|
267301
|
8.8 |
HIGH
Network
|
cisco
|
finesse
|
A vulnerability in Cisco Finesse Agent and Supervisor Desktop Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against the user of the we…
|
CWE-352
Origin Validation Error
|
CVE-2016-6442
|
2024-11-21 11:56 |
2016-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267302
|
6.5 |
MEDIUM
Network
|
cisco
|
unified_communications_manager
|
The Cisco Unified Communications Manager (CUCM) may be vulnerable to data that can be displayed inside an iframe within a web page, which in turn could lead to a clickjacking attack. More Information…
|
CWE-20
Improper Input Validation
|
CVE-2016-6440
|
2024-11-21 11:56 |
2016-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267303
|
7.5 |
HIGH
Network
|
cisco
|
firepower_management_center
|
A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software before 6.0.1 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) …
|
CWE-399
Resource Management Errors
|
CVE-2016-6439
|
2024-11-21 11:56 |
2016-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267304
|
5.9 |
MEDIUM
Network
|
cisco
|
ios_xe
|
A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause a configuration integrity change to the vty line c…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2016-6438
|
2024-11-21 11:56 |
2016-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267305
|
5.9 |
MEDIUM
Network
|
cisco
|
wide_area_application_services
|
A vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to …
|
CWE-399
Resource Management Errors
|
CVE-2016-6437
|
2024-11-21 11:56 |
2016-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267306
|
8.1 |
HIGH
Network
|
cisco
|
adaptive_security_appliance_software
|
A vulnerability in the Identity Firewall feature of Cisco ASA Software before 9.6(2.1) could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-6432
|
2024-11-21 11:56 |
2016-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267307
|
7.5 |
HIGH
Network
|
cisco
|
adaptive_security_appliance_software
|
A vulnerability in the local Certificate Authority (CA) feature of Cisco ASA Software before 9.6(1.5) could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vul…
|
CWE-20
Improper Input Validation
|
CVE-2016-6431
|
2024-11-21 11:56 |
2016-10-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267308
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a deni…
|
CWE-416
Use After Free
|
CVE-2016-6828
|
2024-11-21 11:56 |
2016-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267309
|
9.8 |
CRITICAL
Network
|
google
|
android
|
sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a larg…
|
CWE-20
Improper Input Validation
|
CVE-2016-6696
|
2024-11-21 11:56 |
2016-10-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267310
|
9.8 |
CRITICAL
Network
|
google
|
android
|
sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-6695
|
2024-11-21 11:56 |
2016-10-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|