5046 matches found
CVE-2016-1471
CVE-2016-1471 describes a Cross-site Scripting (XSS) vulnerability in the web-based management interface of Cisco Small Business 220 Series Smart Plus Switches (Sx220) with firmware prior to 1.0.1.1. The root cause is insufficient validation of user-supplied input in the web interface, allowing a...
CVE-2016-1471
Cross-site scripting XSS vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz76232...
CVE-2016-6369
Cisco AnyConnect Secure Mobility Client before 4.2.05015 and 4.3.x before 4.3.02039 mishandles pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCuz92464...
Code injection
Cisco AnyConnect Secure Mobility Client before 4.2.05015 and 4.3.x before 4.3.02039 mishandles pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCuz92464...
CVE-2016-6369
Cisco AnyConnect Secure Mobility Client before 4.2.05015 and 4.3.x before 4.3.02039 mishandles pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCuz92464...
Memory corruption
Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service control-plane protocol outage via crafted fragmented packets, aka Bug ID CSCux26791...
Design/Logic Flaw
The User Data Services UDS API implementation in Cisco Unified Communications Manager 11.5 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified API calls, aka Bug ID CSCux67855...
Design/Logic Flaw
Cisco Connected Streaming Analytics 1.1.1 allows remote authenticated users to discover a notification service password by reading administrative pages, aka Bug ID CSCuz92891...
CVE-2016-1484
Cisco WebEx Meetings Server 2.6 is affected by CVE-2016-1484, a remote information-disclosure vulnerability caused by lack of proper authentication controls that allows unauthenticated remote attackers to bypass access restrictions and obtain sensitive application information. CVSS scores in the ...
CVE-2016-1484
Cisco WebEx Meetings Server 2.6 allows remote attackers to bypass intended access restrictions and obtain sensitive application information via unspecified vectors, aka Bug ID CSCuy92724...
CVE-2016-1477
CVE-2016-1477 affects Cisco Connected Streaming Analytics 1.1.1. A vulnerability in the administrative web interface allows remote authenticated users to read pages that include a service password used for event/notification signaling, enabling disclosure of the notification service credentials. ...
CVE-2016-6362
Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0, 8.2.12x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow local users to gain privileges via crafted CLI parameters, aka Bug ID CSCuz24725...
CVE-2016-1485
Cross-site scripting XSS vulnerability in Cisco Identity Services Engine 1.30.876 allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva46497...
Cross site scripting
Cross-site scripting XSS vulnerability on Cisco IP Phone 8800 devices with software 11.0 allows remote authenticated users to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCuz03024...
Code injection
Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0, 8.2.12x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow local users to gain privileges via crafted CLI parameters, aka Bug ID CSCuz24725...
Information disclosure
The rate-limit feature in the 802.11 protocol implementation on Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.121.0 and 8.3.x before 8.3.102.0 allows remote attackers to cause a denial of service device reload via crafted 802.11 frames, aka Bug ID CSCva06192...
Design/Logic Flaw
The Aggregated MAC Protocol Data Unit AMPDU implementation on Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.121.0 and 8.3.x before 8.3.102.0 allows remote attackers to cause a denial of service device reload via a crafted AMPDU header, aka Bug ID CSCuz56288...
CVE-2016-6362
Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0, 8.2.12x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow local users to gain privileges via crafted CLI parameters, aka Bug ID CSCuz24725...