Input validation

A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to read the contents of arbitrary files. The vulnerability is due to insufficient input validation for a specific CLI command. An attacker could exploit this vulnerability by issuing a crafted...

CVE-2017-12338

A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to read the contents of arbitrary files. The vulnerability is due to insufficient input validation for a specific CLI command. An attacker could exploit this vulnerability by issuing a crafted...

CVE-2012-5010: Undefined Security Weakness

ASA 5515-X Adaptive Security Appliance Adaptive Security Appliance ASA Software 9.4.x before 9.4.1 Interim, 9.2.x before 9.2.4 Interim, ASA 5510 Adaptive Security Appliance Adaptive Security Appliance ASA Software 8.4.x before 8.4.7 Interim, 8.2.x before 8.2.5 Interim, 9.1.x before 9.1.6 Interim,...

Update Rollup 9 for System Center 2012 R2 Virtual Machine Manager

Update Rollup 9 for System Center 2012 R2 Virtual Machine Manager Introduction This article describes the issues that are fixed in Update Rollup 9 for Microsoft System Center 2012 R2 Virtual Machine Manager. There are three updates available for System Center 2012 R2 Virtual Machine Manager: one...

Amazon Linux AMI : 389-ds-base (ALAS-2016-773)

CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack It was found that 389 Directory Server was vulnerable to a remote password disclosure via timing attack. A remote attacker could possibly use this flaw to retrieve directory server password after many tries. CVE-2016-541...

Medium: 389-ds-base

Issue Overview: CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack It was found that 389 Directory Server was vulnerable to a remote password disclosure via timing attack. A remote attacker could possibly use this flaw to retrieve directory server password after many...

Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64 (20161115)

Security Fixes : - It was found that 389 Directory Server was vulnerable to a flaw in which the default ACI Access Control Instructions could be read by an anonymous user. This could lead to leakage of sensitive information. CVE-2016-5416 - An information disclosure flaw was found in 389 Director...

CVE-2016-6457

A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure ACI could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on the affected device. This vulnerability affects Cisco Nexus 9000 Series Leaf Switches TO...

Design/Logic Flaw

A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure ACI could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on the affected device. This vulnerability affects Cisco Nexus 9000 Series Leaf Switches TO...

CVE-2016-6457

CVE-2016-6457 affects Cisco Nexus 9000 Series Platform Leaf Switches (TOR) in ACI Mode and the Cisco APIC. The root cause is improper handling of a type of Layer 2 control plane traffic, allowing an unauthenticated, adjacent attacker to trigger a DoS on the affected device. Affected releases incl...

CVE-2016-6457

A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure ACI could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on the affected device. This vulnerability affects Cisco Nexus 9000 Series Leaf Switches TO...

CVE-2016-6457: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure ACI could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on the affected device. This vulnerability affects Cisco Nexus 9000 Series Leaf Switches TO...

Oracle Linux 6 : 389-ds-base (ELSA-2016-2765)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2765 advisory. - Resolves: 1358559 - CVE-2016-4992 389-ds-base: Information disclosure via repeated use of LDAP ADD operation - Resolves: 1361421 - CVE-2016-5416...

Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability

A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure ACI could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on the affected device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions...

App Container docker2aci Wireless Loop Denial of Service Vulnerability

docker2aci is a set of tools for converting Docker a technology for cross-platform distribution of applications developed in the Go language images into ACIs format. A denial of service vulnerability exists in App Container docker2aci, which can be exploited by an attacker to cause the program to...

Code injection

Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03h and 1.1 before 1.11j and Nexus 9000 ACI Mode switches with software before 11.03h and 11.1 before 11.11j allow remote authenticated users to bypass intended RBAC restrictions via crafted REST requests, aka...

CVE-2015-6398

Cisco Nexus 9000 Application Centric Infrastructure ACI Mode switches with software before 11.01c allow remote attackers to cause a denial of service device reload via an IPv4 ICMP packet with the IP Record Route option, aka Bug ID CSCuq57512...

Design/Logic Flaw

Cisco Nexus 9000 Application Centric Infrastructure ACI Mode switches with software before 11.01c allow remote attackers to cause a denial of service device reload via an IPv4 ICMP packet with the IP Record Route option, aka Bug ID CSCuq57512...

CVE-2015-6398

Cisco Nexus 9000 Application Centric Infrastructure ACI Mode switches with software before 11.01c allow remote attackers to cause a denial of service device reload via an IPv4 ICMP packet with the IP Record Route option, aka Bug ID CSCuq57512...

CVE-2015-6398

Cisco Nexus 9000 Series switches operating in ACI Mode with software earlier than 11.0(1c) are affected by CVE-2015-6398. The issue arises from improper handling of IPv4 ICMP packets that use the Record Route (Type 7) option, which can allow an unauthenticated remote attacker to trigger a denial-...