5047 matches found
Design/Logic Flaw
Cisco Wireless LAN Controller WLC devices with software 7.6.x, 8.0 before 8.0.121.0, and 8.1 before 8.1.131.0 allow remote attackers to change configuration settings via unspecified vectors, aka Bug ID CSCuw06153...
Design/Logic Flaw
The IP ingress packet handler on Cisco Aironet 1800 devices with software 8.1112.3 and 8.1112.4 allows remote attackers to cause a denial of service via a crafted header in an IP packet, aka Bug ID CSCuv63138...
Code injection
The Admin portal in Cisco Identity Services Engine ISE 1.1.x, 1.2.0 before patch 17, 1.2.1 before patch 8, 1.3 before patch 5, and 1.4 before patch 4 allows remote attackers to obtain administrative access via unspecified vectors, aka Bug ID CSCuw34253...
CVE-2015-6323
The Admin portal in Cisco Identity Services Engine ISE 1.1.x, 1.2.0 before patch 17, 1.2.1 before patch 8, 1.3 before patch 5, and 1.4 before patch 4 allows remote attackers to obtain administrative access via unspecified vectors, aka Bug ID CSCuw34253...
CVE-2015-6423
The DCERPC Inspection implementation in Cisco Adaptive Security Appliance ASA Software 9.4.1 through 9.5.1 allows remote authenticated users to bypass an intended DCERPC-only ACL by sending arbitrary network traffic, aka Bug ID CSCuu67782...
Cisco Jabber for Windows 8.x / 9.x / 10.x / 11.0.x / 11.1.x XMPP Connection MitM STARTTLS Downgrade (cisco-sa-20151224-jab)
The version of Cisco Jabber for Windows installed on the remote host is 8.x, 9.x, 10.x, 11.0.x, or 11.1.x prior to 11.5. It is, therefore, affected by man-in-the-middle STARTTLS downgrade vulnerability due to improper checks to ensure the Extensible Messaging and Presence Protocol XMPP connection...
Sql injection
SQL injection vulnerability in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767...
CVE-2015-6433
SQL injection vulnerability in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767...
CVE-2015-6433
SQL injection vulnerability in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCut66767...
CVE-2015-6434
Cisco Prime Infrastructure does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting XFS" issue, aka Bug ID CSCux64856...
CVE-2015-6432
Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements PCEs for OSPF LSA opaque area updates, which allows remote attackers to cause a denial of service device reload via a crafted update, aka Bug ID...
Design/Logic Flaw
Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements PCEs for OSPF LSA opaque area updates, which allows remote attackers to cause a denial of service device reload via a crafted update, aka Bug ID...
CVE-2015-6432
CVE-2015-6432 affects Cisco IOS XR software (versions 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, 5.3.2). The issue stems from improper restriction on the number of PCEs used for OSPF LSA opaque area updates, enabling an unauthenticated, remote attacker to cause a DoS (device reload) ...
Design/Logic Flaw
Cisco Jabber 10.6.x, 11.0.x, and 11.1.x on Windows allows man-in-the-middle attackers to conduct STARTTLS downgrade attacks and trigger cleartext XMPP sessions via unspecified vectors, aka Bug ID CSCuw87419...
Design/Logic Flaw
Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service device reload via a packet with the 00-00-00-00-00-00 source MAC address, aka Bug ID CSCux48405...
CVE-2015-6431
Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service device reload via a packet with the 00-00-00-00-00-00 source MAC address, aka Bug ID CSCux48405...
CVE-2015-6431
CVE-2015-6431 affects Cisco IOS XE 16.1.1 and relates to denial of service via a frame with a source MAC address of all zeros (0000:0000:0000). An unauthenticated, adjacent attacker can trigger a device reload by sending such packets, described in Cisco’s CSCux48405 advisory and related Nessus en...
CVE-2015-6431
Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service device reload via a packet with the 00-00-00-00-00-00 source MAC address, aka Bug ID CSCux48405...
Design/Logic Flaw
The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service IPsec connection termination via a crafted IKEv1 packet to a tunnel endpoint, aka Bug ID CSCuw08236...