Lucene search
+L

552 matches found

CNVD
CNVD
•added 2018/10/19 12:00 a.m.•17 views

Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability (CNVD-2019-01908)

Cisco Prime Collaboration Assurance PCA is the United States Cisco Cisco a set of enterprise collaboration network management solutions. The program supports a unified management console to simplify the management of unified communications and video collaboration network, as well as rapid...

6.5CVSS6.7AI score0.01169EPSS
SaveExploits0References1
OSV
OSV
•added 2018/10/17 10:29 p.m.•11 views

CVE-2018-15438

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficient CSRF...

6.5CVSS5.8AI score0.01169EPSS
SaveExploits0References3
CVE
CVE
•added 2018/10/17 10:00 p.m.•77 views

CVE-2018-15438

CVE-2018-15438 concerns Cisco Prime Collaboration Assurance and its web-based management interface. The issue is a CSRF vulnerability arising from insufficient CSRF protections, enabling an unauthenticated, remote attacker to persuade a user to click a malicious link and perform arbitrary actions...

6.5CVSS6.8AI score0.01169EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2018/10/17 12:00 a.m.•4 views

PT-2018-2007

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perfo...

7.8CVSS0.01169EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/17 12:00 a.m.•5 views

CVE-2018-15438: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficient CSRF...

6.5CVSS6.7AI score0.01169EPSS
SaveExploits0References3
Microsoft KB
Microsoft KB
•added 2018/10/09 7:00 a.m.•49 views

Description of the security update for SharePoint Enterprise Server 2016: October 9, 2018

None None...

5.4CVSS6.5AI score0.02813EPSS
SaveExploits0
OSV
OSV
•added 2018/10/05 2:29 p.m.•14 views

CVE-2018-0458

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

6.1CVSS6AI score0.01783EPSS
SaveExploits0References3
NVD
NVD
•added 2018/10/05 2:29 p.m.•28 views

CVE-2018-0458

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

6.1CVSS6AI score0.01783EPSS
SaveExploits0References3
CVE
CVE
•added 2018/10/05 2:00 p.m.•63 views

CVE-2018-0458

CVE-2018-0458 affects Cisco Prime Collaboration Assurance (PCA) web-based management interface. The vulnerability stems from insufficient validation of user-supplied input, enabling unauthenticated, remote attackers to conduct a cross-site scripting (XSS) attack by tricking a user into clicking a...

6.1CVSS6AI score0.01783EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2018/10/05 12:00 a.m.•4 views

PT-2018-8841

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

6.1CVSS0.01783EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/05 12:00 a.m.•4 views

CVE-2018-0458: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

6.1CVSS6.5AI score0.01783EPSS
SaveExploits0References3
Microsoft KB
Microsoft KB
•added 2018/09/11 7:00 a.m.•114 views

Description of the security update for SharePoint Enterprise Server 2016: September 11, 2018

None None...

5.4CVSS6.5AI score0.02253EPSS
SaveExploits0
CNVD
CNVD
•added 2018/09/07 12:00 a.m.•12 views

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability (CNVD-2018-18753)

Cisco Prime Collaboration Assurance PCA is the United States Cisco Cisco a set of enterprise collaboration network management solutions. The program supports a unified management console to simplify the management of unified communications and video collaboration network, as well as rapid...

6.1CVSS6.2AI score0.01783EPSS
SaveExploits0References1
Cisco
Cisco
•added 2018/09/05 4:00 p.m.•102 views

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

6.1CVSS1.4AI score0.01783EPSS
SaveExploits0References1
Carbon Black Blog
Carbon Black Blog
•added 2018/08/15 5:00 p.m.•62 views

The Key to EDR You Didn’t Know You Were Missing

It’s no longer enough for companies to simply “keep up” in the world of cybersecurity. To prevent attackers from infiltrating your systems, you need to be one step ahead at all times. It’s no wonder, then, that the majority of companies are spending more on cybersecurity than ever before.1 While...

1.5AI score
SaveExploits0
Kitploit
Kitploit
•added 2018/08/11 1:53 p.m.•21 views

JoomScan 0.0.6 - OWASP Joomla Vulnerability Scanner Project

OWASP Joomla! Vulnerability Scanner JoomScan is an open source project, developed with the aim of automating the task of vulnerability detection and reliability assurance in Joomla CMS deployments. Implemented in Perl, this tool enables seamless and effortless scanning of Joomla installations,...

7.1AI score
SaveExploits0References1
Oracle
Oracle
•added 2018/07/17 12:00 a.m.•141 views

CPU July 2018

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update advisories...

10CVSS6.7AI score0.99968EPSS
SaveExploits250
Microsoft KB
Microsoft KB
•added 2018/07/10 7:00 a.m.•70 views

Description of the security update for SharePoint Server 2016: July 10, 2018

None None...

8.8CVSS6.5AI score0.13586EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2018/06/17 10:33 p.m.•69 views

Security Bulletin: Vulnerabilities in OpenSSL affect MobileFirst Quality Assurance

Summary OpenSSL vulnerabilities were disclosed on September 22 and 26, 2016 by the OpenSSL Project. OpenSSL is used by MobileFirst Quality Assurance. MobileFirst Quality Assurance has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-6302 DESCRIPTION: OpenSSL is vulnerable to a...

9.8CVSS1.3AI score0.63029EPSS
SaveExploits2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2018/06/17 10:32 p.m.•37 views

Security Bulletin: GNU C library (glibc) vulnerability affects IBM MobileFirst Quality Assurance (CVE-2015-7547)

Summary A GNU C library glibc stack-based buffer overflow in getaddrinfo vulnerability affects IBM MobileFirst Quality Assurance. Vulnerability Details CVEID: CVE-2015-7547 DESCRIPTION: GNU C Library glibc is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the...

8.1CVSS8.4AI score0.90987EPSS
SaveExploits17Affected Software1
Rows per page
Query Builder