CVE-2022-24644

CVE-2022-24644 affects ZZ Inc. KeyMouse Windows 3.08 and earlier. The vulnerability is a remote code execution that can be triggered when an affected KeyMouse installation performs an unauthenticated update. The root cause is tied to the update process, and exploitation requires triggering a prod...

CVE-2016-1344

CVE-2016-1344 affects Cisco IOS and IOS XE when IKEv2 fragmentation is enabled. The flaw in the IKEv2 fragmentation handling allows unauthenticated remote attackers to cause a device reload via crafted fragmented UDP packets, potentially impacting affected Cisco devices running IOS 15.0–15.6 and ...

CVE-2016-1349

The CVE-2016-1349 vulnerability affects Cisco IOS (12.2, 15.0, 15.2) and IOS XE (3.2–3.7) where the Smart Install client mishandles image list parameters in Smart Install packets. An unauthenticated, remote attacker can send crafted packets (to TCP 4786), potentially causing a denial-of-service v...

CVE-2015-6313

Cisco TelePresence Server devices running 4.1(2.29)–4.2(4.17) on 7010, MSE 8710, Multiparty Media 310/320/820, and VM devices are affected by CVE-2015-6313 due to a denial-of-service in the HTTP parsing engine when processing crafted URLs. An unauthenticated remote attacker can cause memory exhau...

CVE-2016-1329

CVE-2016-1329 affects Cisco NX-OS on Nexus 3000 (6.0(2)U6(1)–6.0(2)U6(5)) and Nexus 3500 (6.0(2)A6(1)–6.0(2)A6(5), 6.0(2)A7(1)). The root cause is hardcoded/default credentials present in an account created at installation, allowing unauthenticated remote attackers to obtain root privileges via T...

CVE-2016-1348

Summary of the CVE-2016-1348 issue : Cisco IOS and IOS XE DHCPv6 Relay Denial of Service vulnerability arises from insufficient validation of DHCPv6 relay messages. An unauthenticated, remote attacker can trigger a device reload, leading to a DoS condition. Affected software includes Cisco IOS 15...

CVE-2016-1350

CVE-2016-1350 affects Cisco IOS (versions 15.3–15.4), Cisco IOS XE (3.8–3.11), and Cisco Unified Communications Manager. The issue is a memory-leak/DoS in the SIP gateway caused by improper processing of malformed SIP messages, leading to remote attackers potentially triggering a device reload. T...

CVE-2016-1346

The CVE-2016-1346 entry concerns Cisco TelePresence Server running on Mobility Services Engine (MSE) 8710, with affected software versions 3.0 through 4.2(4.18). The root cause is improper handling of a crafted sequence of IPv6 packets in the kernel, allowing an unauthenticated remote attacker to...

CVE-2016-1302

CVE-2016-1302 affects Cisco APIC devices and Nexus 9000 ACI Mode switches. A flaw in the RBAC eligibility logic allows remote authenticated users to bypass intended privileges by sending crafted REST requests, enabling unauthorized configuration changes (Bug CSCut12998). Affected versions: APIC s...

CVE-2015-0718

Cisco NX-OS v4.0–6.1 on Nexus 1000V platforms (3000/4000/5000/6000/7000) and UCS may be remotely exploitable via crafted TCP packets while a TIME_WAIT state exists, causing a denial of service (TCP stack reload). Root cause: improper handling of certain TCP closing sequences in TIME_WAIT. Impact:...

CVE-2015-6312

Cisco TelePresence Server 3.1 (on 7010, MSE 8710, Multiparty Media 310/320 and VM devices) is affected by CVE-2015-6312 due to improper processing of malformed STUN packets. An unauthenticated, remote attacker could cause a denial of service by forcing the device to reload, which also disrupts on...

CVE-2016-1307

CVE-2016-1307 affects Cisco Finesse Desktop and Cisco Unified Contact Center Express Openfire server. A default, non-changeable XMPP account enables unauthenticated remote login to the Openfire service, allowing access via XMPP with a non-administrative account. Cisco’s advisory Cisco Security Ad...

CVE-2016-1319

CVE-2016-1319 concerns Cisco Unified Communications Manager and related products (CUCM, IM&P, UCCX, Unity Connection) that store a cleartext encryption key, enabling local users to obtain sensitive information via unspecified vectors. Root cause is improper key management allowing plaintext key e...

CVE-2016-1330

Cisco IOS 15.2(4)E on Industrial Ethernet 2000 Series switches is affected by a CDP packet handling flaw that allows an unauthenticated, adjacent attacker to cause a device reload (DoS). Root cause: improper processing of crafted CDP packets. Impact: denial of service via device reload. Exploitat...