CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2015-6375
https://notcve.org/view.php?id=CVE-2015-6375
21 Nov 2015 — The debug-logging (aka debug cns) feature in Cisco Networking Services (CNS) for IOS 15.2(2)E3 allows local users to obtain sensitive information by reading an unspecified file, aka Bug ID CSCux18010. La funcionalidad debug-logging (también conocida como debug cns) en Cisco Networking Services (CNS) para IOS 15.2(2)E3 permite a usuarios locales obtener información sensible mediante la lectura de un archivo no especificado, también conocida como Bug ID CSCux18010. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151120-ns • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2015-6365
https://notcve.org/view.php?id=CVE-2015-6365
14 Nov 2015 — Cisco IOS 15.2(04)M and 15.4(03)M lets physical-interface ACLs supersede virtual PPP interface ACLs, which allows remote authenticated users to bypass intended network-traffic restrictions in opportunistic circumstances by using PPP, aka Bug ID CSCur61303. Cisco IOS 15.2(04)M y 15.4(03)M permite a ACLs de interfaz física reemplazar a ACLs de interfaz virtual PPP, lo que permite a usuarios remotos autenticados eludir las restricciones destinadas al tráfico de red en circunstancias oportunistas mediante el us... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151112-ios1 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2015-6366
https://notcve.org/view.php?id=CVE-2015-6366
13 Nov 2015 — Cisco IOS 15.2(04)M6 and 15.4(03)S lets physical-interface ACLs supersede tunnel-interface ACLs, which allows remote attackers to bypass intended network-traffic restrictions in opportunistic circumstances by using a tunnel, aka Bug ID CSCur01042. Cisco IOS 15.2(04)M6 y 15.4(03)S permite a ACLs de interfaz física reemplazar a ACLs de interfaz túnel, lo que permite a atacantes remotos eludir las restricciones destinadas al tráfico de red en circunstancias oportunistas mediante el uso de un túnel, también con... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151112-ios2 • CWE-284: Improper Access Control •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2015-6343
https://notcve.org/view.php?id=CVE-2015-6343
31 Oct 2015 — The SIP implementation in Cisco IOS 15.5(3)M on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service via crafted SIP messages, aka Bug ID CSCuv79202. La implementación SIP en Cisco IOS 15.5(3)M en dispositivos Cisco Unified Border Element (CUBE) permite a atacantes remotos provocar una denegación de servicio a través de mensajes SIP manipulados, también conocido como Bug ID CSCuv79202 • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151026-cube • CWE-399: Resource Management Errors •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2015-6263
https://notcve.org/view.php?id=CVE-2015-6263
12 Oct 2015 — The RADIUS client implementation in Cisco IOS 15.4(3)M2.2, when a shared RADIUS secret is configured, allows remote RADIUS servers to cause a denial of service (device reload) via malformed answers, aka Bug ID CSCuu59324. La implementación del cliente RADIUS en Cisco IOS 15.4(3)M2.2, cuando se configura un secreto RADIUS compartido, permite a servidores RADIUS remotos causar una denegación de servicio (reinicio del dispositivo) a través de respuestas malformadas, también conocido como error CSCuu59324. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151005-ios-radius • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 0%CPEs: 139EXPL: 0CVE-2015-6279
https://notcve.org/view.php?id=CVE-2015-6279
28 Sep 2015 — The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3S; and 3.14S before 3.14.2S allows remote attackers to cause a denial of service (device reload) via a malformed ND packet with the Cryptographically Generated Address (CGA) option, aka Bug ID CSCuo04400. Vulnerabil... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 0%CPEs: 155EXPL: 0CVE-2015-6278
https://notcve.org/view.php?id=CVE-2015-6278
28 Sep 2015 — The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3S; and 3.14S before 3.14.2S does not properly implement the Control Plane Protection (aka CPPr) feature, which allows remote attackers to cause a denial of service (device reload) via a flood of ND packets, aka Bug ... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 0%CPEs: 74EXPL: 0CVE-2015-6280
https://notcve.org/view.php?id=CVE-2015-6280
28 Sep 2015 — The SSHv2 functionality in Cisco IOS 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.6E before 3.6.3E, 3.7E before 3.7.1E, 3.10S before 3.10.6S, 3.11S before 3.11.4S, 3.12S before 3.12.3S, 3.13S before 3.13.3S, and 3.14S before 3.14.1S does not properly implement RSA authentication, which allows remote attackers to obtain login access by leveraging knowledge of a username and the associated public key, aka Bug ID CSCus73013. Vulnerabilidad en la funcionalidad SSHv2 en Cisco IOS 15.2, 15.3, 15.4 y 15.5 y IOS XE 3.6E... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-sshpk • CWE-287: Improper Authentication •
CVSS: 7.5EPSS: 0%CPEs: 8EXPL: 0CVE-2015-6294
https://notcve.org/view.php?id=CVE-2015-6294
18 Sep 2015 — Cisco IOS 15.2(3)E and earlier and IOS XE 3.6(2)E and earlier allow remote attackers to cause a denial of service (functionality loss) via crafted Cisco Discovery Protocol (CDP) packets, aka Bug ID CSCuu25770. Vulnerabilidad en Cisco IOS 15.2(3)E y versiones anteriores y IOS XE 3.6(2)E y versiones anteriores, permite a atacantes remotos provocar una denegación de servicio (pérdida de funcionalidad) a través de paquetes Cisco Discovery Protocol (CDP) modificados, también conocida como Bug ID CSCuu25770. • http://tools.cisco.com/security/center/viewAlert.x?alertId=41006 • CWE-399: Resource Management Errors •
CVSS: 7.5EPSS: 0%CPEs: 62EXPL: 0CVE-2015-0681
https://notcve.org/view.php?id=CVE-2015-0681
24 Jul 2015 — The TFTP server in Cisco IOS 12.2(44)SQ1, 12.2(33)XN1, 12.4(25e)JAM1, 12.4(25e)JAO5m, 12.4(23)JY, 15.0(2)ED1, 15.0(2)EY3, 15.1(3)SVF4a, and 15.2(2)JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO before 3.3.0XO; 3.2.xSQ; 3.3.xSQ; and 3.4.xSQ allows remote attackers to cause a denial of service (device hang or reload) via multiple requests that trigger improper memory management, aka Bug ID CSC... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150722-tftp • CWE-399: Resource Management Errors •