CVE-2015-4200

Memory leak in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine PRE module on UBR devices allows remote attackers to cause a denial of service memory consumption by triggering an error during CPE negotiation, aka Bug ID CSCug00885...

CVE-2015-4204

The CVE-2015-4204 issue affects Cisco IOS 12.2 on uBR10000 devices (Performance Routing Engine) where a memory leak in the docsIfMCmtsMib handling via SNMP can be triggered by authenticated users, leading to DoS (memory exhaustion or PXF process crash). Root cause: memory leak when polling specif...

CVE-2015-4204

Memory leak in Cisco IOS 12.2 in the Performance Routing Engine PRE module on uBR10000 devices allows remote authenticated users to cause a denial of service memory consumption or PXF process crash by sending docsIfMCmtsMib SNMP requests quickly, aka Bug ID CSCue65051...

CVE-2015-4198

Cross-site scripting XSS vulnerability in the web framework on Cisco Web Security Appliance WSA devices with software 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified HTTP header, aka Bug ID CSCuu24409...

CVE-2015-4202

Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems CMTS does not properly restrict access to the IP Detail Record IPDR service, which allows remote attackers to obtain potentially sensitive MAC address and network-utilization information via crafted IPDR packets, aka Bug ID...

Code injection

Cisco NX-OS 5.25 on Nexus 7000 devices allows remote attackers to cause a denial of service device crash by sending a malformed LLDP packet on the local network, aka Bug ID CSCud89415...

CVE-2015-4197

Cisco NX-OS 5.25 on Nexus 7000 devices allows remote attackers to cause a denial of service device crash by sending a malformed LLDP packet on the local network, aka Bug ID CSCud89415...

Cross site scripting

Cross-site scripting XSS vulnerability in the web framework on Cisco Web Security Appliance WSA devices with software 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified HTTP header, aka Bug ID CSCuu24409...

CVE-2015-4198

Cross-site scripting XSS vulnerability in the web framework on Cisco Web Security Appliance WSA devices with software 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified HTTP header, aka Bug ID CSCuu24409...

CVE-2015-4198

Cisco Web Security Appliance (WSA) WEB FRAMEWORK HTTP HEADER INJECTION: An unauthenticated remote attacker could craft an HTTP header to inject arbitrary HTML/script into the browser via the WSA web interface. Root cause: insufficient validation of header value used in responses. Affected product...

Code injection

The Gateway General Packet Radio Service Support Node GGSN component on Cisco ASR 5000 devices with software 17.2.0.59184 and 18.0.L0.59219 allows remote attackers to cause a denial of service Session Manager restart via an invalid TCP/IP header, aka Bug ID CSCut68058...

CVE-2015-4201

Cisco ASR 5000 GGSN vulnerability CVE-2015-4201: in Cisco GGSN TCP input handler, improper validation of TCP/IP header length allows remote attackers to restart the Session Manager, causing DoS. Affected software: ASR 5000 17.2.0.59184 and 18.0.L0.59219. Root cause is incorrect input validation o...

CVE-2015-4201

The Gateway General Packet Radio Service Support Node GGSN component on Cisco ASR 5000 devices with software 17.2.0.59184 and 18.0.L0.59219 allows remote attackers to cause a denial of service Session Manager restart via an invalid TCP/IP header, aka Bug ID CSCut68058...

CVE-2015-4194

The web-based administrative interface in Cisco WebEx Meeting Center provides different error messages for failed login attempts depending on whether the username exists or corresponds to a privileged account, which allows remote attackers to enumerate account names and obtain sensitive informati...

CVE-2015-4195

Cisco IOS XR 5.1.1.K9SEC allows remote authenticated users to cause a denial of service vty error, and SSH and TELNET outage via a crafted disconnect action within an SSH session, aka Bug ID CSCul63127...

CVE-2015-4191

Cisco IOS XR 5.2.1 allows remote attackers to cause a denial of service ipv6io service reload via a malformed IPv6 packet, aka Bug ID CSCuq95565...

Code injection

Cisco IOS XR 5.2.1 allows remote attackers to cause a denial of service ipv6io service reload via a malformed IPv6 packet, aka Bug ID CSCuq95565...

Code injection

The web-based administrative interface in Cisco WebEx Meeting Center provides different error messages for failed login attempts depending on whether the username exists or corresponds to a privileged account, which allows remote attackers to enumerate account names and obtain sensitive informati...

CVE-2015-4191

Cisco IOS XR 5.2.1 allows remote attackers to cause a denial of service ipv6io service reload via a malformed IPv6 packet, aka Bug ID CSCuq95565...

CVE-2015-4191

Cisco IOS XR 5.2.1 is affected by CVE-2015-4191, a denial-of-service vulnerability in IPv6 packet processing that can cause the ipv6_io service to reload when a malformed IPv6 packet is processed. Root cause is improper handling of IPv6 messages in the ipv6_io service. Exploitation is remote and ...