CVE-2011-4237
Published May 3, 2012CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers t…
Vendor/product archive
cisco / ciscoworks_common_services CVEs
Beta · best-effort12 CVEs tagged to cisco / ciscoworks_common_services — 4 Critical, 1 High, 7 Medium, 0 Low, 0 Unrated.
CVE-2011-2042
Published Oct 22, 2011The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows remote attackers to obtain potentially sensitive information about the…
CVE-2011-3310
Published Oct 20, 2011The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Security Manager, Cisco Unified Service Mon…
CVE-2011-0966
Published May 20, 2011Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitr…
CVE-2011-0961
Published May 20, 2011Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to inject arbitra…
CVE-2010-3036
Published Oct 29, 2010Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary c…
CVE-2009-1161
Published May 21, 2009Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security…
CVE-2008-2054
Published May 29, 2008Unspecified vulnerability in Cisco CiscoWorks Common Services 3.0.3 through 3.1.1 allows remote attackers to execute arbitrary code on a client machine via unknown vectors.
CVE-2005-0356
Published May 31, 2005Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connec…
CVE-2004-0079
Published Nov 23, 2004The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake…
CVE-2004-0081
Published Nov 23, 2004OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the C…
CVE-2004-0112
Published Nov 23, 2004The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, wh…
Showing 1-12 of 12 CVEsPage 1 of 1