Cisco

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-6299 1Cisco 1Unity Connection May 6, 2026 Sep 20, 2015 N/A· v4 N/A· v3 6.5 MEDIUM· v2 SQL injection vulnerability in the web interface in Cisco Unity Connection 9.1(1.2) and earlier allows remote authenticated users to execute arbitrary SQL commands via a crafted POST request, aka Bug ID CSCuv63824.
CVE-2015-6295 1Cisco 1Nx Os May 6, 2026 Sep 20, 2015 N/A· v4 N/A· v3 4.8 MEDIUM· v2 Cisco NX-OS 6.1(2)I3(4) and 7.0(3)I1(1) on Nexus 9000 (N9K) devices allows remote attackers to cause a denial of service (CPU consumption or control-plane instability) or trigger unintended traffic forwarding via a Layer...Show more Cisco NX-OS 6.1(2)I3(4) and 7.0(3)I1(1) on Nexus 9000 (N9K) devices allows remote attackers to cause a denial of service (CPU consumption or control-plane instability) or trigger unintended traffic forwarding via a Layer 2 packet with a reserved VLAN number, aka Bug ID CSCuw13560.Show less
CVE-2015-6284 1Cisco 1Telepresence Server Software May 6, 2026 Sep 20, 2015 N/A· v4 N/A· v3 7.8 HIGH· v2 Buffer overflow in the Conference Control Protocol API implementation in Cisco TelePresence Server software before 4.1(2.33) on 7010, MSE 8710, Multiparty Media 310 and 320, and Virtual Machine devices allows remote atta...Show more Buffer overflow in the Conference Control Protocol API implementation in Cisco TelePresence Server software before 4.1(2.33) on 7010, MSE 8710, Multiparty Media 310 and 320, and Virtual Machine devices allows remote attackers to cause a denial of service (device crash) via a crafted URL, aka Bug ID CSCuu28277.Show less
CVE-2015-4307 1Cisco 1Prime Collaboration Provisioning May 6, 2026 Sep 20, 2015 N/A· v4 N/A· v3 9.0 HIGH· v2 The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL, aka Bug ID CSCut64111...Show more The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrictions and create administrative accounts via a crafted URL, aka Bug ID CSCut64111.Show less
CVE-2015-4306 1Cisco 1Prime Collaboration Assurance May 6, 2026 Sep 20, 2015 N/A· v4 N/A· v3 8.5 HIGH· v2 The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrictions, and impersonate administrators of arbitrary tenant doma...Show more The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-session read restrictions, and impersonate administrators of arbitrary tenant domains, by discovering a session identifier and constructing a crafted URL, aka Bug IDs CSCus88343 and CSCus88334.Show less
CVE-2015-4305 1Cisco 1Prime Collaboration Assurance May 6, 2026 Sep 20, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restrictions, and discover credentials or SNMP communities for arbi...Show more The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restrictions, and discover credentials or SNMP communities for arbitrary tenant domains, via a crafted URL, aka Bug ID CSCus62656.Show less
CVE-2015-4304 1Cisco 1Prime Collaboration Assurance May 6, 2026 Sep 20, 2015 N/A· v4 N/A· v3 9.0 HIGH· v2 The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended access restrictions, and create administrative accounts or read data from arbitrary tena...Show more The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended access restrictions, and create administrative accounts or read data from arbitrary tenant domains, via a crafted URL, aka Bug IDs CSCus62671 and CSCus62652.Show less
CVE-2015-6297 1Cisco 1Ios Xr May 6, 2026 Sep 18, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5.2.0 Base allows remote attackers to cause a denial of service (process reset) via crafted packets, aka Bug ID CSCun36525.
CVE-2015-6296 1Cisco 1Prime Network Registrar May 6, 2026 Sep 18, 2015 N/A· v4 N/A· v3 7.2 HIGH· v2 Cisco Prime Network Registrar (CPNR) 8.1(3.3), 8.2(3), and 8.3(2) has a default account, which allows local users to obtain root access by leveraging knowledge of the credentials, aka Bug ID CSCuw21825.
CVE-2015-6294 1Cisco 2Ios Ios Xe May 6, 2026 Sep 18, 2015 N/A· v4 N/A· v3 6.1 MEDIUM· v2 Cisco IOS 15.2(3)E and earlier and IOS XE 3.6(2)E and earlier allow remote attackers to cause a denial of service (functionality loss) via crafted Cisco Discovery Protocol (CDP) packets, aka Bug ID CSCuu25770.
CVE-2015-6290 1Cisco 1Web Security Virtual Appliance May 6, 2026 Sep 14, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cisco Web Security Appliance (WSA) 8.0.7 allows remote HTTP servers to cause a denial of service (memory consumption from stale TCP connections) via crafted responses, aka Bug ID CSCuw10426.
