CVE-2015-4222

Cisco CVE-2015-4222 affects the Cisco Unified Communications Manager IM and Presence Service, version 9.1(1). A SQL injection flaw in the service’s handling of user input allows an authenticated, remote attacker to execute arbitrary SQL commands via unspecified vectors, potentially impacting conf...

CVE-2015-4224

Cisco Wireless LAN Controller (WLC) running 7.0(240.0) is affected by CVE-2015-4224. The issue resides in the CLI processor, where insufficient input validation allows an authenticated, local attacker to inject and execute arbitrary OS commands with elevated privileges via crafted CLI commands. I...

CVE-2015-4223

Cisco IOS XR 5.1.3 allows remote attackers to cause a denial of service process reload via crafted MPLS Label Distribution Protocol LDP packets, aka Bug ID CSCuu77478...

CVE-2015-4220

Cross-site scripting XSS vulnerability in Cisco Unified Presence Server 9.11 allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq03773...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Unified Presence Server 9.11 allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq03773...

Design/Logic Flaw

Cisco IOS XR 5.1.3 allows remote attackers to cause a denial of service process reload via crafted MPLS Label Distribution Protocol LDP packets, aka Bug ID CSCuu77478...

CVE-2015-4223

Cisco IOS XR 5.1.3 allows remote attackers to cause a denial of service process reload via crafted MPLS Label Distribution Protocol LDP packets, aka Bug ID CSCuu77478...

CVE-2015-4220

Cross-site scripting XSS vulnerability in Cisco Unified Presence Server 9.11 allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq03773...

CVE-2015-4215

Cisco Wireless LAN Controller WLC devices with software 7.5102.0 and 7.61.62 allow remote attackers to cause a denial of service device crash by triggering an exception during attempted forwarding of unspecified IPv6 packets to a non-IPv6 device, aka Bug ID CSCuj01046...

CVE-2015-4213

Cisco NX-OS 1.11g on Nexus 9000 devices allows remote authenticated users to discover cleartext passwords by leveraging the existence of a decryption mechanism, aka Bug ID CSCuu84391...

CVE-2015-4214

Cisco Unified MeetingPlace 8.61.2 and 8.61.9 allows remote authenticated users to discover cleartext passwords by reading HTML source code, aka Bug ID CSCuu33050...

CVE-2015-4212

Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by discovering credentials, aka Bug ID CSCut17466...

CVE-2015-4208

Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection attacks via vectors involving read access to a request, aka Bug ID CSCup88398...

Design/Logic Flaw

Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by discovering credentials, aka Bug ID CSCut17466...

Code injection

Cisco Wireless LAN Controller WLC devices with software 7.5102.0 and 7.61.62 allow remote attackers to cause a denial of service device crash by triggering an exception during attempted forwarding of unspecified IPv6 packets to a non-IPv6 device, aka Bug ID CSCuj01046...

Sql injection

Cisco WebEx Meeting Center does not properly restrict the content of URLs in GET requests, which allows remote attackers to obtain sensitive information or conduct SQL injection attacks via vectors involving read access to a request, aka Bug ID CSCup88398...

Command injection

Cisco NX-OS 1.11g on Nexus 9000 devices allows remote authenticated users to discover cleartext passwords by leveraging the existence of a decryption mechanism, aka Bug ID CSCuu84391...

Design/Logic Flaw

Cisco Unified MeetingPlace 8.61.2 and 8.61.9 allows remote authenticated users to discover cleartext passwords by reading HTML source code, aka Bug ID CSCuu33050...

CVE-2015-4214

Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) are affected by an information-disclosure vulnerability that lets an authenticated remote user read HTML source to obtain plaintext passwords (Bug CSCuu33050). The issue arises from how passwords are exposed in page source, enabling plaintext discl...

CVE-2015-4213

Cisco NX-OS 1.11g on Nexus 9000 devices allows remote authenticated users to discover cleartext passwords by leveraging the existence of a decryption mechanism, aka Bug ID CSCuu84391...