CVE-2015-4231

The Python interpreter in Cisco NX-OS 6.28a on Nexus 7000 devices allows local users to bypass intended access restrictions and delete an arbitrary VDC's files by leveraging administrative privileges in one VDC, aka Bug ID CSCur08416...

Design/Logic Flaw

Cisco NX-OS 6.210 on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in the CLI, aka Bug ID CSCus44856...

CVE-2015-4231

Cisco NX-OS 6.2(8a) on Nexus 7000 devices is affected by CVE-2015-4231 due to incomplete privilege separation in the Python scripting engine across multiple VDCs. An authenticated local attacker with administrative privileges in one VDC can bypass access restrictions and delete files owned by a d...

CVE-2015-4232

Cisco NX-OS (Nexus/MDS 9000) devices are affected by CVE-2015-4232 due to insufficient input sanitization of tar parameters in the CLI, allowing a local authenticated user to execute arbitrary OS commands with user privileges. The vulnerability arises from how the tar command parameters are parse...

CVE-2015-4232

Cisco NX-OS 6.210 on Nexus and MDS 9000 devices allows local users to execute arbitrary OS commands by entering crafted tar parameters in the CLI, aka Bug ID CSCus44856...

Design/Logic Flaw

The SNMP implementation in Cisco Adaptive Security Appliance ASA Software 8.47 and 8.61.2 allows remote authenticated users to cause a denial of service device reload by sending many SNMP requests during a time of high network traffic, aka Bug ID CSCul02601...

CVE-2015-4228

Cisco Digital Content Manager DCM 15.0.0 might allow remote ad servers to cause a denial of service reboot via malformed ad messages, aka Bug ID CSCur13999...

CVE-2015-4238

Cisco ASA SNMP DoS (CVE-2015-4238) affects ASA Software 8.4(7) and 8.6(1.2). An authenticated remote attacker can cause a device reload by sending a high rate of SNMP requests during heavy network traffic due to SNMP handling/resource management issues (Bug CSCul02601). Impact is denial of servic...

CVE-2015-4233

SQL injection vulnerability in Cisco Unified MeetingPlace 8.61.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu54037...

Sql injection

SQL injection vulnerability in Cisco Unified MeetingPlace 8.61.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuu54037...

Code injection

The packet-storing feature on Cisco 9900 phones with firmware 9.32 does not properly support the RTP protocol, which allows remote attackers to cause a denial of service device hang by sending malformed RTP packets after a call is answered, aka Bug ID CSCur39976...

CVE-2015-4227

Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service memory consumption via unspecified vectors, aka Bug ID CSCus91838...

Memory corruption

Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service memory consumption via unspecified vectors, aka Bug ID CSCus91838...

CVE-2015-4227

Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service memory consumption via unspecified vectors, aka Bug ID CSCus91838...

CVE-2015-4225

Cisco Application Policy Infrastructure Controller APIC 1.01.110a and 1.01e on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485...

Design/Logic Flaw

Cisco Application Policy Infrastructure Controller APIC 1.01.110a and 1.01e on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485...

CVE-2015-4221

Cisco Unified Communications Manager IM and Presence Service 9.11 does not properly restrict access to encrypted passwords, which allows remote attackers to determine cleartext passwords, and consequently execute arbitrary commands, by visiting an unspecified web page and then conducting a...

Command injection

Cisco Wireless LAN Controller WLC devices with software 7.0240.0 allow local users to execute arbitrary OS commands in a privileged context via crafted CLI commands, aka Bug ID CSCuj39474...

Sql injection

SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.11 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuq46325...

CVE-2015-4222

Cisco CVE-2015-4222 affects the Cisco Unified Communications Manager IM and Presence Service, version 9.1(1). A SQL injection flaw in the service’s handling of user input allows an authenticated, remote attacker to execute arbitrary SQL commands via unspecified vectors, potentially impacting conf...