CVE-2013-6695

The RBAC implementation in Cisco Secure Access Control System ACS does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, aka Bug...

CVE-2013-6696

Cisco Adaptive Security Appliance ASA Software does not properly handle errors during the processing of DNS responses, which allows remote attackers to cause a denial of service device reload via a malformed response, aka Bug ID CSCuj28861...

CVE-2013-6695

The RBAC implementation in Cisco Secure Access Control System ACS does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, aka Bug...

Cross site request forgery (csrf)

The SNMP module in Cisco IOS XR allows remote attackers to cause a denial of service process reload via a request for an unspecified MIB, aka Bug ID CSCuh43144...

Design/Logic Flaw

The Cisco Express Forwarding processing module in Cisco IOS XE allows remote attackers to cause a denial of service device reload via crafted MPLS packets that are not properly handled during IP header validation, aka Bug ID CSCuj23992...

CVE-2013-6706

CVE-2013-6706 affects the Cisco IOS XE Express Forwarding processing module. The vulnerability arises from improper MPLS packet handling during IP header validation, allowing remote attackers to trigger a denial of service (device reload). Cisco’s advisory notes this in IOS XE Software IP Header ...

CVE-2013-6700

The SNMP module in Cisco IOS XR allows remote attackers to cause a denial of service process reload via a request for an unspecified MIB, aka Bug ID CSCuh43144...

CVE-2013-6706

The Cisco Express Forwarding processing module in Cisco IOS XE allows remote attackers to cause a denial of service device reload via crafted MPLS packets that are not properly handled during IP header validation, aka Bug ID CSCuj23992...

CVE-2013-3394

Cross-site scripting XSS vulnerability in the web interface in Cisco Prime Network Registrar 8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted field, aka Bug ID CSCuh41429...

Cross site scripting

Cross-site scripting XSS vulnerability in the web interface in Cisco Prime Network Registrar 8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted field, aka Bug ID CSCuh41429...

CVE-2013-3394

Cross-site scripting XSS vulnerability in the web interface in Cisco Prime Network Registrar 8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted field, aka Bug ID CSCuh41429...

CVE-2013-6698

The web interface on Cisco Wireless LAN Controller WLC devices does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting XFS" issue, aka Bu...

Information disclosure

The IPSec implementation in Cisco IOS allows remote attackers to cause a denial of service MTU change and tunnel-session drop via crafted ICMP packets, aka Bug ID CSCul29918...

Design/Logic Flaw

The Control and Provisioning of Wireless Access Points CAPWAP protocol implementation on Cisco Wireless LAN Controller WLC devices allows remote attackers to cause a denial of service via a crafted CAPWAP packet that triggers a buffer over-read, aka Bug ID CSCuh81880...

CVE-2013-6694

The vulnerability CVE-2013-6694 affects the IPSec tunnel implementation in Cisco IOS Software. It allows an unauthenticated, remote attacker to change the tunnel MTU or path MTU and potentially cause IPSec tunnels to drop by sending crafted ICMP packets. Root cause: incorrect processing of certai...

CVE-2013-6694

The IPSec implementation in Cisco IOS allows remote attackers to cause a denial of service MTU change and tunnel-session drop via crafted ICMP packets, aka Bug ID CSCul29918...

CVE-2013-6692

Cisco IOS XE 3.8S.2 and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated users to cause a denial of service device reload via an AAA packet that triggers an address requirement, aka Bug ID CSCuh04949...

CVE-2013-6693

The MLDP implementation in Cisco IOS 15.33S and earlier on 7600 routers, when many VRFs are configured, allows remote attackers to cause a denial of service chunk corruption and device reload by establishing many multicast flows, aka Bug ID CSCue22345...

Code injection

Cisco IOS XE 3.8S.2 and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated users to cause a denial of service device reload via an AAA packet that triggers an address requirement, aka Bug ID CSCuh04949...

Memory corruption

The MLDP implementation in Cisco IOS 15.33S and earlier on 7600 routers, when many VRFs are configured, allows remote attackers to cause a denial of service chunk corruption and device reload by establishing many multicast flows, aka Bug ID CSCue22345...