Design/Logic Flaw

Cisco IOS 15.24M4 on Cisco Unified Border Element CUBE devices allows remote attackers to cause a denial of service input-queue consumption and traffic-processing outage via crafted RTCP packets, aka Bug ID CSCuj72215...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Unified Web and E-mail Interaction Manager 9.02 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj43033...

Directory traversal

Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.22a and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217...

Code injection

Cisco Adaptive Security Appliance ASA Software 9.1.5 and earlier allows remote authenticated users to cause a denial of service device reload via crafted attributes in a RADIUS packet, aka Bug ID CSCun69561...

CVE-2014-2192

Cross-site scripting XSS vulnerability in Cisco Unified Web and E-mail Interaction Manager 9.02 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuj43033...

CVE-2014-3269

The SNMP module in Cisco IOS XE 3.5E allows remote authenticated users to cause a denial of service device reload by polling frequently, aka Bug ID CSCug65204...

CVE-2014-2192

CVE-2014-2192 affects Cisco Unified Web and E-mail Interaction Manager 9.0(2). The issue is a cross-site scripting (XSS) vulnerability caused by insufficient input validation in a parameter, allowing an unauthenticated, remote attacker to inject arbitrary script or HTML via a crafted link. The Ci...

CVE-2014-3270

The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service process hang via a malformed packet, aka Bug ID CSCul80924...

CVE-2014-3264

Cisco Adaptive Security Appliance ASA Software 9.1.5 and earlier allows remote authenticated users to cause a denial of service device reload via crafted attributes in a RADIUS packet, aka Bug ID CSCun69561...

CVE-2014-3273

The LLDP implementation in Cisco IOS allows remote attackers to cause a denial of service device reload via a malformed packet, aka Bug ID CSCum96282...

CVE-2014-3269

Cisco IOS XE Software SNMP Denial of Service vulnerability (CVE-2014-3269) affects the SNMP module in IOS XE 3.5E. The issue arises from frequent polling of certain MIBs, which can allow an authenticated, remote attacker to cause a device reload (DoS) by sustained SNMP polling. Multiple connected...

CVE-2014-3271

Cisco IOS XR DHCPv6 implementation is vulnerable to denial of service via malformed DHCPv6 packets, causing process crash. Affected: Cisco IOS XR devices configured with DHCPv6 server functionality. Root cause: incorrect handling of malformed DHCPv6 packets. Impact: device crash (DoS). Mitigation...

CVE-2014-3270

Cisco IOS XR DHCPv6 implementation vulnerability (CVE-2014-3270) allows remote, unauthenticated attackers to cause a denial-of-service by sending malformed DHCPv6 packets, triggering a hang in the DHCPv6 server process. Affected: Cisco IOS XR software with DHCPv6 server functionality. Root cause:...

CVE-2014-2195

CVE-2014-2195 affects Cisco AsyncOS on Email Security Appliance (ESA) and Content Security Management Appliance (SMA). When Active Directory is enabled, the software does not properly handle group names, enabling a remote attacker to gain role privileges by exploiting group-name similarity (Bug I...

CVE-2013-6975

CVE-2013-6975 describes a directory traversal vulnerability in the Cisco NX-OS CLI. Affected software is Cisco NX-OS 6.2(2a) and earlier. The issue allows an authenticated, local user to read arbitrary files on the device via unspecified input. Multiple connected advisories reiterate the same cor...

CVE-2014-3263

The ScanSafe module in Cisco IOS 15.33M allows remote attackers to cause a denial of service device reload via HTTPS packets that require tower processing, aka Bug ID CSCum97038...

Design/Logic Flaw

The ScanSafe module in Cisco IOS 15.33M allows remote attackers to cause a denial of service device reload via HTTPS packets that require tower processing, aka Bug ID CSCum97038...

CVE-2014-3263

The ScanSafe module in Cisco IOS 15.33M allows remote attackers to cause a denial of service device reload via HTTPS packets that require tower processing, aka Bug ID CSCum97038...

CVE-2014-2134

Heap-based buffer overflow in Cisco WebEx Recording Format WRF player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted audio channel in a .wrf file,...

Design/Logic Flaw

Cisco WebEx Recording Format WRF player and Advanced Recording Format ARF player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allow remote attackers to cause a denial of service application crash via a crafted 1 .wrf or 2 .arf file that triggers a buffer over-read, aka Bug ID...