CVE-2012-4131

Cisco NX-OS contains a directory traversal vulnerability (CVE-2012-4131) in the tar command. A local attacker with access to the CLI can leverage crafted arguments to read arbitrary files due to improper input filtering. Affected by the vulnerability are Cisco NX-OS devices; Cisco notes that soft...

[IP-reputation-snort-rule-generator] A tool to generate Snort rules based on public IP reputation data

A tool to generate Snort rules or Cisco IDS signatures based on public IP/domain reputation data. Usage ./tepig.pl --file=LOCALFILE | --url=URL --csv=FIELDNUM --sid=INITIALSID --ids=snort|cisco | --help LOCALFILE is a file stored locally that contains a list of malicious domains, IP addresses...

MediaWiki < 1.19.9 / 1.20.8 / 1.21.3 Multiple Vulnerabilities

According to its version number, the instance of MediaWiki running on the remote host is affected by the following vulnerabilities : - Input validation errors exist that allow cross-site scripting attacks. CVE-2013-4567, CVE-2013-4568 - An error exists related to session IDs and HTTP headers that...

Code injection

Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul57121...

CVE-2013-6973: Exposure of Sensitive Information to an Unauthorized Actor

Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul57121...

PT-2013-6214

Name of the Vulnerable Software and Affected Versions Cisco WebEx Training Center affected versions not specified Description The issue allows remote attackers to discover registration IDs via a crafted URL. Recommendations At the moment, there is no information about a newer version that contain...

CVE-2013-6708

Cisco Cloud Portal 9.4 allows remote attackers to read files of unspecified types via a direct request, aka Bug IDs CSCuj08426 and CSCui60889...

Design/Logic Flaw

Cisco Cloud Portal 9.4 allows remote attackers to read files of unspecified types via a direct request, aka Bug IDs CSCuj08426 and CSCui60889...

CVE-2013-6708

Cisco Cloud Portal 9.4 allows remote attackers to read files of unspecified types via a direct request, aka Bug IDs CSCuj08426 and CSCui60889...

D-Link DSR Router Series - Remote Root Shell Exploit

This is a brief overview of the unauthenticated non-persistent remote root shell vulnerability in various D-Link DSR routers. Versions affected include D-Link DSR-150 Firmware v1.08B44, D-Link DSR-150N Firmware v1.05B64, D-Link DSR-250 and DSR-250N Firmware v1.08B44, D-Link DSR-500 and DSR-500N...

CVE-2013-6704

Cisco IOS XE does not properly manage memory for TFTP UDP flows, which allows remote attackers to cause a denial of service memory consumption via TFTP 1 client or 2 server traffic, aka Bug IDs CSCuh09324 and CSCty42686...

CVE-2013-6690

Multiple cross-site scripting XSS vulnerabilities in the web interface in the Assurance component in Cisco Prime Collaboration allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCui92643, CSCui94038, and CSCui94161...

Code injection

Cisco IOS XE does not properly manage memory for TFTP UDP flows, which allows remote attackers to cause a denial of service memory consumption via TFTP 1 client or 2 server traffic, aka Bug IDs CSCuh09324 and CSCty42686...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the web interface in the Assurance component in Cisco Prime Collaboration allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCui92643, CSCui94038, and CSCui94161...

CVE-2013-6690

Multiple cross-site scripting XSS vulnerabilities in the web interface in the Assurance component in Cisco Prime Collaboration allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCui92643, CSCui94038, and CSCui94161...

Debian Security Advisory DSA 2793-1 (libav - several vulnerabilities)

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. The CVE IDs mentioned above are just a small portion of the security issues fixed in this update. A full list of the changes is available at...

DSA-2793-1 libav - several

Bulletin has no description...

CVE-2013-5553

Multiple memory leaks in Cisco IOS 15.1 before 15.14M7 allow remote attackers to cause a denial of service memory consumption or device reload by sending a crafted SIP message over 1 IPv4 or 2 IPv6, aka Bug IDs CSCuc42558 and CSCug25383...

Design/Logic Flaw

Multiple memory leaks in Cisco IOS 15.1 before 15.14M7 allow remote attackers to cause a denial of service memory consumption or device reload by sending a crafted SIP message over 1 IPv4 or 2 IPv6, aka Bug IDs CSCuc42558 and CSCug25383...

CVE-2013-5553

Multiple memory leaks in Cisco IOS 15.1 before 15.14M7 allow remote attackers to cause a denial of service memory consumption or device reload by sending a crafted SIP message over 1 IPv4 or 2 IPv6, aka Bug IDs CSCuc42558 and CSCug25383...