CVE-2013-1190

The C-Series Rack Server component 1.4 in Cisco Unified Computing System UCS does not properly restrict inbound access to ports, which allows remote attackers to cause a denial of service Integrated Management Controller reboot or hang via crafted packets, as demonstrated by nmap, aka Bug ID...

Design/Logic Flaw

The web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manager CM configuration allows remote attackers to execute arbitrary code via a crafted POST request, aka Bug ID CSCuh26626...

CVE-2013-3443

The web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manager CM configuration allows remote attackers to execute arbitrary code via a crafted POST request, aka Bug ID CSCuh26626...

CVE-2013-3425

The Meeting Center component in Cisco WebEx 11 generates different error messages for invalid file-access attempts depending on whether a file exists, which allows remote authenticated users to enumerate files via a series of SPI calls, aka Bug ID CSCuc35965...

Code injection

The Meeting Center component in Cisco WebEx 11 generates different error messages for invalid file-access attempts depending on whether a file exists, which allows remote authenticated users to enumerate files via a series of SPI calls, aka Bug ID CSCuc35965...

CVE-2013-3425

The Meeting Center component in Cisco WebEx 11 generates different error messages for invalid file-access attempts depending on whether a file exists, which allows remote authenticated users to enumerate files via a series of SPI calls, aka Bug ID CSCuc35965...

CVE-2013-3445

The firewall subsystem in Cisco Identity Services Engine has an incorrect rule for open ports, which allows remote attackers to cause a denial of service CPU consumption or process crash via a flood of malformed IP packets, aka Bug ID CSCug94572...

Design/Logic Flaw

The firewall subsystem in Cisco Identity Services Engine has an incorrect rule for open ports, which allows remote attackers to cause a denial of service CPU consumption or process crash via a flood of malformed IP packets, aka Bug ID CSCug94572...

CVE-2013-3445

The CVE-2013-3445 issue affects Cisco Identity Services Engine (ISE) firewall subsystem, where an incorrect rule for open ports allows remote attackers to trigger denial of service via a flood of malformed IP packets. Root cause: misconfigured firewall rule leading to resource exhaustion (high CP...

CVE-2013-3429

Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager VSM before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the CiscoVSBWT aka Broadware sample code package, aka Bug ID CSCsv37163...

CVE-2013-3430

Cisco Video Surveillance Manager VSM before 7.0.0 allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the CiscoVSBWT aka Broadware sample code package, aka Bug ID CSCsv37288...

Cross site scripting

Cross-site scripting XSS vulnerability in the WebVPN portal login page on Cisco Adaptive Security Appliances ASA devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCug83080...

Directory traversal

Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager VSM before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the CiscoVSBWT aka Broadware sample code package, aka Bug ID CSCsv37163...

CVE-2013-3429

Cisco Video Surveillance Manager (VSM) prior to 7.0.0 contains multiple vulnerabilities (CVE-2013-3429, CVE-2013-3430, CVE-2013-3431) including a directory traversal flaw in monitor/logselect.php/read_log.jsp and a vulnerability allowing access to sensitive data without authentication. This could...

Design/Logic Flaw

The web framework in the server in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to bypass intended access restrictions and read unspecified web pages via crafted parameters, aka Bug ID CSCuh86385...

CVE-2013-3439

Cross-site scripting XSS vulnerability in Cisco Unified Operations Manager allows remote attackers to inject arbitrary web script or HTML via a crafted URL in an unspecified HTTP header field, aka Bug ID CSCud80182...

CVE-2013-3440

Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in Cisco Unified Operations Manager allow remote attackers to inject arbitrary web script or HTML, and obtain improperly secured cookies, via unspecified vectors, aka Bug ID CSCud80186...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in Cisco Unified Operations Manager allow remote attackers to inject arbitrary web script or HTML, and obtain improperly secured cookies, via unspecified vectors, aka Bug ID CSCud80186...

CVE-2013-3439

The CVE-2013-3439 issue affects Cisco Unified Operations Manager and is described as an HTTP header injection vulnerability that permits cross-site scripting (XSS) via a crafted URL. The root cause is improper validation of application URLs in the web interface, enabling an unauthenticated or rem...

CVE-2013-3440

Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in Cisco Unified Operations Manager allow remote attackers to inject arbitrary web script or HTML, and obtain improperly secured cookies, via unspecified vectors, aka Bug ID CSCud80186...