EUVD-2014-0682

Malware in sbrugna...

EUVD-2014-0685

Malware in sbrugna...

EUVD-2014-0687

Malware in sbrugna...

EUVD-2014-0683

Malware in sbrugna...

The vulnerability of Cisco IPS’s intrusion detection system’s microprogramming software allows a remote attacker to trigger a service failure.

The vulnerability of the Context Directory Agent component allows a remote attacker to modify device cache using specially crafted RADIUS protocol packets...

PT-2015-1023

Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System IPS Software versions prior to 7.33E4 Context Directory Agent CDA affected versions not specified Description The issue allows a remote attacker to cause problems. In the case of the Cisco Intrusion Prevention...

Cisco Context Directory Agent Replayed RADIUS Accounting Message Vulnerability

A vulnerability in RADIUS message processing of Cisco Context Directory Agent CDA could allow an unauthenticated, remote attacker to affect the contents of the CDA cache. The vulnerability is due to insufficient validation of RADIUS accounting messages. An attacker could exploit this vulnerabilit...

Cisco Context Directory Agent Mappings Page Cross-Site Scripting Vulnerability

A vulnerability in the Mappings page of Cisco Context Directory Agent CDA could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by...

Cisco Context Directory Agent Privilege Escalation Vulnerability

A vulnerability in the administrative interface of Cisco Context Directory Agent CDA could allow an authenticated, remote attacker to perform administrative actions. The vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by accessing an...

CVE-2014-0654

Cisco Context Directory Agent CDA allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages, aka Bug ID CSCuj45383...

Code injection

Cisco Context Directory Agent CDA allows remote authenticated users to trigger the omission of certain user-interface data via crafted field values, aka Bug ID CSCuj45353...

Cross site scripting

Cross-site scripting XSS vulnerability in the Mappings page in Cisco Context Directory Agent CDA allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuj45358...

Cisco Context Directory Agent Hidden Input Vulnerability

A vulnerability in certain input fields of Cisco Context Directory Agent CDA could allow an authenticated, remote attacker to hide values that are entered in the affected input fields. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by...

CVE-2014-0654

Cisco Context Directory Agent CDA allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages, aka Bug ID CSCuj45383...

CVE-2014-0656

Cisco Context Directory Agent (CDA) contains a vulnerability where an authenticated remote attacker can hide values entered in affected input fields due to insufficient input validation. This can cause the UI to omit user-entered data. Exploitation requires authentication to a targeted device. Ci...

PT-2014-3746

Name of the Vulnerable Software and Affected Versions Cisco Context Directory Agent CDA affected versions not specified Description The administrative interface in Cisco Context Directory Agent CDA does not properly enforce authorization requirements. This allows remote authenticated users to...

PT-2014-3747

Name of the Vulnerable Software and Affected Versions Cisco Context Directory Agent CDA affected versions not specified Description A cross-site scripting XSS issue exists in the Mappings page of Cisco Context Directory Agent CDA, allowing remote attackers to inject arbitrary web script or HTML v...

PT-2014-3749

Name of the Vulnerable Software and Affected Versions Cisco Context Directory Agent CDA affected versions not specified Description The issue allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages. Recommendations At the moment, there is no...

CVE-2014-0654: Improper Input Validation

Cisco Context Directory Agent CDA allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages, aka Bug ID CSCuj45383...

CVE-2014-0652: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Mappings page in Cisco Context Directory Agent CDA allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuj45358...