CVE-2015-6390

Cross-site scripting XSS vulnerability in the management interface in Cisco Unity Connection 9.11.10 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCup92741...

CVE-2015-6383

Cisco IOS XE 15.43S on ASR 1000 devices improperly loads software packages, which allows local users to bypass license restrictions and obtain certain root privileges by using the CLI to enter crafted filenames, aka Bug ID CSCuv93130...

CVE-2015-6390

Cisco Unity Connection 9.1(1.10) management interface vulnerable to cross-site scripting (XSS) via crafted URLs. Root cause: insufficient input validation. Impact: partial integrity exposure; no explicit availability impact. Exploitation details: remote attacker could inject arbitrary script in t...

CVE-2015-6386

The passthrough FTP feature on Cisco Web Security Appliance WSA devices with software 8.0.7-142 and 8.5.1-021 allows remote attackers to cause a denial of service CPU consumption via FTP sessions in which the control connection is ended after data transfer, aka Bug ID CSCut94150...

Design/Logic Flaw

The publish-event event-manager feature in Cisco IOS 15.52S and 15.53S on Cloud Services Router 1000V devices allows local users to execute arbitrary commands with root privileges by leveraging administrative access to enter crafted environment variables, aka Bug ID CSCux14943...

Code injection

The passthrough FTP feature on Cisco Web Security Appliance WSA devices with software 8.0.7-142 and 8.5.1-021 allows remote attackers to cause a denial of service CPU consumption via FTP sessions in which the control connection is ended after data transfer, aka Bug ID CSCut94150...

Code injection

Cisco ASR 5000 devices with software 16.0900 allow remote attackers to cause a denial of service telnetd process restart via a TELNET connection, aka Bug ID CSCuv25815...

CVE-2015-6382

Cisco ASR 5000 devices with software 16.0900 allow remote attackers to cause a denial of service telnetd process restart via a TELNET connection, aka Bug ID CSCuv25815...

CVE-2015-6382

CVE-2015-6382 affects Cisco ASR 5000 Series running 16.0(900). A remote Telnet connection can trigger the telnetd process to restart, causing a partial DoS. The root cause is described as flaws in the Telnet implementation. Cisco’s advisory states no software updates address this vulnerability an...

Code injection

Cisco Virtual Topology System VTS 2.00 and 2.01 allows remote attackers to cause a denial of service CPU and memory consumption, and TCP port outage via a flood of crafted TCP packets, aka Bug ID CSCux13379...

Input validation

An unspecified script in the web interface in Cisco Firepower Extensible Operating System 1.11.160 on Firepower 9000 devices allows remote authenticated users to execute arbitrary OS commands via crafted parameters, aka Bug ID CSCux10622...

CVE-2015-6377

Cisco Virtual Topology System VTS 2.00 and 2.01 allows remote attackers to cause a denial of service CPU and memory consumption, and TCP port outage via a flood of crafted TCP packets, aka Bug ID CSCux13379...

CVE-2015-6377

Cisco Virtual Topology System VTS 2.00 and 2.01 allows remote attackers to cause a denial of service CPU and memory consumption, and TCP port outage via a flood of crafted TCP packets, aka Bug ID CSCux13379...

CVE-2015-6376

Cross-site request forgery CSRF vulnerability in Cisco TelePresence Video Communication Server VCS X8.5.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv72412...

Design/Logic Flaw

The debug-logging aka debug cns feature in Cisco Networking Services CNS for IOS 15.22E3 allows local users to obtain sensitive information by reading an unspecified file, aka Bug ID CSCux18010...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco TelePresence Video Communication Server VCS X8.5.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv72412...

CVE-2015-6375

Cisco Networking Services (CNS) for IOS 15.2(2)E3 is affected by CVE-2015-6375, where the debug-logging (debug CNS) feature can allow a local authenticated user to disclose sensitive information by reading an unspecified file. The issue stems from insufficient protections of sensitive data at res...

CVE-2015-6375

The debug-logging aka debug cns feature in Cisco Networking Services CNS for IOS 15.22E3 allows local users to obtain sensitive information by reading an unspecified file, aka Bug ID CSCux18010...

CVE-2015-6371

Cisco Firepower Extensible Operating System 1.11.160 on Firepower 9000 devices allows remote authenticated users to read arbitrary files via crafted parameters to unspecified scripts, aka Bug ID CSCux10621...

CVE-2015-6370

The Management I/O MIO component in Cisco Firepower Extensible Operating System 1.11.160 on Firepower 9000 devices allows local users to execute arbitrary OS commands as root via crafted CLI input, aka Bug ID CSCux10578...