5047 matches found
CVE-2015-6301
The DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5.2.0 Base allows remote attackers to cause a denial of service process reset via crafted packets, aka Bug ID CSCun72171...
CVE-2015-6284
Buffer overflow in the Conference Control Protocol API implementation in Cisco TelePresence Server software before 4.12.33 on 7010, MSE 8710, Multiparty Media 310 and 320, and Virtual Machine devices allows remote attackers to cause a denial of service device crash via a crafted URL, aka Bug ID...
Code injection
The DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5.2.0 Base allows remote attackers to cause a denial of service process reset via crafted packets, aka Bug ID CSCun72171...
Buffer overflow
Buffer overflow in the Conference Control Protocol API implementation in Cisco TelePresence Server software before 4.12.33 on 7010, MSE 8710, Multiparty Media 310 and 320, and Virtual Machine devices allows remote attackers to cause a denial of service device crash via a crafted URL, aka Bug ID...
Sql injection
SQL injection vulnerability in the web interface in Cisco Unity Connection 9.11.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via a crafted POST request, aka Bug ID CSCuv63824...
Code injection
Cisco Secure Access Control Server ACS Solution Engine 5.70.15 allows remote authenticated users to cause a denial of service SSH screen process crash via crafted 1 CLI or 2 GUI commands, aka Bug ID CSCuw24694...
Code injection
Cisco NX-OS 6.12I34 and 7.03I11 on Nexus 9000 N9K devices allows remote attackers to cause a denial of service CPU consumption or control-plane instability or trigger unintended traffic forwarding via a Layer 2 packet with a reserved VLAN number, aka Bug ID CSCuw13560...
CVE-2015-6299
SQL injection vulnerability in the web interface in Cisco Unity Connection 9.11.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via a crafted POST request, aka Bug ID CSCuv63824...
CVE-2015-6300
Cisco Secure Access Control Server ACS Solution Engine 5.70.15 allows remote authenticated users to cause a denial of service SSH screen process crash via crafted 1 CLI or 2 GUI commands, aka Bug ID CSCuw24694...
CVE-2015-6295
Cisco NX-OS 6.12I34 and 7.03I11 on Nexus 9000 N9K devices allows remote attackers to cause a denial of service CPU consumption or control-plane instability or trigger unintended traffic forwarding via a Layer 2 packet with a reserved VLAN number, aka Bug ID CSCuw13560...
CVE-2015-6301
The CVE-2015-6301 entry concerns Cisco IOS on ASR 9000 devices with software version 5.2.0 Base, where the DHCPv6 server is vulnerable to crafted packets that remotely cause a denial of service (process reset). The issue is due to improper handling of DHCPv6 packets and can be triggered without a...
CVE-2015-6284
Buffer overflow in the Conference Control Protocol API implementation in Cisco TelePresence Server software before 4.12.33 on 7010, MSE 8710, Multiparty Media 310 and 320, and Virtual Machine devices allows remote attackers to cause a denial of service device crash via a crafted URL, aka Bug ID...
CVE-2015-6301
The DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5.2.0 Base allows remote attackers to cause a denial of service process reset via crafted packets, aka Bug ID CSCun72171...
CVE-2015-4307
The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL, aka Bug ID CSCut64111...
Design/Logic Flaw
The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restrictions, and discover credentials or SNMP communities for arbitrary tenant domains, via a crafted URL, aka Bug ID CSCus62656...
Design/Logic Flaw
The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL, aka Bug ID CSCut64111...
CVE-2015-4307
CVE-2015-4307 affects Cisco Prime Collaboration Provisioning Web Framework prior to 11.0. An authenticated, remote attacker can bypass access controls via a crafted URL and create administrative accounts (Bug CSCut64111). The issue enables access to higher-privileged functions that should be rest...
CVE-2015-4305
The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restrictions, and discover credentials or SNMP communities for arbitrary tenant domains, via a crafted URL, aka Bug ID CSCus62656...
CVE-2015-4307
The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL, aka Bug ID CSCut64111...