Page 3 of 15 results (0.004 seconds)

CVSS: 7.5EPSS: 0%CPEs: 23EXPL: 0

CVE-2016-1345

https://notcve.org/view.php?id=CVE-2016-1345

Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in HTTP headers, aka Bug ID CSCux22726. Cisco FireSIGHT System Software 5.4.0 hasta la versión 6.0.1 y ASA con FirePOWER Services 5.4.0 hasta la versión 6.0.0.1 permiten a atacantes remotos eludir la protección de malware a través de campos manipulados en cabeceras HTTP, también conocida como Bug ID CSCux22726. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160330-fp http://www.securitytracker.com/id/1035437 http://www.securitytracker.com/id/1035438 http://www.securitytracker.com/id/1035439 • CWE-20: Improper Input Validation •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-1294

https://notcve.org/view.php?id=CVE-2016-1294

Cross-site scripting (XSS) vulnerability in the Management Center in Cisco FireSIGHT System Software 6.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted cookie, aka Bug ID CSCuw89094. Vulnerabilidad de XSS en el Management Center en Cisco FireSIGHT System Software 6.0.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de una cookie manipulada, también conocida como Bug ID CSCuw89094. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160115-fmc1 http://www.securitytracker.com/id/1034690 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 0

CVE-2016-1293

https://notcve.org/view.php?id=CVE-2016-1293

Multiple cross-site scripting (XSS) vulnerabilities in the Management Center in Cisco FireSIGHT System Software 6.0.0 and 6.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCux40414. Múltiples vulnerabilidades de XSS en el Management Center en Cisco FireSIGHT System Software 6.0.0 y 6.0.1 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de parámetros no especificados, también conocida como Bug ID CSCux40414. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160115-FireSIGHT http://www.securitytracker.com/id/1034689 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.0EPSS: 0%CPEs: 20EXPL: 0

CVE-2015-6427

https://notcve.org/view.php?id=CVE-2015-6427

Cisco FireSIGHT Management Center allows remote attackers to bypass the HTTP attack detection feature and avoid triggering Snort IDS rules via an SSL session that is mishandled after decryption, aka Bug ID CSCux53437. Cisco FireSIGHT Management Center permite a atacantes remotos eludir la funcionalidad de detección de ataques HTTP y evitar desencadenar las reglas del IDS Snort a través de una sesión SSL que no es manejada adecuadamente después del desencritado, también conocido como Bug ID CSCux53437. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151217-fsm http://www.securitytracker.com/id/1034488 • CWE-254: 7PK - Security Features •

CVSS: 3.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2015-6363

https://notcve.org/view.php?id=CVE-2015-6363

Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco FireSIGHT Management Center (MC) 5.4.1.4 and 6.0.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuw88396. Múltiples vulnerabilidades de XSS en el web framework en Cisco FireSIGHT Management Center (MC) 5.4.1.4 y 6.0.1 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de parámetros no especificados, también conocidas como Bug ID CSCuw88396. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151111-fmc http://www.securitytracker.com/id/1034138 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •