Code injection

Cisco Prime Infrastructure 2.2 allows remote attackers to cause a denial of service daemon hang by sending many SSL renegotiation requests, aka Bug ID CSCuv56830...

CVE-2015-6315

Cisco Aironet 1850 access points with software 8.1112.4 allow local users to gain privileges via crafted CLI commands, aka Bug ID CSCuv79694...

Design/Logic Flaw

The web framework in Cisco Prime Collaboration Assurance PCA 10.51 allows remote authenticated users to bypass intended access restrictions and read arbitrary files via a crafted URL, aka Bug ID CSCus88380...

Design/Logic Flaw

Cisco Aironet 1850 access points with software 8.1112.4 allow local users to gain privileges via crafted CLI commands, aka Bug ID CSCuv79694...

CVE-2015-6332

Cisco Prime Infrastructure 2.2 allows remote attackers to cause a denial of service daemon hang by sending many SSL renegotiation requests, aka Bug ID CSCuv56830...

CVE-2015-6315

The CVE-2015-6315 issue affects Cisco Aironet 1850 Series Access Points running software 8.1(112.4). A local privilege-escalation vulnerability exists in the CLI, caused by insufficient escape protections when validating commands, allowing an authenticated, local attacker to gain root-level privi...

CVE-2015-6328

CVE-2015-6328 affects Cisco Prime Collaboration Assurance (PCA) 10.5(1). The web framework allows remote authenticated users to bypass access controls and read arbitrary files via a crafted URL (information disclosure). This is due to incorrect implementation of access control in the PCA web comp...

CVE-2015-6315

Cisco Aironet 1850 access points with software 8.1112.4 allow local users to gain privileges via crafted CLI commands, aka Bug ID CSCuv79694...

CVE-2015-6322

The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.18 allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563...

CVE-2015-4325

The process-management implementation in Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows local users to gain privileges by terminating a firestarter.py supervised process and then triggering the restart of a process by the root account, aka Bug ID CSCuv12272...

Sql injection

SQL injection vulnerability in Cisco Prime Collaboration Provisioning 10.6 and 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut64074...

Command injection

The process-management implementation in Cisco TelePresence Video Communication Server VCS Expressway X8.5.2 allows local users to gain privileges by terminating a firestarter.py supervised process and then triggering the restart of a process by the root account, aka Bug ID CSCuv12272...

Code injection

Cisco TelePresence Video Communication Server VCS Expressway X8.5.1 and X8.5.2 allows local users to write to arbitrary files via an unspecified symlink attack, aka Bug ID CSCuv11969...

Sql injection

SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.51 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCus39887...

Design/Logic Flaw

Cisco Unified Computing System UCS B Blade Server Software 2.2.x before 2.2.6 allows local users to cause a denial of service host OS or BMC hang by sending crafted packets over the Inter-IC I2C bus, aka Bug ID CSCuq77241...

CVE-2015-6331

CVE-2015-6331 is a SQL injection vulnerability in the web framework of Cisco Prime Collaboration Assurance (PCA). The issue affects PCA 10.5.1.x before 10.5.1.58480, with an authenticated remote attacker able to inject or manipulate SQL via input used in backend queries, potentially exposing or m...

CVE-2015-6329

SQL injection vulnerability in Cisco Prime Collaboration Provisioning 10.6 and 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut64074...

CVE-2015-6329

CVE-2015-6329 corresponds to a SQL injection vulnerability in Cisco Prime Collaboration Provisioning (PCP). The issue affects PCP 10.6.x and 11.0.x prior to 11.0.0.815 (per Nessus) and Cisco’s advisory describes an authenticated, remote attacker able to execute unauthorized SQL queries via the we...

CVE-2015-6322

CVE-2015-6322 affects Cisco AnyConnect Secure Mobility Client IPC channel. The vulnerability arises from missing source-path validation in IPC commands, allowing a local attacker to bypass access restrictions and move arbitrary files with elevated privileges. Affected products include AnyConnect ...

CVE-2015-4325

CVE-2015-4325 affects Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2. The issue is in the process-management code: terminating a firestarter.py supervised process and triggering a restart via the root account allows local attackers to gain elevated privileges. The Cisco adv...