Cisco

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-0770 1Cisco 1Telepresence Tc Software May 6, 2026 Jun 7, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attack...Show more CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL, aka Bug ID CSCut79341.Show less
CVE-2015-0767 1Cisco 1Edge 340 Firmware May 6, 2026 Jun 7, 2015 N/A· v4 N/A· v3 7.2 HIGH· v2 Cisco Edge 300 software 1.0 and 1.1 on Edge 340 devices allows local users to obtain root privileges via unspecified commands, aka Bug ID CSCur18132.
CVE-2015-0766 1Cisco 1Firesight System Software May 6, 2026 Jun 4, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in the Management Center component in Cisco FireSIGHT System Software 6.0.0 allow remote attackers to inject arbitrary web script or...Show more Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in the Management Center component in Cisco FireSIGHT System Software 6.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug IDs CSCus93566, CSCut31557, and CSCut47196.Show less
CVE-2015-0765 1Cisco 1Ons 15454 System Software May 6, 2026 Jun 4, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco ONS 15454 System Software 10.30 and 10.301 allows remote attackers to cause a denial of service (tNetTask CPU consumption or card reset) via a flood of (1) IP or (2) Ethernet traffic, aka Bug ID CSCus57263.
CVE-2015-0764 1Cisco 1Unified Meetingplace May 6, 2026 Jun 4, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via a crafted resource request, aka Bug ID CSCus95603.
CVE-2015-0763 1Cisco 1Unified Meetingplace May 6, 2026 Jun 4, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco Unified MeetingPlace 8.6(1.2) does not properly validate session IDs in http URLs, which allows remote attackers to obtain sensitive session information via a crafted URL, aka Bug ID CSCuu60338.
CVE-2015-0762 1Cisco 1Unified Meetingplace May 6, 2026 Jun 4, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) for Microsoft Outlook allows remote attackers to inject arbitrary web script or HTML via a crafted...Show more Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unified MeetingPlace 8.6(1.2) and 8.6(1.9) for Microsoft Outlook allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCuu51400.Show less
CVE-2015-0761 1Cisco 1Anyconnect Secure Mobility Client May 6, 2026 Jun 4, 2015 N/A· v4 N/A· v3 7.2 HIGH· v2 Cisco AnyConnect Secure Mobility Client before 3.1(8009) and 4.x before 4.0(2052) on Linux does not properly implement unspecified internal functions, which allows local users to obtain root privileges via crafted vpnage...Show more Cisco AnyConnect Secure Mobility Client before 3.1(8009) and 4.x before 4.0(2052) on Linux does not properly implement unspecified internal functions, which allows local users to obtain root privileges via crafted vpnagent options, aka Bug ID CSCus86790.Show less
CVE-2015-0760 1Cisco 1Adaptive Security Appliance Software May 6, 2026 Jun 4, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The IKEv1 implementation in Cisco ASA Software 7.x, 8.0.x, 8.1.x, and 8.2.x before 8.2.2.13 allows remote authenticated users to bypass XAUTH authentication via crafted IKEv1 packets, aka Bug ID CSCus47259.
CVE-2015-0759 1Cisco 1Headend Digital Broadband Delivery System May 6, 2026 Jun 2, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in Cisco Headend Digital Broadband Delivery System allows remote attackers to hijack the authentication of arbitrary users.
CVE-2015-0758 1Cisco 1Unified Meetingplace May 6, 2026 May 30, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The web-based user interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, r...Show more The web-based user interface in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCus97452.Show less
CVE-2015-0747 1Cisco 3Headend Digital Broadband Delivery System Headend System ReleaseVideoscape Conductor May 6, 2026 May 30, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408.
CVE-2015-0745 1Cisco 2Headend Digital Broadband Delivery System Headend System Release May 6, 2026 May 30, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug ID CSCus44909.
CVE-2015-0744 1Cisco 3Dta Control System Headend Digital Broadband Delivery SystemHeadend System Release May 6, 2026 May 30, 2015 N/A· v4 N/A· v3 7.8 HIGH· v2 Cisco DTA Control System (DTACS) 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service (CPU and memory consumption, and TCP service outage) via (1) a SYN flood or (2) another type o...Show more Cisco DTA Control System (DTACS) 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service (CPU and memory consumption, and TCP service outage) via (1) a SYN flood or (2) another type of TCP traffic flood, aka Bug IDs CSCus50642, CSCus50662, CSCus50625, CSCus50657, and CSCus68315.Show less
CVE-2015-0743 1Cisco 2Headend Digital Broadband Delivery System Headend System Release May 6, 2026 May 30, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Cisco Headend System Release allows remote attackers to cause a denial of service (DHCP and TFTP outage) via a flood of crafted UDP traffic, aka Bug ID CSCus04097.
CVE-2015-0733 1Cisco 1Headend Digital Broadband Delivery System May 6, 2026 May 30, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 CRLF injection vulnerability in the HTTP Header Handler in Digital Broadband Delivery System in Cisco Headend System Release allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting a...Show more CRLF injection vulnerability in the HTTP Header Handler in Digital Broadband Delivery System in Cisco Headend System Release allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks, via a crafted request, aka Bug ID CSCur25580.Show less
CVE-2015-0757 1Cisco 1Identity Services Engine Software May 6, 2026 May 29, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does not properly implement session handlers, which allows remote attackers to obtain sensitive information by reading web pages, as dem...Show more The web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does not properly implement session handlers, which allows remote attackers to obtain sensitive information by reading web pages, as demonstrated by MnT reports, aka Bug ID CSCuq23140.Show less
CVE-2015-0756 1Cisco 1Wireless Lan Controller May 6, 2026 May 29, 2015 N/A· v4 N/A· v3 6.1 MEDIUM· v2 Cisco Wireless LAN Controller (WLC) devices with software 7.4(1.1) allow remote attackers to cause a denial of service (wireless-networking outage) via crafted TCP traffic on the local network, aka Bug ID CSCug67104.
CVE-2015-0755 1Cisco 1Anyconnect Secure Mobility Client May 6, 2026 May 29, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The Posture module for Cisco Identity Services Engine (ISE), as distributed in Cisco AnyConnect Secure Mobility Client 4.0(64), allows local users to gain privileges via unspecified commands, aka Bug ID CSCut05797.
CVE-2015-0754 1Cisco 1Finesse May 6, 2026 May 29, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause a denial of service (CPU and memory consumption) via a crafted XML document, aka Bug ID CSCut95810.

Previous 1...226227228...334 Next