Latest CVE Feed
-
5.3
MEDIUMCVE-2016-6421
Cisco IOS XR 5.2.2 allows remote attackers to cause a denial of service (process restart) via a crafted OSPF Link State Advertisement (LSA) update, aka Bug ID CSCvb05643.... Read more
Affected Products : ios_xr- EPSS Score: %0.55
- Published: Oct. 05, 2016
- Modified: Apr. 12, 2025
-
7.5
HIGHCVE-2016-6393
The AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial of service (device reload) via a failed SSH connection attempt that is mishandled during generation of an e... Read more
- EPSS Score: %8.65
- Published: Oct. 05, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-6391
Cisco IOS 12.2 and 15.0 through 15.3 allows remote attackers to cause a denial of service (traffic-processing outage) via a crafted series of Common Industrial Protocol (CIP) requests, aka Bug ID CSCur69036.... Read more
Affected Products : ios- EPSS Score: %0.74
- Published: Oct. 05, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-6385
Memory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.2 through 3.8 allows remote attackers to cause a denial of service (memory consumption) via crafted image-list parameters, aka Bug ID CSCuy82367.... Read more
- EPSS Score: %3.57
- Published: Oct. 05, 2016
- Modified: Apr. 12, 2025
-
8.3
HIGHCVE-2016-6380
The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (data corruption or device reload) via a crafted DN... Read more
- EPSS Score: %2.26
- Published: Oct. 05, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-6379
Cisco IOS 12.2 and IOS XE 3.14 through 3.16 and 16.1 allow remote attackers to cause a denial of service (device reload) via crafted IP Detail Record (IPDR) packets, aka Bug ID CSCuu35089.... Read more
- EPSS Score: %0.74
- Published: Oct. 05, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-6378
Cisco IOS XE 3.1 through 3.17 and 16.1 through 16.2 allows remote attackers to cause a denial of service (device reload) via crafted ICMP packets that require NAT, aka Bug ID CSCuw85853.... Read more
- EPSS Score: %0.74
- Published: Oct. 05, 2016
- Modified: Apr. 12, 2025
-
7.5
HIGHCVE-2016-1455
Cisco NX-OS before 7.0(3)I2(2e) and 7.0(3)I4 before 7.0(3)I4(1) has an incorrect iptables local-interface configuration, which allows remote attackers to obtain sensitive information via TCP or UDP traffic, aka Bug ID CSCuz05365.... Read more
Affected Products : nx-os nx-os nexus_93128 nexus_9396px nexus_9396tx nexus_9504 nexus_9508 nexus_9516 nexus_n9336pq- EPSS Score: %0.68
- Published: Oct. 05, 2016
- Modified: Apr. 12, 2025
-
6.1
MEDIUMCVE-2016-6418
Cross-site scripting (XSS) vulnerability in Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.0 through 3.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCva14552.... Read more
Affected Products : videoscape_distribution_suite_service_manager- EPSS Score: %0.29
- Published: Oct. 05, 2016
- Modified: Apr. 12, 2025
-
8.8
HIGHCVE-2016-6417
Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCva21636.... Read more
Affected Products : firesight_system_software- EPSS Score: %0.13
- Published: Oct. 05, 2016
- Modified: Apr. 12, 2025
-
5.9
MEDIUMCVE-2016-6416
The FTP service in Cisco AsyncOS on Email Security Appliance (ESA) devices 9.6.0-000 through 9.9.6-026, Web Security Appliance (WSA) devices 9.0.0-162 through 9.5.0-444, and Content Security Management Appliance (SMA) devices allows remote attackers to ca... Read more
Affected Products : web_security_appliance email_security_appliance content_security_management_appliance- EPSS Score: %0.89
- Published: Oct. 05, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-6392
Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a denial of service (device restart) via a crafted IPv4 Multicast Source Discovery Protocol (MSDP) Source-Active (SA) message, aka Bug ID CSCud36767.... Read more
- EPSS Score: %1.03
- Published: Oct. 05, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-6386
Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service (data-structure corruption and device reload) via fragmented IPv4 packets, aka Bug ID CSCux66005.... Read more
- EPSS Score: %0.74
- Published: Oct. 05, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-6384
Cisco IOS 12.2 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.17 and 16.2 allow remote attackers to cause a denial of service (device reload) via crafted fields in an H.323 message, aka Bug ID CSCux04257.... Read more
- EPSS Score: %1.97
- Published: Oct. 05, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-6382
Cisco IOS 15.2 through 15.6 and IOS XE 3.6 through 3.17 and 16.1 allow remote attackers to cause a denial of service (device restart) via a malformed IPv6 Protocol Independent Multicast (PIM) register packet, aka Bug ID CSCuy16399.... Read more
- EPSS Score: %6.26
- Published: Oct. 05, 2016
- Modified: Apr. 12, 2025
-
7.5
HIGHCVE-2016-6381
Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service (memory consumption or device reload) via fragmented IKEv1 packets, aka Bug ID CSCuy47382.... Read more
- EPSS Score: %1.26
- Published: Oct. 05, 2016
- Modified: Apr. 12, 2025
-
4.9
MEDIUMCVE-2016-7909
The pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by setting the (1) receive or (2) transmit descriptor ring length to 0.... Read more
- EPSS Score: %0.14
- Published: Oct. 05, 2016
- Modified: Apr. 12, 2025
-
4.4
MEDIUMCVE-2016-7908
The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU proc... Read more
- EPSS Score: %0.14
- Published: Oct. 05, 2016
- Modified: Apr. 12, 2025
-
4.4
MEDIUMCVE-2016-7907
The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU proc... Read more
Affected Products : qemu- EPSS Score: %0.11
- Published: Oct. 05, 2016
- Modified: Apr. 12, 2025
-
7.2
HIGHCVE-2016-7561
Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow administrators to obtain sensitive user credentials by reading the pam.log file.... Read more
Affected Products : fortiwlc- EPSS Score: %0.31
- Published: Oct. 05, 2016
- Modified: Apr. 12, 2025