5047 matches found
CVE-2015-6395
Cisco Prime Service Catalog 10.0, 10.0R2, 10.1, and 11.0 does not properly restrict access to web pages, which allows remote attackers to modify the configuration via a direct request, aka Bug ID CSCuw48188...
CVE-2015-6394
The kernel in Cisco NX-OS 5.29N11 on Nexus 5000 devices allows local users to cause a denial of service device crash via crafted USB parameters, aka Bug ID CSCus89408...
CVE-2015-6391
Cisco Unified SIP 3905 phones allow remote attackers to cause a denial of service resource consumption and functionality loss via a large amount of network traffic, aka Bug ID CSCuh51331...
CVE-2015-6388
Cisco Unified Computing System UCS Central software 1.30.1 allows remote attackers to conduct server-side request forgery SSRF attacks via a crafted request, aka Bug ID CSCux33575...
CVE-2015-6387
Cross-site scripting XSS vulnerability in Cisco Unified Computing System UCS Central Software 1.30.1 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCux33573...
Cross site scripting
Cross-site scripting XSS vulnerability in Cisco Unified Computing System UCS Central Software 1.30.1 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCux33573...
Server side request forgery (ssrf)
Cisco Unified Computing System UCS Central software 1.30.1 allows remote attackers to conduct server-side request forgery SSRF attacks via a crafted request, aka Bug ID CSCux33575...
Design/Logic Flaw
The kernel in Cisco NX-OS 5.29N11 on Nexus 5000 devices allows local users to cause a denial of service device crash via crafted USB parameters, aka Bug ID CSCus89408...
Code injection
Cisco Unified SIP 3905 phones allow remote attackers to cause a denial of service resource consumption and functionality loss via a large amount of network traffic, aka Bug ID CSCuh51331...
CVE-2015-6384
The Cisco WebEx Meetings application before 8.5.1 for Android improperly initializes custom application permissions, which allows attackers to bypass intended access restrictions via a crafted application, aka Bug ID CSCuw86442...
CVE-2015-6387
Cross-site scripting XSS vulnerability in Cisco Unified Computing System UCS Central Software 1.30.1 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCux33573...
CVE-2015-6387
The CVE-2015-6387 entry refers to a cross-site scripting (XSS) vulnerability in Cisco UCS Central Software (version 1.3(0.1)). The root cause is insufficient input validation in the web interface, allowing an unauthenticated/remote attacker to inject arbitrary script or HTML via a crafted URL. Im...
CVE-2015-6388
Cisco Unified Computing System UCS Central software 1.30.1 allows remote attackers to conduct server-side request forgery SSRF attacks via a crafted request, aka Bug ID CSCux33575...
CVE-2015-6388
CVE-2015-6388 affects Cisco UCS Central Software 1.3(0.1). The issue stems from improper validation of user-supplied input, allowing unauthenticated, remote attackers to perform server-side requests (SSRF) and bypass access controls. The vulnerability is documented by Cisco as UCS Central SSRF, w...
CVE-2015-6394
CVE-2015-6394 affects Cisco NX-OS on Nexus 5000 series with kernel DoS vulnerability exposed by USB driver parameters. Specifically, Cisco NX-OS 5.2(9)N1(1) is vulnerable to a local attacker who can crash the device by sending crafted USB parameters, per Bug CSCus89408. The issue is a local, kern...
CVE-2015-6384
The Cisco WebEx Meetings application before 8.5.1 for Android improperly initializes custom application permissions, which allows attackers to bypass intended access restrictions via a crafted application, aka Bug ID CSCuw86442...
CVE-2015-6390
Cross-site scripting XSS vulnerability in the management interface in Cisco Unity Connection 9.11.10 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCup92741...
Cross site scripting
Cross-site scripting XSS vulnerability in the management interface in Cisco Unity Connection 9.11.10 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCup92741...
Code injection
Cisco IOS XE 15.43S on ASR 1000 devices improperly loads software packages, which allows local users to bypass license restrictions and obtain certain root privileges by using the CLI to enter crafted filenames, aka Bug ID CSCuv93130...
CVE-2015-6383
Cisco IOS XE 15.43S on ASR 1000 devices improperly loads software packages, which allows local users to bypass license restrictions and obtain certain root privileges by using the CLI to enter crafted filenames, aka Bug ID CSCuv93130...