Cisco ASA Appliance 8.x WebVPN DOM Wrapper Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/35476/info Cisco ASA Adaptive Security Appliance is prone to a cross-site scripting vulnerability because its Web VPN fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...

CVE-2014-2151

The WebVPN portal in Cisco Adaptive Security Appliance ASA Software 8.4.7.15 and earlier allows remote authenticated users to obtain sensitive information via a crafted JavaScript file, aka Bug ID CSCui04520...

Design/Logic Flaw

The WebVPN portal in Cisco Adaptive Security Appliance ASA Software 8.4.7.15 and earlier allows remote authenticated users to obtain sensitive information via a crafted JavaScript file, aka Bug ID CSCui04520...

CVE-2014-2151

The WebVPN portal in Cisco Adaptive Security Appliance ASA Software 8.4.7.15 and earlier allows remote authenticated users to obtain sensitive information via a crafted JavaScript file, aka Bug ID CSCui04520...

CVE-2014-2151

Cisco ASA WebVPN Information Disclosure (CVE-2014-2151): The WebVPN portal in ASA Software 8.4(.7.15) and earlier is vulnerable to information disclosure via a crafted JavaScript file due to improper input validation. An authenticated remote attacker could view sensitive information; exploitation...

Cisco Adaptive Security Appliances Multiple Vulnerabilities in OpenSSL

The remote Cisco ASA device is running a software version known to be affected by multiple OpenSSL related vulnerabilities : - A buffer overflow error exists related to invalid DTLS fragment handling that could lead to execution of arbitrary code. Note this issue only affects OpenSSL when used as...

Cisco Adaptive Security Appliance Software WebVPN Information Disclosure Vulnerability

A vulnerability in the WebVPN portal of Cisco Adaptive Security Appliance ASA could allow an authenticated, remote attacker to view sensitive information from the affected system. The vulnerability is due to improper input validation in the WebVPN portal. An attacker could exploit this...

Cisco ASA RADIUS radius_rcv_auth DoS (CSCun69561)

According to its banner, the version of the remote Cisco ASA device is affected by a denial of service vulnerability due to improper validation of RADIUS packets. A remote attacker that knows the RADIUS shared secret could cause a denial of service by injecting a specially crafted packet during a...

oclHashcat v1.2 - GPGPU-based Multi-hash Cracker

oclHashcat is a GPGPU-based multi-hash cracker using a brute-force attack implemented as mask attack, combinator attack, dictionary attack, hybrid attack, mask attack, and rule-based attack. This GPU cracker is a fusioned version of oclHashcat-plus and oclHashcat-lite. GPU Driver requirements: NV...

http-vuln-cve2014-2126 NSE Script

Detects whether the Cisco ASA appliance is vulnerable to the Cisco ASA ASDM Privilege Escalation Vulnerability CVE-2014-2126. See also: http-vuln-cve2014-2127.nse http-vuln-cve2014-2128.nse http-vuln-cve2014-2129.nse Script Arguments tls.servername See the documentation for the tls library...

http-vuln-cve2014-2128 NSE Script

Detects whether the Cisco ASA appliance is vulnerable to the Cisco ASA SSL VPN Authentication Bypass Vulnerability CVE-2014-2128. See also: http-vuln-cve2014-2126.nse http-vuln-cve2014-2127.nse http-vuln-cve2014-2129.nse Script Arguments tls.servername See the documentation for the tls library...

http-vuln-cve2014-2127 NSE Script

Detects whether the Cisco ASA appliance is vulnerable to the Cisco ASA SSL VPN Privilege Escalation Vulnerability CVE-2014-2127. See also: http-vuln-cve2014-2126.nse http-vuln-cve2014-2128.nse http-vuln-cve2014-2129.nse Script Arguments tls.servername See the documentation for the tls library...

http-vuln-cve2014-2129 NSE Script

Detects whether the Cisco ASA appliance is vulnerable to the Cisco ASA SIP Denial of Service Vulnerability CVE-2014-2129. See also: http-vuln-cve2014-2126.nse http-vuln-cve2014-2127.nse http-vuln-cve2014-2128.nse Script Arguments tls.servername See the documentation for the tls library...

Cisco Adaptive Security Appliance (ASA) SSL VPN Portal Detection (HTTP)

HTTP based detection of the SSL VPN Portal running on a Cisco Adaptive Security Appliance ASA. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2014-3264

Cisco Adaptive Security Appliance ASA Software 9.1.5 and earlier allows remote authenticated users to cause a denial of service device reload via crafted attributes in a RADIUS packet, aka Bug ID CSCun69561...

Code injection

Cisco Adaptive Security Appliance ASA Software 9.1.5 and earlier allows remote authenticated users to cause a denial of service device reload via crafted attributes in a RADIUS packet, aka Bug ID CSCun69561...

CVE-2014-3264

CVE-2014-3264 affects Cisco ASA Software 9.1(.5) and earlier. The vulnerability lies in improper validation of RADIUS packets, allowing remote authenticated users to cause a denial of service (device reload) by sending crafted RADIUS attributes during an authentication exchange, requiring knowled...

CVE-2014-3264

Cisco Adaptive Security Appliance ASA Software 9.1.5 and earlier allows remote authenticated users to cause a denial of service device reload via crafted attributes in a RADIUS packet, aka Bug ID CSCun69561...

Cisco Adaptive Security Appliance Software Crafter RADIUS Packets Denial of Service Vulnerability

A vulnerability in the implementation of the Remote Authentication Dial-in User Services RADIUS code of Cisco ASA Software could allow an authenticated, remote attacker to cause an affected system to reload. The vulnerability is due to insufficient validation of RADIUS packets including crafted...

Cisco ASA DHCPv6 Relay DoS (CSCun45520)

According to its banner, the version of the remote Cisco ASA device is affected by a denial of service vulnerability due to improper validation of packets when the IPv6 for DHCP DHCPv6 relay feature is enabled. An unauthenticated attacker on an adjacent network could cause a denial of service by...