56 results (0.004 seconds)

CVSS: 9.8EPSS: 4%CPEs: 14EXPL: 0

CVE-2016-1291

https://notcve.org/view.php?id=CVE-2016-1291

Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID CSCuw03192. Cisco Prime Infrastructure 1.2.0 hasta la versión 2.2(2) y Cisco Evolved Programmable Network Manager (EPNM) 1.2 permiten a atacantes remotos ejecutar código arbitrario a través de datos deserializados manipulados en una petición HTTP POST, también conocido como Bug ID CSCuw03192. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-remcode http://www.securitytracker.com/id/1035497 https://blogs.securiteam.com/index.php/archives/2727 • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 1%CPEs: 9EXPL: 0

CVE-2015-6313

https://notcve.org/view.php?id=CVE-2015-6313

Cisco TelePresence Server 4.1(2.29) through 4.2(4.17) on 7010; Mobility Services Engine (MSE) 8710; Multiparty Media 310, 320, and 820; and Virtual Machine (VM) devices allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted HTTP requests that are not followed by an unspecified negotiation, aka Bug ID CSCuv47565. Cisco TelePresence Server 4.1(2.29) hasta la versión 4.2(4.17) sobre dispositivos 7010; Mobility Services Engine (MSE) 8710; Multiparty Media 310, 320 y 820; y Virtual Machine (VM) permite a atacantes remotos causar una denegación de servicio (consumo de memoria o recarga de dispositivo) a través de peticiones HTTP que no van seguidas de una negociación no especificada, también conocido como Bug ID CSCuv47565. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-cts1 http://www.securitytracker.com/id/1035501 • CWE-399: Resource Management Errors •

CVSS: 8.1EPSS: 0%CPEs: 14EXPL: 0

CVE-2016-1290

https://notcve.org/view.php?id=CVE-2016-1290

The web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authenticated users to bypass intended RBAC restrictions and gain privileges via an HTTP request that is inconsistent with a pattern filter, aka Bug ID CSCuy10227. La API web en Cisco Prime Infrastructure 1.2.0 hasta la versión 2.2(2) y Cisco Evolved Programmable Network Manager (EPNM) 1.2 permite a usuarios remotos autenticados eludir restricciones RBAC previstas y obtener privilegios a través de una petición HTTP que es inconsistente con un patrón de filtro, también conocido como Bug ID CSCuy10227. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-privauth http://www.securitytracker.com/id/1035498 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-1314

https://notcve.org/view.php?id=CVE-2016-1314

Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (CDM) 8.1(1) allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux80760. Vulnerabilidad de XSS en Cisco Unified Communications Domain Manager (CDM) 8.1(1) permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada, también conocida como Bug ID CSCux80760. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160328-ucdm http://www.securitytracker.com/id/1035425 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.8EPSS: 0%CPEs: 18EXPL: 0

CVE-2016-1350

https://notcve.org/view.php?id=CVE-2016-1350

Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service (device reload) via malformed SIP messages, aka Bug ID CSCuj23293. Cisco IOS 15.3 y 15.4, Cisco IOS XE 3.8 hasta la versión 3.11 y Cisco Unified Communications Manager permiten a atacantes remotos provocar una denegación de servicio (recarga de dispositivo) a través de mensajes SIP mal formados, también conocido como Bug ID CSCuj23293. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-sip http://www.securityfocus.com/bid/85372 http://www.securitytracker.com/id/1035420 http://www.securitytracker.com/id/1035421 • CWE-399: Resource Management Errors •