CVE-2015-6288 1Cisco 1Content Security Management Appliance May 6, 2026 Sep 14, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco Content Security Management Appliance (SMA) 7.8.0-000 does not properly validate credentials, which allows remote attackers to cause a denial of service (rapid log-file rollover and application fault) via crafted H...Show more Cisco Content Security Management Appliance (SMA) 7.8.0-000 does not properly validate credentials, which allows remote attackers to cause a denial of service (rapid log-file rollover and application fault) via crafted HTTP requests, aka Bug ID CSCuw09620.Show less
CVE-2015-6287 1Cisco 1Web Security Virtual Appliance May 6, 2026 Sep 14, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco Web Security Appliance (WSA) 8.0.6-078 and 8.0.6-115 allows remote attackers to cause a denial of service (service outage) via a flood of TCP traffic that leads to DNS resolution delays, aka Bug IDs CSCur32005 and...Show more Cisco Web Security Appliance (WSA) 8.0.6-078 and 8.0.6-115 allows remote attackers to cause a denial of service (service outage) via a flood of TCP traffic that leads to DNS resolution delays, aka Bug IDs CSCur32005 and CSCur07907.Show less
CVE-2015-6286 1Cisco 1Application Visibility And Control May 6, 2026 Sep 14, 2015 N/A· v4 N/A· v3 5.7 MEDIUM· v2 Cisco Application Visibility and Control (AVC) 15.3(3)JA, when FlexConnect is enabled, allows remote attackers to cause a denial of service (access-point outage) via a crafted UDP packet, aka Bug ID CSCuu47016.
CVE-2015-6285 1Cisco 1Email Security Appliance May 6, 2026 Sep 14, 2015 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Format string vulnerability in Cisco Email Security Appliance (ESA) 7.6.0 and 8.0.0 allows remote attackers to cause a denial of service (memory overwrite or service outage) via format string specifiers in an HTTP reques...Show more Format string vulnerability in Cisco Email Security Appliance (ESA) 7.6.0 and 8.0.0 allows remote attackers to cause a denial of service (memory overwrite or service outage) via format string specifiers in an HTTP request, aka Bug ID CSCug21497.Show less
CVE-2015-6276 1Cisco 1Telepresence System Software Ix May 6, 2026 Sep 5, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco TelePresence IX5000 8.0.3 stores a private key associated with an X.509 certificate under the web root with insufficient access control, which allows remote attackers to obtain cleartext versions of HTTPS traffic o...Show more Cisco TelePresence IX5000 8.0.3 stores a private key associated with an X.509 certificate under the web root with insufficient access control, which allows remote attackers to obtain cleartext versions of HTTPS traffic or spoof devices via a direct request to the certificate directory, aka Bug ID CSCuu63501.Show less
CVE-2015-6259 1Cisco 2Integrated Management Controller Supervisor Unified Computing System Director May 6, 2026 Sep 4, 2015 N/A· v4 N/A· v3 9.4 HIGH· v2 The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor before 1.0.0.1 and UCS Director (formerly Cloupia Unified Infrastructure Controller) before 5.2.0.1 allows remote attackers...Show more The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor before 1.0.0.1 and UCS Director (formerly Cloupia Unified Infrastructure Controller) before 5.2.0.1 allows remote attackers to write to arbitrary files via crafted HTTP requests, aka Bug IDs CSCus36435 and CSCus62625.Show less
CVE-2015-6277 1Cisco 41000v Mds 9000Nx Os+1 more May 6, 2026 Sep 2, 2015 N/A· v4 N/A· v3 6.1 MEDIUM· v2 The ARP implementation in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 5.2(1)SV3(1.4), Nexus 3000 devices 7.3(0)ZD(0.47), Nexus 4000 devices 4.1(2)E1, Nexus 9000 devices 7.3(0)ZD(0.61), and MDS 9000 devices 7.0(...Show more The ARP implementation in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 5.2(1)SV3(1.4), Nexus 3000 devices 7.3(0)ZD(0.47), Nexus 4000 devices 4.1(2)E1, Nexus 9000 devices 7.3(0)ZD(0.61), and MDS 9000 devices 7.0(0)HSK(0.353) and SAN-OS NX-OS on MDS 9000 devices 7.0(0)HSK(0.353) allows remote attackers to cause a denial of service (ARP process restart) via crafted packet-header fields, aka Bug ID CSCut25292.Show less
CVE-2015-6274 1Cisco 1Asr 1000 Series Software May 6, 2026 Sep 2, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The IPv4 implementation on Cisco ASR 1000 devices with software 15.5(3)S allows remote attackers to cause a denial of service (ESP QFP CPU consumption) by triggering packet fragmentation and reassembly, aka Bug ID CSCuv7...Show more The IPv4 implementation on Cisco ASR 1000 devices with software 15.5(3)S allows remote attackers to cause a denial of service (ESP QFP CPU consumption) by triggering packet fragmentation and reassembly, aka Bug ID CSCuv71273.Show less
CVE-2015-4330 1Cisco 1Telepresence Video Communication Server Software May 6, 2026 Sep 2, 2015 N/A· v4 N/A· v3 6.9 MEDIUM· v2 A local file script in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to gain privileges for OS command execution via invalid parameters, aka Bug ID CSCuv10556.

Previous 1...213214215...329 Next