5047 matches found
CVE-2015-0626
The SOAP interface in Cisco Hosted Collaboration Solution HCS allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug ID CSCuc38114...
CVE-2015-0623
Cross-site scripting XSS vulnerability in the Administrator report page on Cisco Web Security Appliance WSA devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCus40627...
Design/Logic Flaw
The Wireless Intrusion Detection aka WIDS functionality on Cisco Wireless LAN Controller WLC devices allows remote attackers to cause a denial of service device outage via crafted packets that are improperly handled during rendering of the Signature Events Summary page, aka Bug ID CSCus46861...
CVE-2015-0622
The Wireless Intrusion Detection aka WIDS functionality on Cisco Wireless LAN Controller WLC devices allows remote attackers to cause a denial of service device outage via crafted packets that are improperly handled during rendering of the Signature Events Summary page, aka Bug ID CSCus46861...
Cross site scripting
Cross-site scripting XSS vulnerability in the Administrator report page on Cisco Web Security Appliance WSA devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCus40627...
Design/Logic Flaw
The SOAP interface in Cisco Hosted Collaboration Solution HCS allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug ID CSCuc38114...
CVE-2015-0623
Cross-site scripting XSS vulnerability in the Administrator report page on Cisco Web Security Appliance WSA devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCus40627...
CVE-2015-0622
The Wireless Intrusion Detection aka WIDS functionality on Cisco Wireless LAN Controller WLC devices allows remote attackers to cause a denial of service device outage via crafted packets that are improperly handled during rendering of the Signature Events Summary page, aka Bug ID CSCus46861...
CVE-2015-0621
Cisco TelePresence MCU devices with software 4.51.45 allow remote attackers to cause a denial of service device reload via an unspecified series of TCP packets, aka Bug ID CSCur50347...
CVE-2015-0620
The XML parser in Cisco TelePresence Management Suite TMS 14.3.2 and earlier does not properly handle external entities, which allows remote authenticated users to cause a denial of service via POST requests, aka Bug ID CSCus51494...
CVE-2015-0617
Cisco ASR 5500 System Architecture Evolution SAE Gateway devices allow remote attackers to cause a denial of service CPU consumption and SNMP outage via malformed SNMP packets, aka Bug ID CSCur13393...
Code injection
Cisco ASR 5500 System Architecture Evolution SAE Gateway devices allow remote attackers to cause a denial of service CPU consumption and SNMP outage via malformed SNMP packets, aka Bug ID CSCur13393...
Code injection
Cisco TelePresence MCU devices with software 4.51.45 allow remote attackers to cause a denial of service device reload via an unspecified series of TCP packets, aka Bug ID CSCur50347...
CVE-2015-0621
Cisco TelePresence MCU devices with software 4.51.45 allow remote attackers to cause a denial of service device reload via an unspecified series of TCP packets, aka Bug ID CSCur50347...
Authentication flaw
Cisco Adaptive Security Appliance ASA Software 9.2.3 and earlier, when challenge-response authentication is used, does not properly select tunnel groups, which allows remote authenticated users to bypass intended resource-access restrictions via a crafted tunnel-group parameter, aka Bug ID...
CVE-2014-8023
Cisco ASA Software 9.2(.3) and earlier is affected by a vulnerability in challenge‑response tunnel group selection. Improper implementation allows an authenticated remote attacker to bypass resource access restrictions by crafting a tunnel-group parameter, potentially enabling access to resources...
CVE-2014-8023
Cisco Adaptive Security Appliance ASA Software 9.2.3 and earlier, when challenge-response authentication is used, does not properly select tunnel groups, which allows remote authenticated users to bypass intended resource-access restrictions via a crafted tunnel-group parameter, aka Bug ID...
Race condition
Race condition in the Common Classification Engine CCE in the Measurement, Aggregation, and Correlation Engine MACE implementation in Cisco IOS 15.42T3 and earlier allows remote attackers to cause a denial of service device reload via crafted network traffic that triggers improper handling of the...
CVE-2015-0611
The administrative web-management portal in Cisco IX 8 .0.1 and earlier on Cisco TelePresence IX5000 devices does not properly restrict the device-recovery account's access, which allows remote authenticated users to obtain HelpDesk-equivalent privileges by leveraging device-recovery...