CVE-2012-4102

The CVE-2012-4102 issue affects Cisco UCS Fabric Interconnect: the activate firmware command allows an authenticated, local attacker to inject commands by embedding them in an input parameter, due to improper input sanitization (Bug ID CSCtq02600). The vulnerability enables execution of Linux she...

CVE-2013-5503

The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause a denial of service memory consumption via UDP packets to listening ports, aka Bug ID CSCue69413...

CVE-2013-5503

CVE-2013-5503 concerns Cisco IOS XR 4.3.1 where the UDP processing path does not free packet memory after detecting full packet queues, enabling remote attackers to cause denial of service via UDP traffic to listening ports. The root cause is memory exhaustion on the device due to failure to rele...

CVE-2012-4109

The clear sshkey command in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq86559...

CVE-2012-4104

CVE-2012-4104 affects Cisco UCS Fabric Interconnect’s image-download process, enabling absolute path traversal via a header-defined storage location. The underlying issue allows a local authenticated attacker to overwrite or delete arbitrary files on the filesystem by supplying a crafted image he...

CVE-2012-4110

run-script in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq86560...

CVE-2012-4103

ethanalyzer in the fabric-interconnect component in Cisco Unified Computing System UCS allows local users to gain privileges by embedding commands in an unspecified parameter, aka Bug ID CSCtq02686...

CVE-2012-4096

The local file editor in the Baseboard Management Controller BMC in Cisco Unified Computing System UCS allows local users to gain privileges and modify arbitrary fabric-interconnect files, in the context of a vi process, via unspecified commands, aka Bug ID CSCtn06574...

Design/Logic Flaw

The Media Snapshot implementation on Cisco TelePresence Multipoint Switch CTMS devices allows remote authenticated users to cause a denial of service device reload by sending many Media Snapshot requests at the time of a meeting termination, aka Bug ID CSCuh44796...

CVE-2012-4096

The local file editor in the Baseboard Management Controller BMC in Cisco Unified Computing System UCS allows local users to gain privileges and modify arbitrary fabric-interconnect files, in the context of a vi process, via unspecified commands, aka Bug ID CSCtn06574...

CVE-2012-4096

The CVE-2012-4096 issue affects Cisco UCS BMC local file editor. Affected product: Cisco Unified Computing System BMC. Description in Cisco advisory and Red Hat/NVD entries confirms that an authenticated, local attacker can modify arbitrary files on the fabric interconnect by abusing the local fi...

CVE-2013-5516

The CVE-2013-5516 issue affects Cisco TelePresence Multipoint Switch (CTMS) Media Snapshot handling. A remote, authenticated attacker can cause a DoS (device reload) by sending continuous Media Snapshot requests during meeting termination. Affected component: Media Snapshot code; root cause: impr...

CVE-2013-5504

Cross-site scripting XSS vulnerability in the Mobile Device Management MDM portal in Cisco Identity Services Engine ISE allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30266...

CVE-2013-5505

Cross-site scripting XSS vulnerability in an administration page in Cisco Identity Services Engine ISE allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30275...

CVE-2013-3417

The administrative web interface in Cisco Video Surveillance Operations Manager does not properly perform authentication, which allows remote attackers to watch video feeds via a crafted URL, aka Bug ID CSCtg72262...

Cross site scripting

Cross-site scripting XSS vulnerability in the Mobile Device Management MDM portal in Cisco Identity Services Engine ISE allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30266...

Design/Logic Flaw

The administrative web interface in Cisco Video Surveillance Operations Manager does not properly perform authentication, which allows remote attackers to watch video feeds via a crafted URL, aka Bug ID CSCtg72262...

Cross site scripting

Cross-site scripting XSS vulnerability in an administration page in Cisco Identity Services Engine ISE allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30275...

CVE-2013-5504

Cross-site scripting XSS vulnerability in the Mobile Device Management MDM portal in Cisco Identity Services Engine ISE allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30266...

CVE-2013-5505

Cisco SA-20131001-CVE-2013-5505 documents an unauthenticated, remote XSS vulnerability in the Cisco Identity Services Engine (ISE) administration page. The issue stems from insufficient input validation of a parameter, allowing an attacker to inject arbitrary web script or HTML via a malicious li...