Code injection

Cisco IOS 15.21T1.11 and 15.22TST allows remote attackers to cause a denial of service device crash via a crafted LLDP packet, aka Bug ID CSCun63132...

Code injection

The web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to execute arbitrary code as root via a crafted HTTP request, aka Bug ID CSCux82428...

Cross site scripting

Cross-site scripting XSS vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to inject arbitrary web script or HTML via a...

Buffer overflow

Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote authenticated users to cause a denial of service device reload via crafted...

CVE-2016-1396

Cross-site scripting XSS vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to inject arbitrary web script or HTML via a...

CVE-2016-1397

Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote authenticated users to cause a denial of service device reload via crafted...

CVE-2016-1397

Cisco RV110W/RV130W/RV215W routers are affected by a buffer overflow in the web-based management HTTP interface triggered by crafted configuration commands. The issue allows an authenticated remote user to cause a DoS (device reload). Affected firmware versions are pre-1.2.1.7 (RV110W), pre-1.0.3...

CVE-2016-1396

CVE-2016-1396 is an XSS vulnerability in the web-based management interface of Cisco RV110W (firmware < 1.2.1.7), RV130W (firmware < 1.0.3.16), and RV215W (firmware

CVE-2016-1424

Cisco IOS 15.21T1.11 and 15.22TST allows remote attackers to cause a denial of service device crash via a crafted LLDP packet, aka Bug ID CSCun63132...

CVE-2016-1432

Cisco IOS XE 3.15S and 3.16S on cBR-8 Converged Broadband Router devices allows remote authenticated users to cause a denial of service NULL pointer dereference and card restart via a crafted SNMP request, aka Bug ID CSCuu68862...

CVE-2016-1432

Cisco IOS XE 3.15S and 3.16S on cBR-8 Converged Broadband Router devices allows remote authenticated users to cause a denial of service NULL pointer dereference and card restart via a crafted SNMP request, aka Bug ID CSCuu68862...

CVE-2016-1431

Cross-site scripting XSS vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516...

Null pointer dereference

Cisco IOS XE 3.15S and 3.16S on cBR-8 Converged Broadband Router devices allows remote authenticated users to cause a denial of service NULL pointer dereference and card restart via a crafted SNMP request, aka Bug ID CSCuu68862...

Design/Logic Flaw

The System Configuration Protocol SCP core messaging interface in Cisco Prime Network Registrar 8.2 before 8.2.3.1 and 8.3 before 8.3.2 allows remote attackers to obtain sensitive information via crafted SCP messages, aka Bug ID CSCuv35694...

CVE-2016-1427

The System Configuration Protocol SCP core messaging interface in Cisco Prime Network Registrar 8.2 before 8.2.3.1 and 8.3 before 8.3.2 allows remote attackers to obtain sensitive information via crafted SCP messages, aka Bug ID CSCuv35694...

CVE-2016-1432

Cisco IOS XE 3.15S and 3.16S on cBR-8 Converged Broadband Router devices allows remote authenticated users to cause a denial of service NULL pointer dereference and card restart via a crafted SNMP request, aka Bug ID CSCuu68862...

CVE-2016-1431

Cross-site scripting XSS vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516...

CVE-2016-1427

Cisco Prime Network Registrar Vulnerability CVE-2016-1427 affects SCP core messaging: 8.2 before 8.2.3.1 and 8.3 before 8.3.2. The issue stems from lack of authentication controls in SCP messages, enabling a remote attacker to obtain sensitive information. MITRE details are supported by Cisco adv...

CVE-2016-1432

Cisco IOS XE on Cisco cBR-8 Converged Broadband Router (IOS XE 3.15S and 3.16S) is affected by CVE-2016-1432. A remote, authenticated attacker can trigger a denial of service by sending crafted SNMP requests that cause a NULL pointer dereference, leading to a supervisor card restart. The root cau...