Cisco

Ciscoworks Common Services

12 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2011-4237

  • EPSS 0.28%
  • Published 03.05.2012 10:11:39
  • Last modified 11.04.2025 00:51:21

CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting att...

5

CVE-2011-2042

  • EPSS 0.25%
  • Published 22.10.2011 02:59:19
  • Last modified 11.04.2025 00:51:21

The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows remote attackers to obtain potentially sensitive information about the engine name and database port via an unspecified request to UDP port 2...

9

CVE-2011-3310

  • EPSS 27.53%
  • Published 20.10.2011 00:55:00
  • Last modified 11.04.2025 00:51:21

The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Security Manager, Cisco Unified Service Monitor, Cisco Unified Operations Manager, CiscoWorks QoS Policy Manager, ...

6.8

CVE-2011-0966

Exploit
  • EPSS 42%
  • Published 20.05.2011 22:55:03
  • Last modified 11.04.2025 00:51:21

Directory traversal vulnerability in cwhp/auditLog.do in the Homepage Auditing component in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, aka Bug ID CSCto355...

4.3

CVE-2011-0961

Exploit
  • EPSS 14.9%
  • Published 20.05.2011 22:55:02
  • Last modified 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in cwhp/device.center.do in the Help servlet in Cisco CiscoWorks Common Services 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the device parameter, aka Bug ID CSCto12704.

10

CVE-2010-3036

  • EPSS 28.4%
  • Published 29.10.2010 19:00:02
  • Last modified 11.04.2025 00:51:21

Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port (1) 443 or (2) 1741, aka Bug ID CSCti4135...

10

CVE-2009-1161

  • EPSS 1.62%
  • Published 21.05.2009 14:30:00
  • Last modified 09.04.2025 00:30:58

Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations...

9.3

CVE-2008-2054

  • EPSS 4.63%
  • Published 29.05.2008 16:32:00
  • Last modified 09.04.2025 00:30:58

Unspecified vulnerability in Cisco CiscoWorks Common Services 3.0.3 through 3.1.1 allows remote attackers to execute arbitrary code on a client machine via unknown vectors.

5

CVE-2005-0356

Exploit
  • EPSS 80.86%
  • Published 31.05.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes ...

7.5

CVE-2004-0079

  • EPSS 2.06%
  • Published 23.11.2004 05:00:00
  • Last modified 03.04.2025 01:03:51

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.