15 matches found
EUVD-2014-0685
Malware in sbrugna...
EUVD-2014-0682
Malware in sbrugna...
EUVD-2014-0683
Malware in sbrugna...
EUVD-2014-0687
Malware in sbrugna...
The vulnerability of Cisco IPS’s intrusion detection system’s microprogramming software allows a remote attacker to trigger a service failure.
The vulnerability of the Context Directory Agent component allows a remote attacker to modify device cache using specially crafted RADIUS protocol packets...
Cisco Context Directory Agent Replayed RADIUS Accounting Message Vulnerability
A vulnerability in RADIUS message processing of Cisco Context Directory Agent CDA could allow an unauthenticated, remote attacker to affect the contents of the CDA cache. The vulnerability is due to insufficient validation of RADIUS accounting messages. An attacker could exploit this vulnerabilit...
Cisco Context Directory Agent Mappings Page Cross-Site Scripting Vulnerability
A vulnerability in the Mappings page of Cisco Context Directory Agent CDA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by...
Cisco Context Directory Agent Privilege Escalation Vulnerability
A vulnerability in the administrative interface of Cisco Context Directory Agent CDA could allow an authenticated, remote attacker to perform administrative actions. The vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by accessing an...
CVE-2014-0654
Cisco Context Directory Agent CDA allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages, aka Bug ID CSCuj45383...
Cross site scripting
Cross-site scripting XSS vulnerability in the Mappings page in Cisco Context Directory Agent CDA allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuj45358...
Code injection
Cisco Context Directory Agent CDA allows remote authenticated users to trigger the omission of certain user-interface data via crafted field values, aka Bug ID CSCuj45353...
Cisco Context Directory Agent Hidden Input Vulnerability
A vulnerability in certain input fields of Cisco Context Directory Agent CDA could allow an authenticated, remote attacker to hide values that are entered in the affected input fields. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by...
CVE-2014-0656
Cisco Context Directory Agent (CDA) contains a vulnerability where an authenticated remote attacker can hide values entered in affected input fields due to insufficient input validation. This can cause the UI to omit user-entered data. Exploitation requires authentication to a targeted device. Ci...
CVE-2014-0654
Cisco Context Directory Agent CDA allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages, aka Bug ID CSCuj45383...
CVE-2013-1196
The command-line interface in Cisco Secure Access Control System ACS, Identity Services Engine Software, Context Directory Agent, Application Networking Manager ANM, Prime Network Control System, Prime LAN Management Solution LMS, Prime Collaboration, Unified Provisioning Manager, Network Service...