Command injection

iox in Cisco IOS, possibly 15.6 and earlier, and IOS XE, possibly 3.18 and earlier, allows local users to execute arbitrary IOx Linux commands on the guest OS via crafted iox command-line options, aka Bug ID CSCuz59223...

Design/Logic Flaw

The web-based GUI in Cisco Cloud Services Platform CSP 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541...

CVE-2016-6406

Cisco IronPort AsyncOS on Cisco Email Security Appliances (ESA) is affected by a remote code execution vulnerability (CVE-2016-6406) due to an internal testing/debugging interface present on affected releases. When Enrollment Client before 1.0.2-065 is installed, an unauthenticated remote attacke...

CVE-2016-6373

The web-based GUI in Cisco Cloud Services Platform CSP 2100 2.0 allows remote authenticated administrators to execute arbitrary OS commands as root via crafted platform commands, aka Bug ID CSCva00541...

CVE-2016-1483

Cisco WebEx Meetings Server 2.6 allows remote attackers to cause a denial of service CPU consumption by repeatedly accessing the account-validation component of an unspecified service, aka Bug ID CSCuy92704...

Input validation

Cisco WebEx Meetings Server 2.6 allows remote attackers to cause a denial of service CPU consumption by repeatedly accessing the account-validation component of an unspecified service, aka Bug ID CSCuy92704...

CVE-2016-1483

Cisco WebEx Meetings Server 2.6 allows remote attackers to cause a denial of service CPU consumption by repeatedly accessing the account-validation component of an unspecified service, aka Bug ID CSCuy92704...

CVE-2016-1483

CVE-2016-1483 affects Cisco WebEx Meetings Server 2.6. The issue allows unauthenticated remote attackers to cause a denial of service (CPU consumption) by repeatedly accessing the account-validation component of an unspecified service (Bug CSCuy92704). Cisco’s advisory cites improper validation o...

CVE-2016-6404

Cross-site scripting XSS vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.52T and IOS XE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy19854...

CVE-2016-6404

Cross-site scripting XSS vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.52T and IOS XE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy19854...

CVE-2016-6402

UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System UCS through 3.02d allow local users to obtain OS root access via crafted CLI input, aka Bug ID CSCuz91263...

Design/Logic Flaw

Cisco IOS XR 6.0 and 6.0.1 on NCS 6000 devices allows remote attackers to cause a denial of service OSPFv3 process reload via crafted OSPFv3 packets, aka Bug ID CSCuz66289...

CVE-2016-1433

Cisco IOS XR 6.0 and 6.0.1 on NCS 6000 devices allows remote attackers to cause a denial of service OSPFv3 process reload via crafted OSPFv3 packets, aka Bug ID CSCuz66289...

Cross site scripting

Cross-site scripting XSS vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.52T and IOS XE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy19854...

CVE-2016-1433

Cisco IOS XR 6.0 and 6.0.1 on NCS 6000 devices allows remote attackers to cause a denial of service OSPFv3 process reload via crafted OSPFv3 packets, aka Bug ID CSCuz66289...

Design/Logic Flaw

UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System UCS through 3.02d allow local users to obtain OS root access via crafted CLI input, aka Bug ID CSCuz91263...

CVE-2016-6405

Cisco Fog Director 1.00 for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka Bug ID CSCuz89368...

CVE-2016-6405

Cisco Fog Director for IOx (version 1.0(0)) is vulnerable to an arbitrary file write via the Cartridge interface. The root cause is insufficient input validation, allowing an authenticated, remote attacker to bypass access restrictions and write/overwrite arbitrary files. Published advisories (Ci...

CVE-2016-6402

UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System UCS through 3.02d allow local users to obtain OS root access via crafted CLI input, aka Bug ID CSCuz91263...

CVE-2016-1433

Cisco IOS XR (6.0 and 6.0.1) running on Cisco NCS 6000 devices is affected by a denial-of-service vulnerability in OSPFv3 packet processing (Bug CSCuz66289). Exploitation can trigger an OSPFv3 process reload via specially crafted OSPFv3 packets, leading to a limited DoS condition on the device. T...