38 matches found
CVE-2015-0774
The CVE-2015-0774 entry covers a Cross-site Scripting (XSS) vulnerability in Cisco’s Application and Content Networking System (ACNS) version 5.5(9), tracked as Bug CSCuu70650. The issue allows an unauthenticated, remote attacker to inject arbitrary script or HTML via a crafted URL. Public detail...
Cisco Application and Content Networking System Cross-Site Scripting Vulnerability
The Cisco Application and Content Networking System is an application and content networking system. A cross-site scripting vulnerability exists in Cisco Application and Content Networking System, which could be exploited by remote attackers to inject malicious script or HTML code that, when view...
Cisco ONS 15454 System Software Denial of Service Vulnerability
The Cisco ONS 15454 is a multi-service provisioning platform that includes sound, video, and data solutions. The Cisco ONS 15454 System Software has a security vulnerability that allows a remote attacker to exhaust the tNetTask CPU and cause the card to reset through a large IP or Ethernet data...
Cisco ONS Detection
Based on the SNMP sysDesc value returned from the remote host, it is a Cisco Optical Networking System device. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69058; scriptversion"1.4"; scriptcvsdate"Date: 2020/01/22"; scriptnameenglish:"Cisco ONS Detection";...
CVE-2006-1671
Control cards for Cisco Optical Networking System ONS 15000 series nodes before 20060405 allow remote attackers to cause a denial of service card reset via 1 a "crafted" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; 2 a "crafted" IP packet to a devic...
Code injection
The installation of Cisco Transport Controller CTC for Cisco Optical Networking System ONS 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing "fs/LAUNCHER.jar", which allows remote attackers to execute...
CVE-2006-1672
The installation of Cisco Transport Controller CTC for Cisco Optical Networking System ONS 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing "fs/LAUNCHER.jar", which allows remote attackers to execute...
CVE-2006-1670
Control cards for Cisco Optical Networking System ONS 15000 series nodes before 20060405 allow remote attackers to cause a denial of service memory exhaustion and possibly card reset by sending an invalid response when the final ACK is expected, aka bug ID CSCei45910...
CVE-2006-1672
The installation of Cisco Transport Controller CTC for Cisco Optical Networking System ONS 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing "fs/LAUNCHER.jar", which allows remote attackers to execute...
CVE-2006-1671
CVE-2006-1671 affects Cisco Optical Networking System (ONS) 15000 series nodes prior to 20060405. The issue allows remote denial of service (card reset) via (1) a crafted IP packet to a device with secure mode EMS-to-network-element access, (2) a crafted IP packet to a device with IP on the LAN i...
CVE-2006-1671
Control cards for Cisco Optical Networking System ONS 15000 series nodes before 20060405 allow remote attackers to cause a denial of service card reset via 1 a "crafted" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; 2 a "crafted" IP packet to a devic...
CVE-2006-1672
The CVE-2006-1672 entry affects Cisco Optical Networking System (ONS) 15000 series nodes via Cisco Transport Controller (CTC). A Java policy file entry is installed that grants java.security.AllPermission to any http URL containing "fs/LAUNCHER.jar", enabling remote attackers to execute arbitrary...
Cisco Optical Networking System 15000 series / Cisco Transport Controller / Cisco 11500 Content Services Switch multiple security vulnerabilities
Multiple DoS conditions...
[Full-disclosure] Cisco Security Advisory: Cisco Optical Networking System 15000 series and Cisco Transport Controller Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory ======================= Cisco Optical Networking System 15000 series and Cisco Transport Controller Vulnerabilities =========================================================================== Advisory ID:...
CVE-2005-0601
Cisco devices running Application and Content Networking System ACNS 4.x, 5.0, 5.1, or 5.2 use a default password when the setup dialog has not been run, which allows remote attackers to gain access...
CVE-2005-0599
Cisco devices running Application and Content Networking System ACNS 4.x, 5.0, or 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service CPU consumption via malformed IP packets...
CVE-2005-0600
Cisco devices running Application and Content Networking System ACNS 5.0, 5.1 before 5.1.13.7, or 5.2 before 5.2.3.9 allow remote attackers to cause a denial of service bandwidth consumption via "crafted IP packets" that are continuously forwarded...