Page 8 of 90 results (0.002 seconds)

CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2015-6290

https://notcve.org/view.php?id=CVE-2015-6290

14 Sep 2015 — Cisco Web Security Appliance (WSA) 8.0.7 allows remote HTTP servers to cause a denial of service (memory consumption from stale TCP connections) via crafted responses, aka Bug ID CSCuw10426. Vulnerabilidad en Cisco Web Security Appliance (WSA) 8.0.7, permite a servidores HTTP remotos causar una denegación de servicio (consumo de memoria desde conexiones TCP caducadas) a través de respuestas manipuladas, también conocida como Bug ID CSCuw10426. • http://tools.cisco.com/security/center/viewAlert.x?alertId=40896 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.1EPSS: 0%CPEs: 6EXPL: 0

CVE-2015-0732

https://notcve.org/view.php?id=CVE-2015-0732

29 Jul 2015 — Cross-site scripting (XSS) vulnerability in Cisco AsyncOS on the Web Security Appliance (WSA) 9.0.0-193; Email Security Appliance (ESA) 8.5.6-113, 9.1.0-032, 9.1.1-000, and 9.6.0-000; and Content Security Management Appliance (SMA) 9.1.0-033 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug IDs CSCuu37430, CSCuu37420, CSCut71981, and CSCuv50167. Vulnerabilidad de XSS en Cisco AsyncOS en la Web Security Appliance (WSA) 9.0.0-193, en Email Security Appliance ... • http://tools.cisco.com/security/center/viewAlert.x?alertId=40172 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.9EPSS: 0%CPEs: 3EXPL: 0

CVE-2015-4288

https://notcve.org/view.php?id=CVE-2015-4288

29 Jul 2015 — The LDAP implementation on the Cisco Web Security Appliance (WSA) 8.5.0-000, Email Security Appliance (ESA) 8.5.7-042, and Content Security Management Appliance (SMA) 8.3.6-048 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, aka Bug IDs CSCuo29561, CSCuv40466, and CSCuv40470. Vulnerabilidad en la implementación LDAP en Cisco Web Security Appliance (WSA) 8.5.0-000, Email Security Applian... • http://tools.cisco.com/security/center/viewAlert.x?alertId=40137 • CWE-310: Cryptographic Issues •

CVSS: 9.8EPSS: 0%CPEs: 12EXPL: 0

CVE-2015-4216

https://notcve.org/view.php?id=CVE-2015-4216

26 Jun 2015 — The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before 2015-06-25 uses the same default SSH root authorized key across different customers' installations, which makes it easier for remote attackers to bypass authentication by leveraging knowledge of a private key from another installation, aka Bug IDs CSCuu95988, CSCuu95994, and CSCuu96630. La característica de soporte remoto en los d... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150625-ironport • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.5EPSS: 0%CPEs: 12EXPL: 0

CVE-2015-4217

https://notcve.org/view.php?id=CVE-2015-4217

26 Jun 2015 — The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before 2015-06-25 uses the same default SSH host keys across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a private key from another installation, aka Bug IDs CSCus29681, CSCuu95676, and CSCuu96601. La característica de soporte remo... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150625-ironport • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-310: Cryptographic Issues •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2015-4198

https://notcve.org/view.php?id=CVE-2015-4198

20 Jun 2015 — Cross-site scripting (XSS) vulnerability in the web framework on Cisco Web Security Appliance (WSA) devices with software 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified HTTP header, aka Bug ID CSCuu24409. Vulnerabilidad de XSS en el Framework web en los dispositivos Cisco Web Security Appliance (WSA) con software 8.5.0-497 permite a atacantes remotos inyectar secuencias de comandos web arbitrarios o HTML a través de una cabecera HTTP no especificada, también cono... • http://tools.cisco.com/security/center/viewAlert.x?alertId=39422 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2015-0738

https://notcve.org/view.php?id=CVE-2015-0738

17 May 2015 — Cross-site scripting (XSS) vulnerability in the Web Tracking Report page on Cisco Web Security Appliance (WSA) devices 8.5.0-497 allows remote attackers to inject arbitrary web script or HTML via an unspecified field, aka Bug ID CSCuu16008. Vulnerabilidad de XSS en la página Web Tracking Report en los dispositivos Cisco Web Security Appliance (WSA) 8.5.0-497 permite a atacantes remotos inyectar secuencias de comandos web arbitrarios o HTML a través de un campo no especificado, también conocido como Bug ID C... • http://tools.cisco.com/security/center/viewAlert.x?alertId=38884 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2015-0693

https://notcve.org/view.php?id=CVE-2015-0693

15 Apr 2015 — Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks, which allows local users to execute arbitrary Python code and gain privileges via a crafted pickle file, aka Bug ID CSCut39259. Dispositivos Cisco Web Security Appliance (WSA) con software 8.5.0-ise-147 no restringe debidamente el uso del módulo pickle de Python durante algunas comprobaciones de tunnel-status, lo que permite a usuarios locales e... • http://tools.cisco.com/security/center/viewAlert.x?alertId=38306 • CWE-20: Improper Input Validation •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2015-0698

https://notcve.org/view.php?id=CVE-2015-0698

15 Apr 2015 — Multiple cross-site scripting (XSS) vulnerabilities in filter search forms in admin web pages on Cisco Web Security Appliance (WSA) devices with software 8.5.0-497 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCut39213. Múltiples vulnerabilidades de XSS en formularios de búsqueda de filtros en páginas web de administración en dispositivos Cisco Web Security Appliance (WSA) con software 8.5.0-497 permite a atacantes remotos inyectar secuencias de comandos web o... • http://tools.cisco.com/security/center/viewAlert.x?alertId=38351 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2015-0692

https://notcve.org/view.php?id=CVE-2015-0692

11 Apr 2015 — Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks, which allows local users to execute arbitrary Python code and gain privileges via crafted serialized objects, aka Bug ID CSCut39230. Los dispositivos Cisco Web Security Appliance (WSA) con software 8.5.0-ise-147 no restringen correctamente el uso del módulo pickle Python durante ciertas comprobaciones del estado de túneles, lo que permite a usua... • http://tools.cisco.com/security/center/viewAlert.x?alertId=38305 • CWE-264: Permissions, Privileges, and Access Controls •