CVE-2015-6350

SQL injection vulnerability in the web framework in Cisco Prime Service Catalog 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuw50843...

Code injection

The Proxy Mobile IPv6 PMIPv6 component in the CDMA implementation on Cisco ASR 5000 devices with software 19.0.M0.60737 allows remote attackers to cause a denial of service hamgr process restart via a crafted header in a PMIPv6 packet, aka Bug ID CSCuv63280...

CVE-2015-6340

The Proxy Mobile IPv6 PMIPv6 component in the CDMA implementation on Cisco ASR 5000 devices with software 19.0.M0.60737 allows remote attackers to cause a denial of service hamgr process restart via a crafted header in a PMIPv6 packet, aka Bug ID CSCuv63280...

Code injection

Cisco Adaptive Security Appliance ASA software 7.2 and 8.2 before 8.25.58, 8.3 and 8.4 before 8.47.29, 8.5 through 8.7 before 8.71.17, 9.0 before 9.04.37, 9.1 before 9.16.6, 9.2 before 9.24, 9.3 before 9.33.5, and 9.4 before 9.41.5 allows remote attackers to cause a denial of service device reloa...

Design/Logic Flaw

The policy implementation in Cisco FireSIGHT Management Center 5.3.1.7, 5.4.0.4, and 6.0.0 for VMware allows remote authenticated administrators to bypass intended policy restrictions and execute Linux commands as root via unspecified vectors, aka Bug ID CSCuw12839...

Information disclosure

The Web Management GUI on Cisco Wireless LAN Controller WLC devices with software 7.4140.0 and 8.0120.0 allows remote attackers to cause a denial of service client disconnection via unspecified vectors, aka Bug ID CSCuw10610...

Code injection

The IKEv1 implementation in Cisco Adaptive Security Appliance ASA software 7.2 and 8.2 before 8.25.58, 8.3 and 8.4 before 8.47.29, 8.5 through 8.7 before 8.71.17, 9.0 before 9.04.37, 9.1 before 9.16.8, 9.2 before 9.24, and 9.3 before 9.33 allows remote attackers to cause a denial of service devic...

Code injection

Cisco Adaptive Security Appliance ASA software 7.2 and 8.2 before 8.25.58, 8.3 and 8.4 before 8.47.29, 8.5 through 8.7 before 8.71.17, 9.0 before 9.04.37, 9.1 before 9.16.4, 9.2 before 9.24, 9.3 before 9.33.1, and 9.4 before 9.41.1 allows remote attackers to cause a denial of service device reloa...

CVE-2015-6327

CVE-2015-6327 affects Cisco ASA: the IKEv1 implementation mishandles ISAKMP UDP packets, enabling a remote attacker to trigger a denial of service (device reload). Affected ASA versions include 7.2; 8.2 up to 8.2(5.58); 8.3 and 8.4 up to 8.4(7.29); 8.5–8.7 up to 8.7(1.17); 9.0 up to 9.0(4.37); 9....

CVE-2015-6335

The policy implementation in Cisco FireSIGHT Management Center 5.3.1.7, 5.4.0.4, and 6.0.0 for VMware allows remote authenticated administrators to bypass intended policy restrictions and execute Linux commands as root via unspecified vectors, aka Bug ID CSCuw12839...

CVE-2015-6325

Cisco Adaptive Security Appliance ASA software 7.2 and 8.2 before 8.25.58, 8.3 and 8.4 before 8.47.29, 8.5 through 8.7 before 8.71.17, 9.0 before 9.04.37, 9.1 before 9.16.4, 9.2 before 9.24, 9.3 before 9.33.1, and 9.4 before 9.41.1 allows remote attackers to cause a denial of service device reloa...

Cisco ASA Software DNS Denial of Service Vulnerability

A vulnerability in the DNS code of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause an affected system to reload. The vulnerability is due to improper processing of DNS packets. An attacker could exploit this vulnerability by sending a crafte...

Cisco ASA Software VPN ISAKMP Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange IKE version 1 v1 code of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause an affected system to reload. The vulnerability is due to improper handling of Internet Security Association and Key...

CVE-2015-6334

Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote attackers to cause a denial of service vpnmgr process restart via a crafted header in a TACACS packet, aka Bug ID CSCuw01984...

Code injection

Cisco Application Policy Infrastructure Controller APIC 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076...

Design/Logic Flaw

Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote attackers to cause a denial of service vpnmgr process restart via a crafted header in a TACACS packet, aka Bug ID CSCuw01984...

CVE-2015-6334

Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote attackers to cause a denial of service vpnmgr process restart via a crafted header in a TACACS packet, aka Bug ID CSCuw01984...

CVE-2015-6334

The CVE-2015-6334 issue affects Cisco ASR 5000 and ASR 5500 systems running software 18.0.0.57828 and 19.0.M0.61045. A crafted TACACS header in a TACACS packet can trigger the vpnmgr process to restart, causing a denial of service. The root cause is improper input validation of the TACACS packet ...

CVE-2015-6333

Cisco Application Policy Infrastructure Controller APIC 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076...

CVE-2015-6328

The web framework in Cisco Prime Collaboration Assurance PCA 10.51 allows remote authenticated users to bypass intended access restrictions and read arbitrary files via a crafted URL, aka Bug ID CSCus88380...