5047 matches found
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Cisco Unified Intelligence Center 10.61 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826...
CVE-2015-0740
Cross-site request forgery CSRF vulnerability in Cisco Unified Intelligence Center 10.61 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826...
CVE-2015-0740
CVE-2015-0740 is a CSRF vulnerability in Cisco Unified Intelligence Center 10.6(1) (Bug ID CSCus28826). The issue arises from insufficient validation of user input on the web interface, enabling an unauthenticated, remote attacker to hijack the authentication of arbitrary users. Impact is describ...
CVE-2015-0739
The Lights-Out Management LOM implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller BMC file uploads via unspecified vectors, aka Bug ID CSCus87938...
Code injection
The Lights-Out Management LOM implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller BMC file uploads via unspecified vectors, aka Bug ID CSCus87938...
CVE-2015-0738
Cross-site scripting XSS vulnerability in the Web Tracking Report page on Cisco Web Security Appliance WSA devices 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified field, aka Bug ID CSCuu16008...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Cisco Unified Customer Voice Portal CVP 10.51 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut93970...
Cross site scripting
Cross-site scripting XSS vulnerability in the Web Tracking Report page on Cisco Web Security Appliance WSA devices 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified field, aka Bug ID CSCuu16008...
CVE-2015-0738
Cisco Web Security Appliance (WSA) Web Tracking Report page (version 8.5.0-497) contains a cross-site scripting (XSS) vulnerability due to improper validation of user-supplied input on a field. An unauthenticated, remote attacker could inject arbitrary script in the vulnerable page, potentially a...
CVE-2015-0738
Cross-site scripting XSS vulnerability in the Web Tracking Report page on Cisco Web Security Appliance WSA devices 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified field, aka Bug ID CSCuu16008...
Command injection
Cisco Unified Communications Manager 10.01.10000.12 allows local users to gain privileges via a command string in an unspecified parameter, aka Bug ID CSCut19546...
Server side request forgery (ssrf)
The SMB module in Cisco Wide Area Application Services WAAS 6.01 allows remote attackers to cause a denial of service module reload via an invalid field in a Negotiate Protocol request, aka Bug ID CSCuo75645...
Cross site scripting
Cross-site scripting XSS vulnerability in Cisco Secure Access Control Server Solution Engine ACSE 5.50.1 allows remote attackers to inject arbitrary web script or HTML via a file-inclusion attack, aka Bug ID CSCuu11005...
Code injection
The wireless web-authentication subsystem on Cisco Wireless LAN Controller WLC devices 7.5.x and 7.6.x before 7.6.120 allows remote attackers to cause a denial of service process crash and device restart via a crafted value, aka Bug ID CSCum03269...
CVE-2015-0717
Cisco Unified Communications Manager 10.01.10000.12 allows local users to gain privileges via a command string in an unspecified parameter, aka Bug ID CSCut19546...
CVE-2015-0730
The SMB module in Cisco Wide Area Application Services WAAS 6.01 allows remote attackers to cause a denial of service module reload via an invalid field in a Negotiate Protocol request, aka Bug ID CSCuo75645...
CVE-2015-0729
Cross-site scripting XSS vulnerability in Cisco Secure Access Control Server Solution Engine ACSE 5.50.1 allows remote attackers to inject arbitrary web script or HTML via a file-inclusion attack, aka Bug ID CSCuu11005...
CVE-2015-0723
The wireless web-authentication subsystem on Cisco Wireless LAN Controller WLC devices 7.5.x and 7.6.x before 7.6.120 allows remote attackers to cause a denial of service process crash and device restart via a crafted value, aka Bug ID CSCum03269...