5047 matches found
CVE-2014-2137
CRLF injection vulnerability in the web framework in Cisco Web Security Appliance WSA 7.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCuj61002...
CVE-2014-2125
Cisco Unity Connection Web Inbox v8.6(2a)SU3 and earlier are affected by a cross-site scripting (XSS) vulnerability caused by insufficient input validation on a web inbox parameter. An unauthenticated, remote attacker could lure a user to a crafted link, allowing execution of arbitrary HTML/JavaS...
CVE-2014-2111
The Application Layer Gateway ALG module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service device reload via crafted DNS packets, aka Bug ID CSCue00996...
CVE-2014-2118
Multiple cross-site scripting XSS vulnerabilities in dashboard-related HTML documents in Cisco Prime Security Manager aka PRSM 9.2.1-2 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCun50687...
CVE-2014-2108
Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service device reload via a malformed IKEv2 packet, aka Bug ID CSCui88426...
CVE-2014-2107
Cisco IOS 12.2 and 15.0 through 15.3, when used with the Kailash FPGA before 2.6 on RSP720-3C-10GE and RSP720-3CXL-10GE devices, allows remote attackers to cause a denial of service route switch processor outage via crafted IP packets, aka Bug ID CSCug84789...
Design/Logic Flaw
The Application Layer Gateway ALG module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service device reload via crafted DNS packets, aka Bug ID CSCue00996...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in dashboard-related HTML documents in Cisco Prime Security Manager aka PRSM 9.2.1-2 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCun50687...
Code injection
Cisco IOS 12.2 and 15.0 through 15.3, when used with the Kailash FPGA before 2.6 on RSP720-3C-10GE and RSP720-3CXL-10GE devices, allows remote attackers to cause a denial of service route switch processor outage via crafted IP packets, aka Bug ID CSCug84789...
Code injection
The SSL VPN aka WebVPN feature in Cisco IOS 15.1 through 15.4 allows remote attackers to cause a denial of service memory consumption via crafted HTTP requests, aka Bug ID CSCuf51357...
Design/Logic Flaw
Cisco IOS 15.3M before 15.33M2 and IOS XE 3.10.xS before 3.10.2S allow remote attackers to cause a denial of service device reload via crafted SIP messages, aka Bug ID CSCug45898...
Design/Logic Flaw
Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service device reload via a malformed IKEv2 packet, aka Bug ID CSCui88426...
CVE-2014-2118
Cisco Prime Security Manager (PRSM) prior to and including version 9.2(.1-2) contains multiple cross-site scripting (XSS) vulnerabilities in dashboard-related HTML pages. The root cause is insufficient input validation in several dashboard HTML parameters, allowing remote attackers to inject arbi...
CVE-2014-2106
Cisco IOS 15.3M before 15.33M2 and IOS XE 3.10.xS before 3.10.2S allow remote attackers to cause a denial of service device reload via crafted SIP messages, aka Bug ID CSCug45898...
CVE-2014-2118
Multiple cross-site scripting XSS vulnerabilities in dashboard-related HTML documents in Cisco Prime Security Manager aka PRSM 9.2.1-2 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCun50687...
CVE-2014-2107
Cisco IOS 12.2 and 15.0 through 15.3, when used with the Kailash FPGA before 2.6 on RSP720-3C-10GE and RSP720-3CXL-10GE devices, allows remote attackers to cause a denial of service route switch processor outage via crafted IP packets, aka Bug ID CSCug84789...
CVE-2014-2108
Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service device reload via a malformed IKEv2 packet, aka Bug ID CSCui88426...
CVE-2014-2124
Cisco IOS 15.12SY3 and earlier, when used with Supervisor Engine 2T aka Sup2T on Catalyst 6500 devices, allows remote attackers to cause a denial of service device crash via crafted multicast packets, aka Bug ID CSCuf60783...
Code injection
Cisco IOS 15.12SY3 and earlier, when used with Supervisor Engine 2T aka Sup2T on Catalyst 6500 devices, allows remote attackers to cause a denial of service device crash via crafted multicast packets, aka Bug ID CSCuf60783...
CVE-2014-2124
Cisco IOS 15.12SY3 and earlier, when used with Supervisor Engine 2T aka Sup2T on Catalyst 6500 devices, allows remote attackers to cause a denial of service device crash via crafted multicast packets, aka Bug ID CSCuf60783...