|
264681
|
7.5 |
HIGH
Network
|
cisco
|
email_security_appliance web_security_appliance web_security_appliance_8.0.5
|
A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions (MIME) headers of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and W…
|
CWE-20
Improper Input Validation
|
CVE-2016-6372
|
2024-11-21 11:56 |
2016-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264682
|
7.5 |
HIGH
Network
|
cisco
|
meeting_server
|
A vulnerability in Web Bridge for Cisco Meeting Server could allow an unauthenticated, remote attacker to retrieve memory from a connected server. More Information: CSCvb03308. Known Affected Release…
|
CWE-200
Information Exposure
|
CVE-2016-6446
|
2024-11-21 11:56 |
2016-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264683
|
9.1 |
CRITICAL
Network
|
cisco
|
meeting_server
|
A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of the Cisco Meeting Server (CMS) before 2.0.6 and Acano Server before 1.8.18 and 1.9.x before 1.9.6 could allow an un…
|
CWE-20
Improper Input Validation
|
CVE-2016-6445
|
2024-11-21 11:56 |
2016-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264684
|
8.8 |
HIGH
Network
|
cisco
|
meeting_server
|
A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a Web Bridge user. More Information: CSCvb03308. …
|
CWE-352
Origin Validation Error
|
CVE-2016-6444
|
2024-11-21 11:56 |
2016-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264685
|
8.8 |
HIGH
Network
|
cisco
|
prime_infrastructure evolved_programmable_network_manager
|
A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote attacker to impact system confidentiality by exe…
|
CWE-89
SQL Injection
|
CVE-2016-6443
|
2024-11-21 11:56 |
2016-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264686
|
8.8 |
HIGH
Network
|
cisco
|
finesse
|
A vulnerability in Cisco Finesse Agent and Supervisor Desktop Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against the user of the we…
|
CWE-352
Origin Validation Error
|
CVE-2016-6442
|
2024-11-21 11:56 |
2016-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264687
|
6.5 |
MEDIUM
Network
|
cisco
|
unified_communications_manager
|
The Cisco Unified Communications Manager (CUCM) may be vulnerable to data that can be displayed inside an iframe within a web page, which in turn could lead to a clickjacking attack. More Information…
|
CWE-20
Improper Input Validation
|
CVE-2016-6440
|
2024-11-21 11:56 |
2016-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264688
|
7.5 |
HIGH
Network
|
cisco
|
firepower_management_center
|
A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software before 6.0.1 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) …
|
CWE-399
Resource Management Errors
|
CVE-2016-6439
|
2024-11-21 11:56 |
2016-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264689
|
5.9 |
MEDIUM
Network
|
cisco
|
ios_xe
|
A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause a configuration integrity change to the vty line c…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-6438
|
2024-11-21 11:56 |
2016-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264690
|
5.9 |
MEDIUM
Network
|
cisco
|
wide_area_application_services
|
A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to …
|
CWE-399
Resource Management Errors
|
CVE-2016-6437
|
2024-11-21 11:56 |
2016-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|