Code injection

Cisco IOS XE 2.1.0 through 2.2.3 and 2.3.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted H.323 packet, aka Bug ID CSCsx35393, CSCsx07094, and CSCsw93064...

CVE-2015-6272

Cisco IOS XE 2.1.0 through 2.2.3 and 2.3.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted H.323 packet, aka Bug ID CSCsx35393, CSCsx07094, and CSCsw93064...

CVE-2015-6752

Cross-site scripting XSS vulnerability in the Search API Autocomplete module 7.x-1.x before 7.x-1.3 for Drupal, when the search index is configured to use the HTML filter processor, allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified...

Cross site scripting

Cross-site scripting XSS vulnerability in the Search API Autocomplete module 7.x-1.x before 7.x-1.3 for Drupal, when the search index is configured to use the HTML filter processor, allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified...

PT-2015-1979

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions prior to 2.2.3 on ASR 1000 devices Description The issue is related to resource management errors in the Cisco IOS operating system. It allows remote attackers to cause a denial of service, specifically an Embedded Servic...

CVE-2015-6271: Undefined Security Weakness

Cisco IOS XE 2.1.0 through 2.4.3 and 2.5.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted SIP packet, aka Bug IDs CSCta74749 and CSCta77008...

PT-2015-1982

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 2.1.0 through 2.2.3 Cisco IOS XE version 2.3.0 Description The issue is related to resource management errors in the Cisco IOS operating system. It can be exploited by a remote attacker using a specially crafted H.323...

CVE-2015-6270: Undefined Security Weakness

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted IPv6 packet, aka Bug ID CSCsv98555...

PT-2015-7336

Name of the Vulnerable Software and Affected Versions Drupal Search API Autocomplete module versions 7.x-1.x before 7.x-1.3 Description A cross-site scripting XSS issue exists in the Search API Autocomplete module for Drupal. This occurs when the search index is configured to use the HTML filter...

CVE-2015-6269: Undefined Security Weakness

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted 1 IPv4 or 2 IPv6 packet, aka Bug ID CSCsw69990...

PT-2015-1980

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions prior to 2.2.3 on ASR 1000 devices Description The issue is related to resource management errors in the operating system. It can be exploited by a remote attacker using a specially crafted IPv6 packet, potentially leadin...

CVE-2015-6752: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Search API Autocomplete module 7.x-1.x before 7.x-1.3 for Drupal, when the search index is configured to use the HTML filter processor, allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified...

CVE-2015-6272: Undefined Security Weakness

Cisco IOS XE 2.1.0 through 2.2.3 and 2.3.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted H.323 packet, aka Bug ID CSCsx35393, CSCsx07094, and CSCsw93064...

Code injection

Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly VFR by certain firewall and NAT components, which allows remote attackers to cause a denial of service Embedded Services Processor crash via crafted IP packets, aka Bug IDs CSCtf87624,...

Cisco ASR 1000 Series Router UDP Message Processing Denial of Service Vulnerability

The Cisco ASR1000 Series Aggregation Services Routers provide a WAN edge solution that integrates information, communication, collaboration, and commerce. A security vulnerability in the Cisco ASR 1000 Series Router's processing of UDP messages allows remote attackers to exploit the vulnerability...

CVE-2015-6273: Undefined Security Weakness

Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly VFR by certain firewall and NAT components, which allows remote attackers to cause a denial of service Embedded Services Processor crash via crafted IP packets, aka Bug IDs CSCtf87624,...

CVE-2015-6268: Undefined Security Weakness

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted IPv4 UDP packet, aka Bug ID CSCsw95482...

Cisco ASR 1000 Series Router IP Message Handling Denial of Service Vulnerability

The Cisco ASR1000 Series Aggregation Services Routers provide a WAN edge solution that integrates information, communication, collaboration, and commerce. The Cisco ASR 1000 Series Router has a security vulnerability in the processing of IP v4 and IPv6 messages that allows a remote attacker to...

PT-2015-1978

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions prior to 2.2.3 on ASR 1000 devices Description The issue is related to resource management errors in the operating system. It can be exploited by a remote attacker using specially crafted UDP packets, potentially leading ...

PT-2015-1983

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions prior to 3.1.2S Description The issue is related to the mishandling of Virtual Fragment Reassembly VFR setup by certain firewall and NAT components, which can be exploited by remote attackers to cause a denial of service...