CVE-2014-3361

The ALG module in Cisco IOS 15.0 through 15.4 does not properly implement SIP over NAT, which allows remote attackers to cause a denial of service device reload via multipart SDP IPv4 traffic, aka Bug ID CSCun54071...

CVE-2014-3354

Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG before 3.4.4SG; and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allow remote attackers to cause a denial of service device reload via malformed RSVP...

CVE-2014-3356

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service device reload via malformed RSVP packets, aka Bug ID CSCue22753...

Code injection

Cisco Unified Communications Domain Manager Platform Software 4.4.3 and earlier allows remote attackers to cause a denial of service CPU consumption by sending crafted TCP packets quickly, aka Bug ID CSCuo42063...

CVE-2014-3379

Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service NPU and card hang or reload via a malformed MPLS packet, aka Bug ID CSCuq10466...

CVE-2014-3378

tacacsd in Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service process reload via a malformed TACACS+ packet, aka Bug ID CSCum00468...

CVE-2014-3376

Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service process reload via a malformed RSVP packet, aka Bug ID CSCuq12031...

Code injection

snmpd in Cisco IOS XR 5.1 and earlier allows remote authenticated users to cause a denial of service process reload via a malformed SNMPv2 packet, aka Bug ID CSCun67791...

Code injection

Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service process reload via a malformed RSVP packet, aka Bug ID CSCuq12031...

Cross site scripting

Cross-site scripting XSS vulnerability in the vCloud Director component in Cisco Nexus 1000V InterCloud for VMware allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq90524...

Code injection

Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service NPU and card hang or reload via a malformed MPLS packet, aka Bug ID CSCuq10466...

CVE-2014-3379

Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service NPU and card hang or reload via a malformed MPLS packet, aka Bug ID CSCuq10466...

CVE-2014-3367

The CVE-2014-3367 entry affects Cisco Nexus 1000V InterCloud’s vCloud Director component. The root cause is insufficient input validation that allows an attacker to craft a link directing an authenticated user to a malicious site, enabling a reflected XSS attack. Impact described: remote attacker...

CVE-2014-3376

Cisco IOS XR (versions 5.1 and earlier) is affected by CVE-2014-3376 due to improper parsing of malformed RSVP packets, allowing an unauthenticated remote attacker to trigger a denial-of-service by reloading the RSVP process. Cisco has published a security advisory and software updates to fix the...

CVE-2014-3377

CVE-2014-3377 affects Cisco IOS XR 5.1 and earlier and stems from improper parsing of a malformed SNMPv2 packet in the snmpd daemon. An authenticated, remote attacker can cause a denial of service (reload of snmpd). Cisco’s advisory confirms a vulnerability and that software updates are available...

CVE-2014-3377

snmpd in Cisco IOS XR 5.1 and earlier allows remote authenticated users to cause a denial of service process reload via a malformed SNMPv2 packet, aka Bug ID CSCun67791...

CVE-2014-3379

CVE-2014-3379 affects Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices. The root cause is incorrect parsing of malformed MPLS packets, which can cause a denial of service resulting in NPU and line-card hang or reload. The vulnerability is exploitable by an unauthenticated, ...

CVE-2014-3367

Cross-site scripting XSS vulnerability in the vCloud Director component in Cisco Nexus 1000V InterCloud for VMware allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCuq90524...

CVE-2014-3376

Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service process reload via a malformed RSVP packet, aka Bug ID CSCuq12031...

Memory corruption

Memory leak in Cisco TelePresence System Edge MXP Series Software F9.3.3 and earlier allows remote attackers to cause a denial of service management outage via multiple TELNET connections, aka Bug ID CSCuo63677...