CVE-2016-1462

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Prime Service Catalog PSC 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795...

Cross site scripting

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Prime Service Catalog PSC 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795...

CVE-2016-1462: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Prime Service Catalog PSC 11.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuz63795...

PT-2016-4810

Name of the Vulnerable Software and Affected Versions Cisco Prime Service Catalog version 11.0 Description A cross-site scripting XSS issue exists in the web-based management interface, allowing remote attackers to inject arbitrary web script or HTML via a crafted value. Recommendations For Cisco...

CVE-2016-1451

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Meeting Server formerly Acano Conferencing Server 1.7 through 1.9 allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva19922...

CVE-2016-1451

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Meeting Server formerly Acano Conferencing Server 1.7 through 1.9 allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva19922...

CVE-2016-1451: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Meeting Server formerly Acano Conferencing Server 1.7 through 1.9 allows remote attackers to inject arbitrary web script or HTML via crafted parameters, aka Bug ID CSCva19922...

PT-2016-4799

Name of the Vulnerable Software and Affected Versions Cisco Meeting Server versions 1.7 through 1.9 Description A cross-site scripting XSS issue exists in the web-based management interface, allowing remote attackers to inject arbitrary web script or HTML via crafted parameters. Recommendations F...

PT-2016-4762

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions through 1.2.1.4 Cisco RV130W versions through 1.0.2.7 Cisco RV215W versions through 1.3.0.7 Description A buffer overflow issue exists in the web-based management interface, allowing remote authenticated users to cause a...

CVE-2016-1397: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote authenticated users to cause a denial of service device reload via crafted...

CVE-2016-1396: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to inject arbitrary web script or HTML via a...

PT-2016-2219

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions prior to 1.2.1.7 Cisco RV130W versions prior to 1.0.3.16 Cisco RV215W versions prior to 1.3.0.8 Description The issue is related to insufficient input validation in the web-based management interface of the affected...

PT-2016-2273

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions prior to 1.2.1.7 Cisco RV130W versions prior to 1.0.3.16 Cisco RV215W versions prior to 1.3.0.8 Description The issue is caused by a buffer overflow in the web-based management interface, allowing remote authenticated use...

PT-2016-2274

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions prior to 1.2.1.7 Cisco RV130W versions prior to 1.0.3.16 Cisco RV215W versions prior to 1.3.0.8 Description The issue is related to a cross-site scripting XSS vulnerability in the web-based management interface of the...

Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability

A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers could allow an authenticated, remote attacker to cause a buffer overflow on a targeted system, resulting in a...

Cisco Wireless LAN Controller Management Interface Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco Wireless LAN Controller WLC devices running Cisco AireOS Softwar Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2015-6319: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP request, aka Bug ID CSCuv29574...

PT-2016-1245

Name of the Vulnerable Software and Affected Versions Cisco RV220W devices affected versions not specified Description The issue is related to a SQL injection vulnerability in the web-based management interface. This vulnerability allows remote attackers to execute arbitrary SQL commands via a...

CVE-2015-6372: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web-based management interface in Cisco Firepower Extensible Operating System 1.11.160 on Firepower 9000 devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCux10614...

Cisco Firepower 9000 Persistent Cross-Site Scripting Vulnerability

A vulnerability in the HTTP web-based management interface of Cisco Firepower 9000 devices could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected system. The vulnerability is due to insufficient input validation of a user-suppli...