CVE-2013-5495

Cross-site scripting XSS vulnerability in the web framework in the Application Server in Cisco Unified MeetingPlace allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui44681...

CVE-2013-5496

CVE-2013-5496 affects Cisco NX-OS Open Network Environment Platform (ONEP). A vulnerability due to insufficient pointer validation allows an authenticated, remote attacker to cause a network element to reload (DoS) by sending crafted packets. The issue, tracked as CSCui51551, is documented in Cis...

CVE-2013-5482

Cisco Prime LAN Management Solution LMS does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting XFS" issue, aka Bug ID CSCug77823...

Design/Logic Flaw

administration.jsp in Cisco SocialMiner allows remote attackers to obtain sensitive information by sniffing the network for HTTP client-server traffic, aka Bug ID CSCuh76780...

Cross site scripting

Cisco Prime LAN Management Solution LMS does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting XFS" issue, aka Bug ID CSCug77823...

Design/Logic Flaw

The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors, aka Bug ID CSCug68407...

Design/Logic Flaw

The gadget implementation in Cisco SocialMiner does not properly restrict the content of GET requests, which allows remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 the browser history, aka Bug ID CSCuh74125...

CVE-2013-5482

Cisco Prime LMS is affected by a cross-frame scripting (XFS) vulnerability caused by improper handling of IFRAMEs, due to insufficient input filtering. The issue enables a remote attacker to expose users to clickjacking and related client-side attacks via a crafted page. Remediation is available ...

CVE-2013-5492

administration.jsp in Cisco SocialMiner allows remote attackers to obtain sensitive information by sniffing the network for HTTP client-server traffic, aka Bug ID CSCuh76780...

CVE-2013-5493

The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors, aka Bug ID CSCug68407...

CVE-2013-3446

Open redirect vulnerability in the login page in Cisco Digital Media Manager DMM allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCub23849...

Open redirect

Open redirect vulnerability in the login page in Cisco Digital Media Manager DMM allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCub23849...

CVE-2013-3446

Cisco Digital Media Manager (DMM) is affected by CVE-2013-3446: an open redirect in the DMM login page could allow an unauthenticated, remote attacker to redirect users to an arbitrary external URL, potentially enabling phishing. The issue stems from an open redirect vulnerability in the login fl...

CVE-2013-3458

Cisco Adaptive Security Appliances ASA devices, when SMP is used, do not properly process X.509 certificates, which allows remote attackers to cause a denial of service device crash via a large volume of 1 SSL or 2 TLS traffic, aka Bug ID CSCuh19462...

Cross site scripting

Cross-site scripting XSS vulnerability in bookmarklet.jsp in Cisco SocialMiner allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuh73868...

CVE-2013-5483

Cisco SocialMiner contains an XSS vulnerability in bookmarklet.jsp (CVE-2013-5483). An unauthenticated, remote attacker could trick a user into following a malicious link or visit a crafted site, injecting arbitrary script/HTML via input validation weaknesses. Impact per advisories includes user-...

CVE-2013-1117

Buffer overflow in the exception handler in Cisco WebEx Recording Format WRF player T27 LD before SP32 EP16, T27 L10N before SP32ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted WRF file, aka Bug ID...

CVE-2013-1119

Buffer overflow in Cisco WebEx Recording Format WRF player T27 LD before SP32 EP16, T27 L10N before SP32ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted DHT index value in JPEG data within a WRF file, aka...

CVE-2013-1118

Stack-based buffer overflow in Cisco WebEx Recording Format WRF player T27 LD before SP32 EP16, T27 L10N before SP32ORION111, and T28 before T28.8 allows remote attackers to execute arbitrary code via a crafted WRF file, aka Bug ID CSCuc27645...

CVE-2012-5990

Multiple cross-site scripting XSS vulnerabilities in Health Monitor Login pages in Cisco Prime Network Control System NCS and Wireless Control System WCS allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud18375...