9 matches found
CVE-2017-6745: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability in the cache server within Cisco Videoscape Distribution Suite VDS for Television 3.25ES1 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on a targeted appliance. The vulnerability is due to excessive mapped connections exhausting the...
CVE-2016-6418: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Cisco Videoscape Distribution Suite Service Manager VDS-SM 3.0 through 3.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCva14552...
Cisco VDS-IS Resource Management Error Vulnerability
Cisco VDS-IS Videoscape Distribution Suite for Internet Streaming Cisco's set of content distribution system solutions for Internet streaming media. A security vulnerability exists in Cisco VDS-IS because the program fails to properly manage TCP sessions in the TCP FIN waiting state. A remote...
CVE-2016-1353: Undefined Security Weakness
The TCP implementation in Cisco Videoscape Distribution Suite for Internet Streaming VDS-IS 3.30, 3.31, 4.00, and 4.10 does not properly initiate new TCP sessions when a previous session is in a FIN wait state, which allows remote attackers to cause a denial of service TCP outage via vectors...
CVE-2015-6417
Cisco Videoscape Distribution Suite Service Manager VDS-SM 3.4.0 and earlier does not always use RBAC for backend database access, which allows remote authenticated users to read or write to database entries via 1 the GUI or 2 a crafted HTTP request, aka Bug ID CSCuv87025...
CVE-2015-6417: Undefined Security Weakness
Cisco Videoscape Distribution Suite Service Manager VDS-SM 3.4.0 and earlier does not always use RBAC for backend database access, which allows remote authenticated users to read or write to database entries via 1 the GUI or 2 a crafted HTTP request, aka Bug ID CSCuv87025...
CVE-2015-0725
Cisco Videoscape Distribution Suite Service Broker aka VDS-SB, when a VDSM configuration on UCS is used, and Videoscape Distribution Suite for Internet Streaming aka VDS-IS or CDS-IS before 3.3.1 R7 and 4.x before 4.0.0 R4 allow remote attackers to cause a denial of service device reload via a...
CVE-2015-0725: Improper Input Validation
Cisco Videoscape Distribution Suite Service Broker aka VDS-SB, when a VDSM configuration on UCS is used, and Videoscape Distribution Suite for Internet Streaming aka VDS-IS or CDS-IS before 3.3.1 R7 and 4.x before 4.0.0 R4 allow remote attackers to cause a denial of service device reload via a...
CVE-2015-0671: Undefined Security Weakness
The DNS implementation in Cisco Videoscape Distribution Suite for Internet Streaming VDS-IS 3.21 allows remote attackers to cause a denial of service CPU consumption and network-resource consumption via crafted packets, aka Bug ID CSCun15911...