Hardcoded credentials

The Call Detail Records CDR Management component in Cisco Unified Communications Manager Unified CM allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCun74374...

Code injection

Cisco Adaptive Security Appliance ASA Software, when DHCPv6 replay is configured, allows remote attackers to cause a denial of service device reload via a crafted DHCPv6 packet, aka Bug ID CSCun45520...

Command injection

The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a crafted HTTP request, aka Bug ID CSCun74133...

Code injection

The L2TP module in Cisco IOS XE 3.10S.2 and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service ESP card reload via a malformed L2TP packet, aka Bug ID CSCun09973...

CVE-2014-2185

Cisco Unified Communications Manager (Unified CM) CDR Management is affected by CVE-2014-2185. The vulnerability stems from extraneous information included in the web page, allowing an authenticated, remote attacker to read sensitive fields in an HTML document. Impact is sensitive information dis...

CVE-2014-2184

The CVE-2014-2184 issue concerns the Cisco IP Manager Assistant (IPMA) within Cisco Unified Communications Manager. The root cause is improper validation of user input, enabling an unauthenticated, remote attacker to access sensitive information via crafted URLs. Affected context: IPMA component ...

CVE-2014-2183

The L2TP module in Cisco IOS XE 3.10S.2 and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service ESP card reload via a malformed L2TP packet, aka Bug ID CSCun09973...

CVE-2014-2183

The CVE-2014-2183 issue concerns Cisco IOS XE on ASR 1000 Series routers (3.10S(.2) and earlier). The L2TP module can be triggered by malformed L2TP packets over the network, causing a denial-of-service via ESP card reload. Exploitation requires authenticated access; impact is a reload of the ESP...

CVE-2014-2180

The Cisco advisory for CVE-2014-2180 describes a vulnerability in the Document Management component of Cisco Unified Contact Center Express where insufficient parameter validation allows an authenticated, remote attacker to upload files to arbitrary filesystem locations via a crafted HTTP request...

CVE-2014-2185

The Call Detail Records CDR Management component in Cisco Unified Communications Manager Unified CM allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCun74374...

CVE-2012-3946

Cisco IOS before 15.32S allows remote attackers to bypass interface ACL restrictions in opportunistic circumstances by sending IPv6 packets in an unspecified scenario in which expected packet drops do not occur for "a small percentage" of the packets, aka Bug ID CSCty73682...

Code injection

Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service device reload via crafted 1 broadcast or 2 multicast ICMP packets with fragmentation, aka Bug ID CSCub55948...

Design/Logic Flaw

Cisco IOS before 15.32S allows remote attackers to bypass interface ACL restrictions in opportunistic circumstances by sending IPv6 packets in an unspecified scenario in which expected packet drops do not occur for "a small percentage" of the packets, aka Bug ID CSCty73682...

CVE-2012-3946

Cisco IOS

CVE-2012-5044

Cisco IOS before 15.31T, when media flow-around is not used, allows remote attackers to cause a denial of service media loops and stack memory corruption via VoIP traffic, aka Bug ID CSCub45809...

CVE-2012-4638

Cisco IOS before 15.11SY allows local users to cause a denial of service device reload by establishing an outbound SSH session, aka Bug ID CSCto00318...

CVE-2012-4651

Cisco IOS before 15.32T, when scansafe is enabled, allows remote attackers to cause a denial of service latency via SYN packets that are not accompanied by SYN-ACK packets from the Scan Safe Tower, aka Bug ID CSCub85451...

CVE-2012-5017

Cisco IOS before 15.11SY1 allows remote authenticated users to cause a denial of service device reload by establishing a VPN session and then sending malformed IKEv2 packets, aka Bug ID CSCub39268...

CVE-2012-5427

Cisco IOS Unified Border Element CUBE in Cisco IOS before 15.32T allows remote authenticated users to cause a denial of service input queue wedge via a crafted series of RTCP packets, aka Bug ID CSCuc42518...

CVE-2012-5032

The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.11SY3 does not require authentication, which allows remote attackers to trigger the forwarding of VPN traffic to an attacker-controlled destination, or the discarding of this traffic, by arranging for an...