CVE-2016-1468

Cisco TelePresence Video Communication Server Expressway X8.5.2’s administrative web interface contains a command-injection vulnerability (CVE-2016-1468) due to improper sanitization of user input in scripts. Remote authenticated attackers can execute arbitrary commands with high impact (CVSS v3:...

CVE-2016-1478

CVE-2016-1478 affects Cisco IOS and IOS XE: Cisco IOS versions 15.5(3)S3, 15.6(1)S2, 15.6(2)S1, and 15.6(2)T1 fail to properly dequeue/clear invalid NTP packets, enabling an unauthenticated remote attacker to cause an interface wedge and DoS by sending many crafted NTP packets. The issue stems fr...

CVE-2016-1468

The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbitrary commands via crafted fields, aka Bug ID CSCuv12531...

CVE-2016-1461

Cisco AsyncOS on Email Security Appliance ESA devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted attachment in an e-mail message, aka Bug ID CSCuz14932...

Design/Logic Flaw

Cisco AsyncOS on Email Security Appliance ESA devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted attachment in an e-mail message, aka Bug ID CSCuz14932...

CVE-2016-1461

Cisco AsyncOS on Email Security Appliance ESA devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted attachment in an e-mail message, aka Bug ID CSCuz14932...

CVE-2016-1461

CVE-2016-1461 affects Cisco AsyncOS on Email Security Appliance (ESA) devices up to 9.7.0-125. The vulnerability stems from the file-type filtering feature: an attacker can craft an email attachment to bypass malware detection. Impact is bypass of malware detection, enabling potential malware del...

CVE-2016-1463

Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1 allows remote attackers to bypass Snort rules via crafted parameters in the header of an HTTP packet, aka Bug ID CSCuz20737...

CVE-2016-1462

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Prime Service Catalog PSC 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795...

CVE-2016-1460

Cisco Wireless LAN Controller WLC devices 7.4121.0 and 8.00.30220.385 allow remote attackers to cause a denial of service via crafted wireless management frames, aka Bug ID CSCun92979...

Design/Logic Flaw

The web framework in Cisco Unified Computing System UCS Performance Manager 2.0.0 and earlier allows remote authenticated users to execute arbitrary commands via crafted parameters in a GET request, aka Bug ID CSCuy07827...

Design/Logic Flaw

Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1 allows remote attackers to bypass Snort rules via crafted parameters in the header of an HTTP packet, aka Bug ID CSCuz20737...

Code injection

Cisco Wireless LAN Controller WLC devices 7.4121.0 and 8.00.30220.385 allow remote attackers to cause a denial of service via crafted wireless management frames, aka Bug ID CSCun92979...

Code injection

Cisco Videoscape Session Resource Manager VSRM allows remote attackers to cause a denial of service device restart by sending a traffic flood to upstream devices, aka Bug ID CSCva01813...

Cross site scripting

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Prime Service Catalog PSC 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795...

CVE-2016-1467

Cisco Videoscape Session Resource Manager VSRM allows remote attackers to cause a denial of service device restart by sending a traffic flood to upstream devices, aka Bug ID CSCva01813...

CVE-2016-1460

Cisco Wireless LAN Controller WLC devices 7.4121.0 and 8.00.30220.385 allow remote attackers to cause a denial of service via crafted wireless management frames, aka Bug ID CSCun92979...

CVE-2016-1462

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Prime Service Catalog PSC 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795...

CVE-2016-1460

Cisco WLC vulnerability CVE-2016-1460 affects WLC firmware 7.4(121.0) and 8.0(0.30220.385). The flaw is in the wireless frame management service where insufficient handling of crafted wireless management frames could allow an unauthenticated, adjacent attacker to cause a DoS on the device. Impact...

CVE-2016-1463

CVE-2016-1463 affects Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1. The root cause is improper handling of HTTP header parameters, enabling a remote, unauthenticated attacker to bypass Snort-based rules in the device. Affected component/behavior: Snort rule detection proces...