CVE-2015-4212

Cisco WebEx Meeting Center allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by discovering credentials, aka Bug ID CSCut17466...

CVE-2015-4208

The connected documents provide concrete details for CVE-2015-4208 affecting Cisco WebEx Meeting Center . The vulnerability arises from inadequate restriction of the content of URLs in GET requests , allowing remote, unauthenticated attackers to either obtain sensitive information or perform SQL ...

CVE-2015-4215

Cisco WLC IPv6 packet handling vulnerability (CVE-2015-4215) affects Cisco Wireless LAN Controller devices running software 7.5(102.0) and 7.6(1.62). The issue arises when forwarding IPv6 packets to a device not configured for IPv6, causing an unhandled exception that can crash the device. This i...

CVE-2015-4210

Cross-site scripting XSS vulnerability in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur03806...

CVE-2015-4207

Cisco WebEx Meeting Center places a meeting's access number in a URL, which allows remote attackers to obtain sensitive information and bypass intended attendance restrictions by visiting a meeting-registration page, aka Bug ID CSCus62147...

CVE-2015-4205

Cisco IOS XR 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service NPU chip reset or line-card reload by sending crafted IEEE 802.3x flow-control PAUSE frames on the local network, aka Bug ID CSCut19959...

Design/Logic Flaw

Cisco IOS XR 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service NPU chip reset or line-card reload by sending crafted IEEE 802.3x flow-control PAUSE frames on the local network, aka Bug ID CSCut19959...

Authorization

Cisco WebEx Meeting Center does not properly determine authorization for reading a host calendar, which allows remote attackers to obtain sensitive information by obtaining a list of all meetings and then sending a calendar request for each one, aka Bug ID CSCur23913...

CVE-2015-4189

Cross-site request forgery CSRF vulnerability in Cisco Data Center Analytics Framework DCAF 1.4 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun26807...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco Data Center Analytics Framework DCAF 1.4 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun26807...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur03806...

Information disclosure

Cisco WebEx Meeting Center places a meeting's access number in a URL, which allows remote attackers to obtain sensitive information and bypass intended attendance restrictions by visiting a meeting-registration page, aka Bug ID CSCus62147...

CVE-2015-4189

Cisco Data Center Analytics Framework (DCAF) 1.4 contains a Cross-Site Request Forgery (CSRF) vulnerability that could allow remote attackers to hijack the authentication of arbitrary users (Bug ID CSCun26807). Affected product: DCAF 1.4. Root cause: CSRF protection insufficiency enabling unautho...

CVE-2015-4207

Cisco WebEx Meeting Center places a meeting's access number in a URL, which allows remote attackers to obtain sensitive information and bypass intended attendance restrictions by visiting a meeting-registration page, aka Bug ID CSCus62147...

CVE-2015-4205

Cisco IOS XR 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service NPU chip reset or line-card reload by sending crafted IEEE 802.3x flow-control PAUSE frames on the local network, aka Bug ID CSCut19959...

CVE-2015-4205

CVE-2015-4205 affects Cisco IOS XR 5.3.1 on ASR 9000 devices. The issue stems from improper flow-control (IEEE 802.3x) PAUSE frame processing, allowing an unauthenticated adjacent attacker to cause a denial of service via NPU chip reset or line-card reload. Impact is a DoS affecting availability ...

CVE-2015-4189

Cross-site request forgery CSRF vulnerability in Cisco Data Center Analytics Framework DCAF 1.4 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun26807...

CVE-2015-4203

Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine PRE module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers to cause a denial of service PXF process crash by sending malformed MPLS 6VPE packets quickly, aka Bug ID CSCud83396...

CVE-2015-4204

Memory leak in Cisco IOS 12.2 in the Performance Routing Engine PRE module on uBR10000 devices allows remote authenticated users to cause a denial of service memory consumption or PXF process crash by sending docsIfMCmtsMib SNMP requests quickly, aka Bug ID CSCue65051...

Memory corruption

Memory leak in Cisco IOS 12.2 in the Performance Routing Engine PRE module on uBR10000 devices allows remote authenticated users to cause a denial of service memory consumption or PXF process crash by sending docsIfMCmtsMib SNMP requests quickly, aka Bug ID CSCue65051...