5047 matches found
CVE-2015-0752
Cross-site scripting XSS vulnerability in Cisco TelePresence Video Communication Server VCS X8.5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut27635...
CVE-2015-0755
The Posture module for Cisco Identity Services Engine ISE, as distributed in Cisco AnyConnect Secure Mobility Client 4.064, allows local users to gain privileges via unspecified commands, aka Bug ID CSCut05797...
CVE-2015-0752
Cisco TelePresence Video Communication Server (VCS) version X8.5.1 is vulnerable to a cross‑site scripting (XSS) flaw in the web interface caused by improper input validation. A remote attacker can supply a crafted URL to inject arbitrary HTML/JavaScript in the user’s browser, potentially leading...
CVE-2015-0753
CVE-2015-0753 affects Cisco Unified Email Interaction Manager (EIM) and Cisco Unified Web Interaction Manager (WIM) 9.0(2). The root cause is a lack of input validation on user-supplied input in SQL queries, enabling a SQL injection vulnerability. A remote, unauthenticated attacker can submit cra...
CVE-2015-0751
Cisco IP Phone 7861, when firmware from Cisco Unified Communications Manager 10.31 is used, allows remote attackers to cause a denial of service via crafted packets, aka Bug ID CSCus81800...
CVE-2015-0754
Cisco Finesse 10.5(1) is affected by a vulnerability (CVE‑2015‑0754) due to improper processing of XML files. An authenticated remote attacker can cause a DoS (high CPU/memory usage) or obtain sensitive information by sending a crafted XML document. The vulnerability requires authentication and, ...
CVE-2015-0722
The network drivers in Cisco TelePresence T, Cisco TelePresence TE, and Cisco TelePresence TC before 7.3.2 allow remote attackers to cause a denial of service process restart or device reload via a flood of crafted IP packets, aka Bug ID CSCuj68952...
CVE-2014-2174
Cisco TelePresence T, TelePresence TE, and TelePresence TC before 7.1 do not properly implement access control, which allows remote attackers to obtain root privileges by sending packets on the local network and allows physically proximate attackers to obtain root privileges via unspecified...
Code injection
The network drivers in Cisco TelePresence T, Cisco TelePresence TE, and Cisco TelePresence TC before 7.3.2 allow remote attackers to cause a denial of service process restart or device reload via a flood of crafted IP packets, aka Bug ID CSCuj68952...
Improper access control
Cisco TelePresence T, TelePresence TE, and TelePresence TC before 7.1 do not properly implement access control, which allows remote attackers to obtain root privileges by sending packets on the local network and allows physically proximate attackers to obtain root privileges via unspecified...
CVE-2015-0722
The network drivers in Cisco TelePresence T, Cisco TelePresence TE, and Cisco TelePresence TC before 7.3.2 allow remote attackers to cause a denial of service process restart or device reload via a flood of crafted IP packets, aka Bug ID CSCuj68952...
Design/Logic Flaw
The administrative web interface in Cisco Hosted Collaboration Solution HCS 10.61 and earlier allows remote authenticated users to execute arbitrary commands via crafted input to unspecified fields, aka Bug ID CSCut02786...
CVE-2015-0750
The administrative web interface in Cisco Hosted Collaboration Solution HCS 10.61 and earlier allows remote authenticated users to execute arbitrary commands via crafted input to unspecified fields, aka Bug ID CSCut02786...
CVE-2015-0746
The REST API in Cisco Access Control Server ACS 5.50.46.2 allows remote attackers to cause a denial of service API outage by sending many requests, aka Bug ID CSCut62022...
CVE-2015-0746
Cisco ACS REST API Denial of Service vulnerability (CVE-2015-0746) affects ACS 5.5(0.46.2). A remote attacker can cause API outages by sending large numbers of requests to the REST API (Bug CSCut62022). Affected component is the REST API; root cause described in Cisco advisory. Remediation status...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution PC4HCS 10.61 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut04596...
Design/Logic Flaw
The Protocol Independent Multicast PIM application in Cisco Adaptive Security Appliance ASA Software 9.20.0, 9.20.104, 9.23.1, 9.23.4, 9.31.105, 9.32.100, 9.40.115, 100.130.21, 100.1320.3, 100.1321.9, and 100.141.1 does not properly implement multicast-forwarding registration, which allows remote...
CVE-2015-0742
The Protocol Independent Multicast PIM application in Cisco Adaptive Security Appliance ASA Software 9.20.0, 9.20.104, 9.23.1, 9.23.4, 9.31.105, 9.32.100, 9.40.115, 100.130.21, 100.1320.3, 100.1321.9, and 100.141.1 does not properly implement multicast-forwarding registration, which allows remote...
CVE-2015-0741
CVE-2015-0741 affects Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) versions down to 10.6(1) and earlier. The issue is multiple cross-site request forgery (CSRF) vulnerabilities (Bug ID CSCut04596) that could allow remote attackers to hijack the authentication of arbitrary users....