552 matches found
PT-2015-7184
Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance versions 10.51 through 10.6 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations For Cisco Prime Collaboration Assurance...
CVE-2015-6330: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in Cisco Prime Collaboration Assurance 10.51 and 10.6 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus62712...
Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability
A vulnerability in the web interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against a user of the web interface. The vulnerability is due to insufficient CSRF protections. An attacker could exploit...
October 2015 Oracle Critical Patch Update
Oracle on Tuesday patched 154 vulnerabilities in 54 different products as part of its regularly scheduled Critical Patch Update. More than half of the patches, 84 to be exact, address vulnerabilities that Oracle claims may be remotely exploitable without authentication. Java SE is responsible for...
emploi-assurance.com XSS vulnerability
Vulnerable URL: http://www.emploi-assurance.com/recherche.php Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 08:40 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1358350 Google Pagerank| 5 VIP website status...
CVE-2015-6328
The web framework in Cisco Prime Collaboration Assurance PCA 10.51 allows remote authenticated users to bypass intended access restrictions and read arbitrary files via a crafted URL, aka Bug ID CSCus88380...
Design/Logic Flaw
The web framework in Cisco Prime Collaboration Assurance PCA 10.51 allows remote authenticated users to bypass intended access restrictions and read arbitrary files via a crafted URL, aka Bug ID CSCus88380...
CVE-2015-6328
CVE-2015-6328 affects Cisco Prime Collaboration Assurance (PCA) 10.5(1). The web framework allows remote authenticated users to bypass access controls and read arbitrary files via a crafted URL (information disclosure). This is due to incorrect implementation of access control in the PCA web comp...
PT-2015-7182
Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance PCA version 10.51 Description The issue allows remote authenticated users to bypass intended access restrictions and read arbitrary files via a crafted URL. Recommendations For Cisco Prime Collaboration...
CVE-2015-6328: Exposure of Sensitive Information to an Unauthorized Actor
The web framework in Cisco Prime Collaboration Assurance PCA 10.51 allows remote authenticated users to bypass intended access restrictions and read arbitrary files via a crafted URL, aka Bug ID CSCus88380...
CVE-2015-6328
The web framework in Cisco Prime Collaboration Assurance PCA 10.51 allows remote authenticated users to bypass intended access restrictions and read arbitrary files via a crafted URL, aka Bug ID CSCus88380...
CVE-2015-6331
SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.51 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCus39887...
Sql injection
SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.51 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCus39887...
CVE-2015-6331
CVE-2015-6331 is a SQL injection vulnerability in the web framework of Cisco Prime Collaboration Assurance (PCA). The issue affects PCA 10.5.1.x before 10.5.1.58480, with an authenticated remote attacker able to inject or manipulate SQL via input used in backend queries, potentially exposing or m...
PT-2015-7185
Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance version 10.51 Description A SQL injection issue in the web framework allows remote authenticated users to execute arbitrary SQL commands. Recommendations For Cisco Prime Collaboration Assurance version 10.51...
CVE-2015-6331: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.51 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCus39887...
Cisco Prime Collaboration Assurance File Viewing Vulnerability
Cisco Prime is a service-centric solution that integrates the management of wired and wireless LANs, WANs and data centers from endpoints, network devices and applications, and filters information. A security vulnerability in the Cisco Prime Collaboration Assurance WEB architecture allows remote...
Cisco Prime Collaboration Assurance SQL Injection Vulnerability
Cisco Prime is a service-centric solution that integrates the management of wired and wireless LANs, WANs and data centers from endpoints, network devices and applications, and filters information. A SQL injection vulnerability exists in the Cisco Prime Collaboration Assurance WEB architecture,...
Cisco Prime Collaboration Assurance Arbitrary File Retrieval Vulnerability
A vulnerability in the web framework of Cisco Prime Collaboration Assurance PCA could allow an authenticated, remote attacker to retrieve arbitrary files from the underlying file system. The vulnerability is due to incorrect implementation of the access control code. An attacker could exploit thi...
