CVE-2016-1468

The administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5.2 allows remote authenticated users to execute arbitrary commands via crafted fields, aka Bug ID CSCuv12531...

CVE-2016-1430

Cisco RV180 and RV180W devices allow remote authenticated users to execute arbitrary commands as root via a crafted HTTP request, aka Bug ID CSCuz48592...

CVE-2016-1461

Cisco AsyncOS on Email Security Appliance ESA devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted attachment in an e-mail message, aka Bug ID CSCuz14932...

Design/Logic Flaw

Cisco AsyncOS on Email Security Appliance ESA devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted attachment in an e-mail message, aka Bug ID CSCuz14932...

CVE-2016-1461

Cisco AsyncOS on Email Security Appliance ESA devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted attachment in an e-mail message, aka Bug ID CSCuz14932...

CVE-2016-1461

CVE-2016-1461 affects Cisco AsyncOS on Email Security Appliance (ESA) devices up to 9.7.0-125. The vulnerability stems from the file-type filtering feature: an attacker can craft an email attachment to bypass malware detection. Impact is bypass of malware detection, enabling potential malware del...

CVE-2016-1463

Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1 allows remote attackers to bypass Snort rules via crafted parameters in the header of an HTTP packet, aka Bug ID CSCuz20737...

CVE-2016-1462

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Prime Service Catalog PSC 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795...

CVE-2016-1460

Cisco Wireless LAN Controller WLC devices 7.4121.0 and 8.00.30220.385 allow remote attackers to cause a denial of service via crafted wireless management frames, aka Bug ID CSCun92979...

Design/Logic Flaw

The web framework in Cisco Unified Computing System UCS Performance Manager 2.0.0 and earlier allows remote authenticated users to execute arbitrary commands via crafted parameters in a GET request, aka Bug ID CSCuy07827...

Design/Logic Flaw

Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1 allows remote attackers to bypass Snort rules via crafted parameters in the header of an HTTP packet, aka Bug ID CSCuz20737...

Code injection

Cisco Videoscape Session Resource Manager VSRM allows remote attackers to cause a denial of service device restart by sending a traffic flood to upstream devices, aka Bug ID CSCva01813...

Cross site scripting

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Prime Service Catalog PSC 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795...

Code injection

Cisco Wireless LAN Controller WLC devices 7.4121.0 and 8.00.30220.385 allow remote attackers to cause a denial of service via crafted wireless management frames, aka Bug ID CSCun92979...

CVE-2016-1467

Cisco Videoscape Session Resource Manager VSRM allows remote attackers to cause a denial of service device restart by sending a traffic flood to upstream devices, aka Bug ID CSCva01813...

CVE-2016-1462

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Prime Service Catalog PSC 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795...

CVE-2016-1460

Cisco Wireless LAN Controller WLC devices 7.4121.0 and 8.00.30220.385 allow remote attackers to cause a denial of service via crafted wireless management frames, aka Bug ID CSCun92979...

CVE-2016-1463

CVE-2016-1463 affects Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1. The root cause is improper handling of HTTP header parameters, enabling a remote, unauthenticated attacker to bypass Snort-based rules in the device. Affected component/behavior: Snort rule detection proces...

CVE-2016-1462

Cisco Prime Service Catalog (PSC) 11.0 contains a Cross-site scripting (XSS) vulnerability in its web-based management interface, identified as CSCuz63795 (CVE-2016-1462). The issue allows remote attackers to inject arbitrary web script or HTML via a crafted value. The NVD notes a CVSS v2 base sc...

CVE-2016-1460

Cisco WLC vulnerability CVE-2016-1460 affects WLC firmware 7.4(121.0) and 8.0(0.30220.385). The flaw is in the wireless frame management service where insufficient handling of crafted wireless management frames could allow an unauthenticated, adjacent attacker to cause a DoS on the device. Impact...