CVE-2010-0589

The Web Install ActiveX control CSDWebInstaller in Cisco Secure Desktop CSD before 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote attackers to force the download and execution of arbitrary files via a crafted web page, aka Bug ID CSCta25876...

Code injection

Unspecified vulnerability in Cisco IOS 12.4, when NAT SCCP fragmentation support is enabled, allows remote attackers to cause a denial of service device reload via crafted Skinny Client Control Protocol SCCP packets, aka Bug ID CSCsy09250...

Design/Logic Flaw

Cisco IOS 12.1 through 12.4, and 15.0M before 15.01M1, allows remote attackers to cause a denial of service interface queue wedge via malformed H.323 packets, aka Bug ID CSCta19962...

CVE-2010-0584

Unspecified vulnerability in Cisco IOS 12.4, when NAT SCCP fragmentation support is enabled, allows remote attackers to cause a denial of service device reload via crafted Skinny Client Control Protocol SCCP packets, aka Bug ID CSCsy09250...

CVE-2010-0583

Memory leak in the H.323 implementation in Cisco IOS 12.1 through 12.4, and 15.0M before 15.01M1, allows remote attackers to cause a denial of service memory consumption and device reload via malformed H.323 packets, aka Bug ID CSCtb93855...

Memory corruption

Memory leak in the H.323 implementation in Cisco IOS 12.1 through 12.4, and 15.0M before 15.01M1, allows remote attackers to cause a denial of service memory consumption and device reload via malformed H.323 packets, aka Bug ID CSCtb93855...

Design/Logic Flaw

Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express CME or Cisco Unified Survivable Remote Site Telephony SRST is enabled, allows remote attackers to cause a denial of service device reload via a malformed Skinny Client Control Protocol SCCP message, aka Bug ID...

CVE-2010-0583

Memory leak in the H.323 implementation in Cisco IOS 12.1 through 12.4, and 15.0M before 15.01M1, allows remote attackers to cause a denial of service memory consumption and device reload via malformed H.323 packets, aka Bug ID CSCtb93855...

CVE-2010-0582

CVE-2010-0582 is a Cisco IOS H.323 DoS vulnerability affecting IOS versions 12.1–12.4 and 15.0M prior to 15.0(1)M1. The issue arises from malformed H.323 packets triggering a DoS condition, specifically an interface queue wedge (and in some cases memory leaks) when processing H.323 traffic. Cisco...

Default credentials

Cisco Digital Media Manager DMM 5.0.x and 5.1.x has a default password for the Tomcat administration account, which makes it easier for remote attackers to execute arbitrary code via a crafted web application, aka Bug ID CSCta03378...

CVE-2010-0570

Cisco Digital Media Manager DMM 5.0.x and 5.1.x has a default password for the Tomcat administration account, which makes it easier for remote attackers to execute arbitrary code via a crafted web application, aka Bug ID CSCta03378...

Code injection

Unspecified vulnerability on the Cisco Digital Media Player before 5.2 allows remote attackers to hijack the source of 1 video or 2 data for a display via unknown vectors, related to a "content injection" issue, aka Bug ID CSCtc46024...

Design/Logic Flaw

Unspecified vulnerability in Cisco Digital Media Manager DMM 5.0.x and 5.1.x allows remote authenticated users to gain privileges via unknown vectors, and consequently execute arbitrary code via a crafted web application, aka Bug ID CSCtc46008...

Design/Logic Flaw

Cisco Digital Media Manager DMM before 5.2 allows remote authenticated users to discover Cisco Digital Media Player credentials via vectors related to reading a 1 error log or 2 stack trace, aka Bug ID CSCtc46050...

CVE-2010-0572

Cisco Digital Media Manager DMM before 5.2 allows remote authenticated users to discover Cisco Digital Media Player credentials via vectors related to reading a 1 error log or 2 stack trace, aka Bug ID CSCtc46050...

CVE-2010-0571

CVE-2010-0571 affects Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x. The issue is a privilege-escalation vulnerability that, when exploited via the web interface by remote authenticated users, can grant elevated privileges and lead to arbitrary code execution. The Cisco advisory notes the vul...

CVE-2010-0572

Cisco Digital Media Manager DMM before 5.2 allows remote authenticated users to discover Cisco Digital Media Player credentials via vectors related to reading a 1 error log or 2 stack trace, aka Bug ID CSCtc46050...

CVE-2010-0588

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.x before 7.13asu1, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SCCP 1 RegAvailableLines or 2 FwdStatReq message with an invalid Line number, aka Bug ...

CVE-2010-0591

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15, 7.x before 7.13bSU2, and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP REG message, related to an overflow of the Telephone-URL field, aka Bug ID...

Code injection

The CMSIPUtility component in Cisco Unified Communications Manager aka CUCM, formerly CallManager 7.x before 7.13asu1 and 8.x before 8.01 allows remote attackers to cause a denial of service process failure via a malformed SIP Register message, aka Bug ID CSCtc37188...