CVE-2015-4263

Cisco Mobility Services Engine (MSE) 10.0(0.1) contains a vulnerability in the Control and Provisioning feature that allows remote authenticated users to read log files and obtain sensitive information. The root cause is sensitive data being included in certain log files. An attacker must authent...

CVE-2015-4263

The Control and Provisioning functionality in Cisco Mobility Services Engine MSE 10.00.1 allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCut36851...

CVE-2015-4254

Cross-site request forgery CSRF vulnerability on Cisco TelePresence Advanced Media Gateway devices with software 1.11.40 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90732...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Cisco TelePresence Advanced Media Gateway devices with software 1.11.40 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90732...

CVE-2015-4254

CVE-2015-4254 affects Cisco TelePresence Advanced Media Gateway devices running software 1.1(1.40). A CSRF flaw could allow an unauthenticated remote attacker to hijack the authentication of arbitrary users via the device’s web interface. Cisco’s advisory indicates updates have been released to m...

CVE-2015-4260

Cross-site scripting XSS vulnerability in Cisco Hosted Collaboration Solution 10.61 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCuu14862...

CVE-2015-4244

The boot implementation on Cisco ASR 5000 and 5500 devices with software 14.0 allows local users to execute arbitrary Linux commands by leveraging administrative privileges for storage of these commands in a Compact Flash CF file, aka Bug ID CSCuu75278...

Design/Logic Flaw

The boot implementation on Cisco ASR 5000 and 5500 devices with software 14.0 allows local users to execute arbitrary Linux commands by leveraging administrative privileges for storage of these commands in a Compact Flash CF file, aka Bug ID CSCuu75278...

CVE-2015-4260

Cross-site scripting XSS vulnerability in Cisco Hosted Collaboration Solution 10.61 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCuu14862...

CVE-2015-4244

The CVE-2015-4244 issue affects Cisco ASR 5000 and ASR 5500 Series (ASK5K) boot software version 14.0, where the boot process improperly reads a local file on Compact Flash (CF). An authenticated, locally privileged attacker can place a file containing Linux commands on CF, causing those commands...

CVE-2015-4244

The boot implementation on Cisco ASR 5000 and 5500 devices with software 14.0 allows local users to execute arbitrary Linux commands by leveraging administrative privileges for storage of these commands in a Compact Flash CF file, aka Bug ID CSCuu75278...

CVE-2015-4260

CVE-2015-4260 affects Cisco Hosted Collaboration Solution 10.6(1) with an XSS flaw exploitable via a crafted URL parameter. Root cause: insufficient validation of user-supplied URL values leading to arbitrary script execution in the attacker’s target session. Affected product/function: Cisco HCS ...

CVE-2015-4258

Cross-site request forgery CSRF vulnerability on Cisco TelePresence MSE 8000 devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90444...

CVE-2015-4255

Cross-site request forgery CSRF vulnerability on Cisco TelePresence IP Gateway devices with software 2.03.34 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90734...

CVE-2015-4256

Cross-site request forgery CSRF vulnerability on Cisco TelePresence IP VCR devices with software 3.01.27 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90736...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Cisco TelePresence ISDN Gateway devices with software 2.21.106 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90724...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Cisco TelePresence IP Gateway devices with software 2.03.34 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90734...

CVE-2015-4252

Cross-site request forgery CSRF vulnerability on Cisco TelePresence ISDN Gateway devices with software 2.21.106 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90724...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Cisco TelePresence IP VCR devices with software 3.01.27 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90736...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Cisco TelePresence MCU 4500 devices with software 4.51.55 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90710...