Cross-site Scripting Vulnerability

A cross-site scripting vulnerability exists in the web-based device management interface whereby data provided by the user is echoed back to the user without sanitization. Ref 73638 This issue affects the management interface of the device, where an authenticated administrator may be tricked into...

Cisco Headend Digital Broadband Delivery System Cross-Site Scripting Vulnerability

The Cisco Headend Digital Broadband Delivery System is a front-end broadband digital delivery system. A cross-site scripting vulnerability exists in the Cisco Headend Digital Broadband Delivery System. Because the program's WEB management interface fails to correctly filter user-submitted input, ...

Citrix NetScaler Default Credentials (HTTP)

The remote Citrix NetScaler system is using known default credentials for the HTTP login. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cisco Unity Connection CUCReports Web Interface Cross-Site Request Forgery Vulnerability

Cisco Unified Communications Manager is a call processing component of a Unified Communications system. A cross-site request forgery vulnerability exists in the web management interface of Cisco Unified Communications Manager, which allows remote attackers to construct malicious URIs, trick users...

F5 BIG-IQ /mgmt/shared/authz/users/error-message username enumeration vulnerability

F5 is a global leader in Application Delivery Networking ADN. F5 provides application security, data center firewall, load balancing, data storage, WAN optimization, virtualization and cloud computing solutions. F5 BIG-IQ failed to properly handle error messages for /mgmt/shared/authz/users/...

CVE-2015-2223

Multiple cross-site scripting XSS vulnerabilities in the web-based console management interface in Palo Alto Networks Traps formerly Cyvera Endpoint Protection 3.1.2.1546 allow remote attackers to inject arbitrary web script or HTML via the 1 Arguments, 2 FileName, or 3 URL parameter in a SOAP...

CVE-2015-2223: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the web-based console management interface in Palo Alto Networks Traps formerly Cyvera Endpoint Protection 3.1.2.1546 allow remote attackers to inject arbitrary web script or HTML via the 1 Arguments, 2 FileName, or 3 URL parameter in a SOAP...

Cisco ASA FirePOWER Services and Cisco ASA CX Services Denial of Service Vulnerabilities

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A security vulnerability in the virtual layer of Cisco ASA FirePOWER Services and Cisco ASA CX Services allows an unauthenticated, remote attacker to exploit this...

CVE-2015-0678

The virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1 and ASA Context-Aware CX Software before 9.3.2.1-9 allows remote attackers to cause a denial of service device reload by rapidly sending crafted packets to the management interface, aka Bug IDs...

CVE-2015-0678: Improper Input Validation

The virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1 and ASA Context-Aware CX Software before 9.3.2.1-9 allows remote attackers to cause a denial of service device reload by rapidly sending crafted packets to the management interface, aka Bug IDs...

PT-2015-4801

Name of the Vulnerable Software and Affected Versions Cisco ASA FirePOWER Software versions prior to 5.3.1.2 Cisco ASA FirePOWER Software versions 5.4.x prior to 5.4.0.1 Cisco ASA Context-Aware CX Software versions prior to 9.3.2.1-9 Description The issue allows remote attackers to cause a denial...

SOL16393 - NTP vulnerability CVE-2014-9751

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

Cisco Intrusion Prevention System MainApp SSL/TLS DoS (cisco-sa-20150311-ips)

According to its self-reported version, the Cisco Intrusion Prevention System software running on the remote host is affected by a denial of service vulnerability within the SSL/TLS subsystem due to a race condition when handling multiple HTTPS requests on the management interface. A remote...

Design/Logic Flaw

The Management Interface on Cisco Content Services Switch CSS 11500 devices 8.20.4.02 and earlier allows remote attackers to bypass intended restrictions on local-network device access via crafted SSH packets, aka Bug ID CSCut14855...

Cisco Content Services Switch (11500) Unauthenticated Port Forwarding Vulnerability

A vulnerability in the Management Interface of the Cisco Content Services Switch 11500 could allow an unauthenticated, remote attacker to gain unauthorized access to other devices on the network. The vulnerability is due to improper handling of SSH packets. An attacker could exploit this...

CVE-2015-0667: Improper Access Control

The Management Interface on Cisco Content Services Switch CSS 11500 devices 8.20.4.02 and earlier allows remote attackers to bypass intended restrictions on local-network device access via crafted SSH packets, aka Bug ID CSCut14855...

Cisco Intrusion Prevention System (IPS) Software Competitive Conditions Vulnerability

Cisco Intrusion Prevention System IPS is the United States Cisco Cisco a set of intrusion prevention system. The system can instantly interrupt, adjust or isolate some abnormal or harmful network data transmission behavior. A competitive condition vulnerability exists in the TLS implementation of...

PT-2015-1313

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS versions prior to X7.2.4 Cisco TelePresence Video Communication Server VCS versions X8 prior to X8.1.2 Cisco TelePresence Video Communication Server VCS versions X8.2 prior to X8.2.2 Cisco...

Sagem F@st 3304-V2 - Local File Inclusion

Title : Sagem F@st 3304-V2 Directory Traversal Vulnerability Vendor : http://www.sagemcom.com Severity : High Tested Router : Sagem F@st 3304-V2 3304, other versions may also be affected Date : 2015-03-01 Author : Loudiyi Mohamed Contact : [email protected] Blog :...

CVE-2015-0631

Cisco IPS CVE-2015-0631 is a race-condition vulnerability in the SSL/TLS subsystem used by the web management interface. During image upgrading, key/certificate regeneration can be disrupted by a rapid sequence of HTTPS connections to the management interface, allowing a remote attacker to cause ...