552 matches found
CVE-2019-1662: Improper Authentication
A vulnerability in the Quality of Voice Reporting QOVR service of Cisco Prime Collaboration Assurance PCA Software could allow an unauthenticated, remote attacker to access the system as a valid user. The vulnerability is due to insufficient authentication controls. An attacker could exploit this...
PT-2019-1532
Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance PCA Software versions prior to 12.1 SP2 Description The issue is related to insufficient authentication controls in the Quality of Voice Reporting QOVR service, allowing an unauthenticated, remote attacker t...
CVE-2019-1688 Cisco Network Assurance Engine CLI Access with Default Password Vulnerability
A vulnerability in the management web interface of Cisco Network Assurance Engine NAE could allow an unauthenticated, local attacker to gain unauthorized access or cause a Denial of Service DoS condition on the server. The vulnerability is due to a fault in the password management system of NAE. ...
Default credentials
A vulnerability in the management web interface of Cisco Network Assurance Engine NAE could allow an unauthenticated, local attacker to gain unauthorized access or cause a Denial of Service DoS condition on the server. The vulnerability is due to a fault in the password management system of NAE. ...
CVE-2019-1688
A vulnerability in the management web interface of Cisco Network Assurance Engine NAE could allow an unauthenticated, local attacker to gain unauthorized access or cause a Denial of Service DoS condition on the server. The vulnerability is due to a fault in the password management system of NAE. ...
Cisco Network Assurance Engine CLI Access with Default Password Vulnerability
A vulnerability in the management web interface of Cisco Network Assurance Engine NAE could allow an unauthenticated, local attacker to gain unauthorized access or cause a Denial of Service DoS condition on the server. The vulnerability is due to a fault in the password management system of NAE. ...
Cisco Releases Security Update
Cisco has released a security update to address a vulnerability in Network Assurance Engine. An attacker could exploit this vulnerability to obtain sensitive information. The National Cybersecurity and Communications Integration Center NCCIC, part of the Cybersecurity and Infrastructure Security...
PT-2019-1535 · Cisco · Cisco Network Assurance Engine
Name of the Vulnerable Software and Affected Versions: Cisco Network Assurance Engine NAE Release 3.01 Description: A vulnerability in the management web interface of Cisco Network Assurance Engine NAE could allow an unauthenticated, local attacker to gain unauthorized access or cause a Denial of...
CVE-2019-1688: Use of Hard-coded Credentials
A vulnerability in the management web interface of Cisco Network Assurance Engine NAE could allow an unauthenticated, local attacker to gain unauthorized access or cause a Denial of Service DoS condition on the server. The vulnerability is due to a fault in the password management system of NAE. ...
The vulnerability of the web interface of the Cisco Prime Collaboration Assurance software, a unified communication management tool, allows a perpetrator to perform arbitrary actions on the vulnerable system by manipulating requests across sites.
The vulnerability of the Cisco Prime Collaboration Assurance software interface relates to insufficient authentication of HTTP requests. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on the vulnerable system by manipulating the requests between sites...
Oracle Critical Patch Update - October 2018
A Critical Patch Update is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update advisories...
Description of the security update for SharePoint Enterprise Server 2016: February 13, 2018
None None...
The vulnerability in the web interface of the Cisco Prime Collaboration Assurance software for managing unified communications is caused by errors in processing input data, allowing a hacker to re-record files in the file system.
The vulnerability of the Cisco Prime Collaboration Assurance software management interface arises due to errors in processing input data. Exploiting this vulnerability allows a malicious actor to re-record files in the file system...
Consumer Advice: Kids GPS tracker watch security
Parents are advised to rethink using GPS tracking watches for their children as a result of serious security concerns. Tracker watches can be worn by children and report their position to their parents via a mobile app. They are designed to increase child safety: you always know where your child...
Description of the security update for SharePoint Enterprise Server 2016: November 13, 2018
None None...
CVE-2018-15450
Cisco Prime Collaboration Assurance (PCA) web-based UI is affected by a vulnerability that allows an authenticated, remote attacker to overwrite files on the filesystem due to insufficient input validation. The issue arises when a crafted value is supplied in a UI input field to specify a path lo...
CVE-2018-15450 Cisco Prime Collaboration Assurance File Overwrite Vulnerability
A vulnerability in the web-based UI of Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to overwrite files on the file system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using a specific UI input fiel...
CVE-2018-15450: Improper Input Validation
A vulnerability in the web-based UI of Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to overwrite files on the file system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using a specific UI input fiel...
Cisco Prime Collaboration Assurance File Overwrite Vulnerability
A vulnerability in the web-based UI of Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to overwrite files on the file system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by using a specific UI input fiel...
PT-2018-1771
Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance affected versions not specified Description The issue is caused by insufficient input validation in the web-based UI, allowing a remote attacker to overwrite files on the file system. An attacker could explo...