Vulnerabilities > Cisco

DATE CVE VULNERABILITY TITLE RISK
2013-08-25 CVE-2013-3460 Resource Management Errors vulnerability in Cisco Unified Communications Manager
Memory leak in Cisco Unified Communications Manager (Unified CM) 8.5(x) before 8.5(1)su6, 8.6(x) before 8.6(2a)su3, and 9.x before 9.1(1) allows remote attackers to cause a denial of service (service disruption) via a high rate of UDP packets, aka Bug ID CSCub85597.
network
low complexity
cisco CWE-399
7.8
2013-08-25 CVE-2013-3459 Resource Management Errors vulnerability in Cisco Unified Communications Manager
Cisco Unified Communications Manager (Unified CM) 7.1(x) before 7.1(5b)su6a does not properly handle errors, which allows remote attackers to cause a denial of service (service disruption) via malformed registration messages, aka Bug ID CSCuf93466.
network
low complexity
cisco CWE-399
7.8
2013-08-25 CVE-2013-3390 Resource Management Errors vulnerability in Cisco Prime Central for Hosted Collaboration Solution Assurance
Memory leak in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) allows remote attackers to cause a denial of service (memory consumption) via a flood of TCP packets, aka Bug ID CSCub59158.
network
low complexity
cisco CWE-399
7.8
2013-08-25 CVE-2013-3389 Resource Management Errors vulnerability in Cisco Prime Central for Hosted Collaboration Solution Assurance
Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) allows remote attackers to cause a denial of service (memory consumption) via a flood of TCP packets to port (1) 61615 or (2) 61616, aka Bug ID CSCtz90114.
network
low complexity
cisco CWE-399
7.8
2013-08-25 CVE-2013-3388 Resource Management Errors vulnerability in Cisco Prime Central for Hosted Collaboration Solution Assurance
Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) allows remote attackers to cause a denial of service (memory consumption) via a flood of TCP packets to port 44444, aka Bug ID CSCtz92776.
network
low complexity
cisco CWE-399
7.8
2013-08-25 CVE-2013-3387 Resource Management Errors vulnerability in Cisco Prime Central for Hosted Collaboration Solution Assurance
Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) allows remote attackers to cause a denial of service (disk consumption) via a flood of TCP packets to port 5400, leading to large error-log files, aka Bug ID CSCua42724.
network
low complexity
cisco CWE-399
7.8
2013-08-22 CVE-2013-3453 Resource Management Errors vulnerability in Cisco Unified Communications Manager and Unified Presence
Memory leak in Cisco Unified Communications Manager IM and Presence Service before 8.6(5)SU1 and 9.x before 9.1(2), and Cisco Unified Presence, allows remote attackers to cause a denial of service (memory and CPU consumption) by making many TCP connections to port (1) 5060 or (2) 5061, aka Bug ID CSCud84959.
network
low complexity
cisco CWE-399
7.8
2013-08-13 CVE-2013-3464 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Cisco IOS XR
Cisco IOS XR allows local users to cause a denial of service (Silicon Packet Processor memory corruption, improper mutex handling, and device reload) by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence, aka Bug ID CSCui60347.
local
low complexity
cisco CWE-119
4.6
2013-08-12 CVE-2013-3457 Path Traversal vulnerability in Cisco Finesse
Absolute path traversal vulnerability in the web interface in Cisco Finesse allows remote attackers to read directory contents via a direct request to a directory URL, aka Bug ID CSCug16772.
network
low complexity
cisco CWE-22
5.0
2013-08-12 CVE-2013-3455 Credentials Management vulnerability in Cisco Finesse
Cisco Finesse allows remote attackers to obtain sensitive information by sniffing the network for HTTP query data, aka Bug ID CSCug16732.
network
low complexity
cisco CWE-255
5.0