Cross site scripting

Cross-site scripting XSS vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise AAOP 2.x, 5.7.x, and 6.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2011-1422

CVE-2011-1422 is an XSS vulnerability in an unspecified Shockwave Flash file used by EMC RSA Adaptive Authentication On-Premise (AAOP) versions 2.x, 5.7.x and 6.x. The affected component is the Flash/Shockwave content within AAOP; the root cause is an input/validation issue allowing arbitrary web...

CVE-2011-1422

Cross-site scripting XSS vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise AAOP 2.x, 5.7.x, and 6.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2011-1422: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise AAOP 2.x, 5.7.x, and 6.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances Advisory ID: cisco-sa-20110223-asa Revision 1.0 For Public Release 2011 February 23 1600 UTC GMT...

CVE-2011-0379

Buffer overflow on Cisco Adaptive Security Appliances ASA 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x; Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x; and Cisco TelePresence Manager...

Code injection

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.0 before 8.05.20, 8.1 before 8.12.48, 8.2 before 8.23, and 8.3 before 8.32.1, when the RIP protocol and the Cisco Phone Proxy functionality are configured, allow remote attackers to cause a denial of service device reload...

Design/Logic Flaw

Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.0 before 7.08.12, 7.1 and 7.2 before 7.25.2, 8.0 before 8.05.21, 8.1 before 8.12.49, 8.2 before 8.23.6, and 8.3 before 8.32.7 and Cisco PIX Security Appliances 500 series devices, when transparent firewall mode is configur...

CVE-2011-0379

CVE-2011-0379 is a buffer overflow in Cisco TelePresence components triggered by crafted Cisco Discovery Protocol packets. Affected products include Cisco ASA 5500 series with software 1.6.x, Cisco TelePresence Multipoint Switch (CTMS) with 1.0.x–1.6.x, Cisco TelePresence endpoints (1.2.x–1.6.x),...

CVE-2011-0395: Undefined Security Weakness

Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.0 before 8.05.20, 8.1 before 8.12.48, 8.2 before 8.23, and 8.3 before 8.32.1, when the RIP protocol and the Cisco Phone Proxy functionality are configured, allow remote attackers to cause a denial of service device reload...

CVE-2011-0393: Undefined Security Weakness

Cisco Adaptive Security Appliances ASA 5500 series devices with software 7.0 before 7.08.12, 7.1 and 7.2 before 7.25.2, 8.0 before 8.05.21, 8.1 before 8.12.49, 8.2 before 8.23.6, and 8.3 before 8.32.7 and Cisco PIX Security Appliances 500 series devices, when transparent firewall mode is configur...

PT-2011-2315 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.0 through 7.08.11 Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.1 through 7.25.1 Cisco Adaptive Security Appliances ASA 5500 series devices versions...

CVE-2010-4690

The Mobile User Security MUS service on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.32 does not properly authenticate HTTP requests from a Web Security appliance WSA, which might allow remote attackers to obtain sensitive information via a HEAD request, aka B...

CVE-2010-4692

CVE-2010-4692 affects Cisco ASA 5500-series devices running software before 8.3(2). The vulnerability allows a remote attacker to cause a denial-of-service (device crash) by initiating a large number of LAN-to-LAN IPsec sessions (L2L), per Bug ID CSCth36592. Affected component is the IPsec/L2L ha...

CVE-2010-4676

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote authenticated users to cause a denial of service device crash via a high volume of IPsec traffic, aka Bug ID CSCsx52748...

CVE-2009-5037

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allow remote attackers to cause a denial of service ASDM syslog outage via a long URL, aka Bug IDs CSCsm11264 and CSCtb92911...

Design/Logic Flaw

Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 permit packets to pass before the configuration has been loaded, which might allow remote attackers to bypass intended access restrictions by sending network traffic during device startup, aka Bug ID CSCsy86769...

Cross site request forgery (csrf)

emWEB on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote attackers to cause a denial of service daemon crash via a request for a document whose name contains space characters, aka Bug ID CSCsy08416...

CVE-2010-4670

The Neighbor Discovery ND protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances ASA 5500 series devices with software 8.23 and earlier, and Cisco PIX Security Appliances devices, allows remote attackers to cause a denial of service CPU consumption and device hang by...

CVE-2010-4681

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote attackers to bypass SMTP inspection via vectors involving a prepended space character, aka Bug ID CSCte14901...