users to write to arbitrary folders, and consequently execute arbitrary...

CVE-2014-3384

The IKEv2 implementation in Cisco ASA Software 8.4 before 8.47.15, 8.6 before 8.61.14, 9.0 before 9.04.8, and 9.1 before 9.15.1 allows remote attackers to cause a denial of service device reload via a crafted packet that is sent during tunnel creation, aka Bug ID CSCum96401...

CVE-2014-2626

Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 aka Shunra Network Virtualization allows remote attackers to create files, and consequently execute arbitrary code, via crafted input, aka ZDI-CAN-2024...

Directory traversal

Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 aka Shunra Network Virtualization allows remote attackers to create files, and consequently execute arbitrary code, via crafted input, aka ZDI-CAN-2024...

Directory traversal

Directory traversal vulnerability in the storedNtxFile function in HP Network Virtualization 8.6 aka Shunra Network Virtualization allows remote attackers to read arbitrary files via crafted input, aka ZDI-CAN-2023...

CVE-2014-2114

CVE-2014-2114 concerns a cross-site scripting (XSS) vulnerability in the Cisco Emergency Responder (ER) software, specifically the UserServlet, affecting 8.6 and earlier. The issue stems from insufficient input validation on a parameter, allowing an unauthenticated, remote attacker to inject arbi...

Citrix XenMobile Device Manager服务器信息泄露漏洞(CVE-2014-1663)

BUGTRAQ ID: 65348 CVECAN ID: CVE-2014-1663 Citrix XenMobile设备管理器是企业级移动设备管理解决方案。 Citrix XenMobile设备管理器8.0.1, 8.5, 8.6版本存在不明细节信息泄露漏洞，成功利用后可使远程攻击者获取敏感信息。 0 Citrix XenMobile Device Manager 8.x Citrix XenMobile Device Manager 7.x Citrix XenMobile Device Manager 6.x 厂商补丁： Citrix ------...

Cisco Unified Presence Server Web接口SQL注入漏洞

BUGTRAQ ID: 64551 CVECAN ID: CVE-2013-6983 Cisco Unified Presence是由Jabber XMPP驱动的企业级平台，能够收集有关用户可用性和通信功能的信息，以提供统一用户在网状态，为思科统一通信和关键业务应用提供支持基于在网状态的通信。 Cisco Unified Presence Server 8.64版本的Web接口存在安全漏洞，可使经过身份验证的远程攻击者影响受影响系统的机密性、完整性、可用性。此漏洞源于没有正确验证SQL查询内的用户输入。攻击者通过特制的URL，包括SQL语句利用此漏洞。 0 Cisco Unified...