CVE-2013-1110

Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and 1 enable or 2 disable training-center recordings via a crafted URL, aka Bug ID CSCzu81065...

Design/Logic Flaw

Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and 1 enable or 2 disable training-center recordings via a crafted URL, aka Bug ID CSCzu81065...

CVE-2013-1110

Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and 1 enable or 2 disable training-center recordings via a crafted URL, aka Bug ID CSCzu81065...

CVE-2013-1108

Cisco WebEx Training Center is affected by CVE-2013-1108. The vulnerability allows remote authenticated users to remove hands-on lab-session reservations via a crafted URL (Bug ID CSCzu81064). The NVD entry records a CVSS v2 base score of 4.0 (MEDIUM) with Network attack vector, low attack comple...

Code injection

Cisco Adaptive Security Appliances ASA devices with firmware 8.x through 8.41 do not properly manage SSH sessions, which allows remote authenticated users to cause a denial of service device crash by establishing multiple sessions, aka Bug ID CSCtc59462...

Input validation

Cisco Adaptive Security Appliances ASA devices with firmware 8.4 do not properly validate unspecified input related to UNC share pathnames, which allows remote authenticated users to cause a denial of service device crash via unknown vectors, aka Bug ID CSCuc65775...

CVE-2012-6395

Cisco ASA devices running firmware 8.4 are affected by an input validation issue for UNC share pathnames. The vulnerability allows remote authenticated users to trigger a denial of service (device crash) due to improper validation of unspecified input. No explicit exploit details are provided in ...

CVE-2012-5717

Cisco Adaptive Security Appliances ASA devices with firmware 8.x through 8.41 do not properly manage SSH sessions, which allows remote authenticated users to cause a denial of service device crash by establishing multiple sessions, aka Bug ID CSCtc59462...

Command injection

The VPN driver in Cisco VPN Client on Windows does not properly interact with the kernel, which allows local users to cause a denial of service kernel fault and system crash via a crafted application, aka Bug ID CSCuc81669...

CVE-2012-5429

CVE-2012-5429 affects the Cisco VPN Client on Windows, where the VPN driver’s improper interaction with the kernel allows a local attacker to trigger a denial of service (kernel fault and system crash) via a crafted application (Bug ID CSCuc81669). The issue is rooted in the VPN driver’s interfac...

CVE-2012-5444

Cisco TelePresence Video Communication Server VCS X7.0.3 does not properly process certain search rules, which allows remote attackers to create conferences via an unspecified Conductor request, aka Bug ID CSCub67989...

CVE-2012-6397

Cross-site scripting XSS vulnerability in Cisco WebEx Social formerly Cisco Quad allows remote attackers to inject arbitrary web script or HTML via a crafted RSS service link, aka Bug ID CSCub61977...

CVE-2013-1109

Cross-site request forgery CSRF vulnerability in testingLibraryAction.do in the Training Center testing library in Cisco WebEx Training Center allows remote attackers to hijack the authentication of arbitrary users for requests that delete tests, aka Bug ID CSCzu81067...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in testingLibraryAction.do in the Training Center testing library in Cisco WebEx Training Center allows remote attackers to hijack the authentication of arbitrary users for requests that delete tests, aka Bug ID CSCzu81067...

Design/Logic Flaw

Cisco Prime LAN Management Solution LMS 4.1 through 4.2.2 on Linux does not properly validate authentication and authorization requests in TCP sessions, which allows remote attackers to execute arbitrary commands via a crafted session, aka Bug ID CSCuc79779...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco WebEx Social formerly Cisco Quad allows remote attackers to inject arbitrary web script or HTML via a crafted RSS service link, aka Bug ID CSCub61977...

Design/Logic Flaw

Cisco TelePresence Video Communication Server VCS X7.0.3 does not properly process certain search rules, which allows remote attackers to create conferences via an unspecified Conductor request, aka Bug ID CSCub67989...

CVE-2012-5444

Cisco TelePresence Video Communication Server VCS X7.0.3 does not properly process certain search rules, which allows remote attackers to create conferences via an unspecified Conductor request, aka Bug ID CSCub67989...

CVE-2012-6397

Cross-site scripting XSS vulnerability in Cisco WebEx Social formerly Cisco Quad allows remote attackers to inject arbitrary web script or HTML via a crafted RSS service link, aka Bug ID CSCub61977...

CVE-2013-1109

Cisco WebEx Training Center is affected by CVE-2013-1109, a CSRF vulnerability in the Training Center testing library (testingLibraryAction.do) that could allow remote attackers to hijack the authentication of arbitrary users and trigger test deletions. The CVE entry notes a CVSS v2 base score of...