Design/Logic Flaw

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. More Information: CSCvb68043. Known Affected...

Cisco Catalyst Switches Network Mobility Services Protocol Port Information Disclosure Vulnerability (cisco-sa-20160413-nms)

Cisco Catalyst Switches running Cisco IOS Software releases may allow an unauthenticated, remote attacker to retrieve version information about the software release running on the device by accessing the Network Mobility Services Protocol NMSP port. SPDX-FileCopyrightText: 2016 Greenbone AG Some...

CVE-2016-6369

Cisco AnyConnect Secure Mobility Client before 4.2.05015 and 4.3.x before 4.3.02039 mishandles pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCuz92464...

CVE-2016-6369

CVE-2016-6369 affects Cisco AnyConnect Secure Mobility Client for Windows. Versions before 4.2.05015 and before 4.3.02039 mishandle pathnames/filenames during INF-based installation, allowing a local attacker to gain SYSTEM privileges via a crafted INF file (Bug CSCuz92464). Impact is local privi...

Cisco AnyConnect Secure Mobility Client Local Elevation of Privilege Vulnerability

Cisco AnyConnect Secure Mobility Client is a secure mobility client from Cisco that provides secure access to networks and applications from any device. A local elevation of privilege vulnerability exists in Cisco AnyConnect Secure Mobility Client versions prior to 4.2.05015 and 4.3.02039. A loca...

CVE-2016-2025

HPE Service Manager 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote attackers to obtain sensitive information via unspecified vectors, related to the Web Client, Service Request Catalog, and Mobility components...

CVE-2016-2025

HPE Service Manager 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote attackers to obtain sensitive information via unspecified vectors, related to the Web Client, Service Request Catalog, and Mobility components...

CVE-2016-2025

HPE Service Manager 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote attackers to obtain sensitive information via unspecified vectors, related to the Web Client, Service Request Catalog, and Mobility components...

The vulnerability of the Cisco IOS operating system allows a perpetrator to gain access to confidential information related to software versions.

The vulnerability of the Cisco IOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential information, including details about the software version, by querying the Network...

clients.punchmobility.com XSS vulnerability

Open Bug Bounty ID: OBB-147151 Description| Value ---|--- Affected Website:| clients.punchmobility.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cisco Catalyst Switches IOS Software Information Disclosure Vulnerability

Cisco Catalyst Switches running Cisco IOS Software is a switch product from Cisco that runs the Cisco IOS operating system. An information disclosure vulnerability exists in Cisco Catalyst Switches running Cisco IOS Software versions prior to 15.22E1 due to a failure of the program to properly...

CVE-2016-1378

Cisco IOS before 15.22E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a request to the Network Mobility Services Protocol NMSP port, aka Bug ID CSCum62591...

CVE-2016-1378

Cisco IOS before 15.22E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a request to the Network Mobility Services Protocol NMSP port, aka Bug ID CSCum62591...

Cisco Catalyst Switches Network Mobility Services Protocol Port Information Disclosure Vulnerability

Cisco Catalyst Switches running Cisco IOS Software releases prior to 15.22E1 may allow an unauthenticated, remote attacker to retrieve version information about the software release running on the device by accessing the Network Mobility Services Protocol NMSP port. The vulnerability is due to a...

Cisco Mobility Services Engine TelePresence Server Denial of Service Vulnerability

Cisco TelePresence Server on Mobility Services Engine MSE is the United States Cisco Cisco a set of video conferencing solutions running on the platform that provides Wi-Fi services Mobility Services Engine Cisco MSE. A security vulnerability exists in the kernel in Cisco TelePresence Server...

CVE-2016-1346

The kernel in Cisco TelePresence Server 3.0 through 4.24.18 on Mobility Services Engine MSE 8710 devices allows remote attackers to cause a denial of service panic and reboot via a crafted sequence of IPv6 packets, aka Bug ID CSCuu46673...

Code injection

Cisco TelePresence Server 4.12.29 through 4.24.17 on 7010; Mobility Services Engine MSE 8710; Multiparty Media 310, 320, and 820; and Virtual Machine VM devices allows remote attackers to cause a denial of service memory consumption or device reload via crafted HTTP requests that are not followed...

Code injection

Cisco TelePresence Server 3.1 on 7010, Mobility Services Engine MSE 8710, Multiparty Media 310 and 320, and Virtual Machine VM devices allows remote attackers to cause a denial of service device reload via malformed STUN packets, aka Bug ID CSCuv01348...

Code injection

The kernel in Cisco TelePresence Server 3.0 through 4.24.18 on Mobility Services Engine MSE 8710 devices allows remote attackers to cause a denial of service panic and reboot via a crafted sequence of IPv6 packets, aka Bug ID CSCuu46673...

CVE-2015-6313

Cisco TelePresence Server 4.12.29 through 4.24.17 on 7010; Mobility Services Engine MSE 8710; Multiparty Media 310, 320, and 820; and Virtual Machine VM devices allows remote attackers to cause a denial of service memory consumption or device reload via crafted HTTP requests that are not followed...