28 matches found
EUVD-2016-2400
Malware in sbrugna...
EUVD-2013-1243
Malware in sbrugna...
EUVD-2012-4554
Malware in sbrugna...
CVE-2013-1203
Cisco ASA CX Context-Aware Security Software allows remote attackers to cause a denial of service device reload via crafted TCP packets that appear to have been forwarded by a Cisco Adaptive Security Appliances ASA device, aka Bug ID CSCue88386...
CVE-2016-1301
The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1112 and Cisco Prime Security Manager PRSM software before 9.3.1.1112 allows remote authenticated users to change arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuo94842...
CVE-2016-1301
The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1112 and Cisco Prime Security Manager PRSM software before 9.3.1.1112 allows remote authenticated users to change arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuo94842...
Design/Logic Flaw
The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1112 and Cisco Prime Security Manager PRSM software before 9.3.1.1112 allows remote authenticated users to change arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuo94842...
CVE-2016-1301
The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1112 and Cisco Prime Security Manager PRSM software before 9.3.1.1112 allows remote authenticated users to change arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuo94842...
CVE-2016-1301: Improper Access Control
The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1112 and Cisco Prime Security Manager PRSM software before 9.3.1.1112 allows remote authenticated users to change arbitrary passwords via a crafted HTTP request, aka Bug ID CSCuo94842...
PT-2016-4694
Name of the Vulnerable Software and Affected Versions Cisco ASA-CX Content-Aware Security software versions prior to 9.3.1.1112 Cisco Prime Security Manager PRSM software versions prior to 9.3.1.1112 Description The issue in the Role-Based Access Control RBAC implementation allows remote...
Cisco ASA-CX and Cisco Prime Security Manager Privilege Escalation Vulnerability
A vulnerability in the role-based access control of Cisco ASA-CX and Cisco Prime Security Manager PRSM could allow an authenticated, remote attacker to change the password of any user on the system. The vulnerability exists because the password change request is not fully qualified. An...
CVE-2015-6344: Exposure of Sensitive Information to an Unauthorized Actor
The web-based GUI in Cisco Adaptive Security Appliance ASA CX Context-Aware Security 9.34.1.11 allows remote authenticated users to bypass intended access restrictions and obtain sensitive user information via an unspecified HTTP request, aka Bug ID CSCuv74105...
PT-2015-7193
Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA CX Context-Aware Security version 9.34.1.11 Description The issue allows remote authenticated users to bypass intended access restrictions and obtain sensitive user information via an unspecified HTTP...
Cisco ASA CX Safe Search Policy Bypass Vulnerability
A vulnerability in the Safe Search enforcement component of Cisco ASA CX Context-Aware Security could allow an unauthenticated, remote attacker to bypass security policy enforced by the affected component. The vulnerability is due to improper implementation of the logic that should perform the...
PT-2013-5641
Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA CX Context-Aware Security Software affected versions not specified Description The issue concerns the Safe Search enforcement feature in Cisco Adaptive Security Appliance ASA CX Context-Aware Security...
CVE-2013-5561: Improper Input Validation
The Safe Search enforcement feature in Cisco Adaptive Security Appliance ASA CX Context-Aware Security Software does not properly perform filtering, which allows remote attackers to bypass intended policy restrictions via unspecified vectors, aka Bug ID CSCui94622...
Code injection
Cisco ASA CX Context-Aware Security Software allows remote attackers to cause a denial of service device reload via crafted TCP packets that appear to have been forwarded by a Cisco Adaptive Security Appliances ASA device, aka Bug ID CSCue88386...
PT-2013-2968
Name of the Vulnerable Software and Affected Versions Cisco ASA CX Context-Aware Security Software affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending crafted TCP packets that appear to have been...
CVE-2013-1203: Improper Input Validation
Cisco ASA CX Context-Aware Security Software allows remote attackers to cause a denial of service device reload via crafted TCP packets that appear to have been forwarded by a Cisco Adaptive Security Appliances ASA device, aka Bug ID CSCue88386...
Cisco ASA-CX TCP Traffic Denial of Service Vulnerability
A vulnerability processing TCP traffic on Cisco ASA CX could allow an unauthenticated, remote attacker to cause a reload of the affected device. The vulnerability is due to invalid parsing of TCP packet data forwarded to Cisco ASA CX by the Cisco ASA. An attacker could exploit this vulnerability ...