5047 matches found
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability on Cisco TelePresence MSE 8000 devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90444...
CVE-2015-4253
The CVE-2015-4253 issue affects Cisco TelePresence Serial Gateway devices running software 1.0(1.42). The vulnerability is a Cross-Site Request Forgery (CSRF) flaw that could allow an unauthenticated, remote attacker to hijack the authentication of arbitrary users due to insufficient CSRF protect...
CVE-2015-4257
Cross-site request forgery CSRF vulnerability on Cisco TelePresence MCU 4500 devices with software 4.51.55 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90710...
CVE-2015-4253
Cross-site request forgery CSRF vulnerability on Cisco TelePresence Serial Gateway devices with software 1.01.42 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90728...
CVE-2015-4258
The CVE-2015-4258 CSRF vulnerability affects Cisco TelePresence MSE 8000 Series. The issue arises from insufficient CSRF protection, enabling unauthenticated remote attackers to trick users into performing actions within the web interface, effectively hijacking user sessions. Affected component i...
CVE-2015-4256
Cisco TelePresence IP VCR devices running software 3.0(1.27) are affected by a CSRF vulnerability (Bug ID CSCuu90736). The issue stems from insufficient CSRF protection, allowing an unauthenticated, remote attacker to perform actions in the context of a logged-in user. A Cisco Security Advisory n...
CVE-2015-4252
The CVE-2015-4252 issue affects Cisco TelePresence ISDN Gateway devices (software 2.2(1.106)). The root cause is CSRF protection weakness that could allow an unauthenticated, remote attacker to perform actions within a user’s context, effectively hijacking authentication. Multiple connected sourc...
CVE-2015-4256
Cross-site request forgery CSRF vulnerability on Cisco TelePresence IP VCR devices with software 3.01.27 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90736...
CVE-2015-4243
The PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote attackers to cause a denial of service device reload by sending malformed PPPoE Active Discovery Request PADR packets on the local network, aka Bug ID CSCty94202...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 in FireSIGHT Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu94721...
CVE-2015-4242
The CVE-2015-4242 issue affects Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 within FireSIGHT Management Center. Root cause: insufficient CSRF protections, enabling cross-site request forgery. Impact: remote attackers could hijack the authentication of arbitrary users and perform unauthorize...
CVE-2015-4242
Cross-site request forgery CSRF vulnerability in Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 in FireSIGHT Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu94721...
CVE-2015-4230
Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service memory consumption via unspecified vectors, aka Bug ID CSCus91854...
Memory corruption
Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service memory consumption via unspecified vectors, aka Bug ID CSCus91854...
CVE-2015-4230
Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service memory consumption via unspecified vectors, aka Bug ID CSCus91854...
CVE-2015-4230
Cisco Headend System Releases are affected by CVE-2015-4230 due to a memory leak that can be exploited remotely to cause a denial of service (memory consumption). The issue is exploitable over network with no authentication required, per CVE details and Cisco security advisory indicating no softw...
Hardcoded credentials
Platform Software before 4.4.5 in Cisco Unified Communications Domain Manager CDM 8.x has a hardcoded password for a privileged account, which allows remote attackers to obtain root access by leveraging knowledge of this password and entering it in an SSH session, aka Bug ID CSCuq45546...
CVE-2015-4196
Platform Software before 4.4.5 in Cisco Unified Communications Domain Manager CDM 8.x has a hardcoded password for a privileged account, which allows remote attackers to obtain root access by leveraging knowledge of this password and entering it in an SSH session, aka Bug ID CSCuq45546...
CVE-2015-4239
Cisco Adaptive Security Appliance ASA Software 9.32.243 and 100.130.21 allows remote attackers to cause a denial of service device reload by sending crafted OSPFv2 packets on the local network, aka Bug ID CSCus84220...