EUVD-2015-0626

Malware in sbrugna...

EUVD-2012-3038

Malware in sbrugna...

EUVD-2016-2476

Malware in sbrugna...

EUVD-2016-2409

Malware in sbrugna...

EUVD-2012-0402

Malware in sbrugna...

EUVD-2012-3074

Malware in sbrugna...

EUVD-2018-7274

Malware in sbrugna...

EUVD-2015-6332

Malware in sbrugna...

EUVD-2018-7304

Malware in sbrugna...

EUVD-2015-6241

Malware in sbrugna...

EUVD-2024-18020

Malicious code in bioql PyPI...

EUVD-2024-17987

Malicious code in bioql PyPI...

Cisco Unity Connection Privilege Escalation (cisco-sa-cucm-kkhZbHR5)

According to its self-reported version, Cisco Unity Connection is affected by privilege escalation vulnerability. - A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an...

CVE-2024-20305

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly valida...

CVE-2013-1129

Memory leak in Cisco Unity Connection 9.x allows remote attackers to cause a denial of service memory consumption and process crash by sending many TCP requests, aka Bug ID CSCud59736...

CVE-2012-0366

Cisco Unity Connection before 7.1.3bSu2 allows remote authenticated users to change the administrative password by leveraging the Help Desk Administrator role, aka Bug ID CSCtd45141...

CVE-2012-0367

Cisco Unity Connection before 7.1.5bSu5, 8.0 and 8.5 before 8.5.1Su3, and 8.6 before 8.6.2 allows remote attackers to cause a denial of service services crash via a series of crafted TCP segments, aka Bug ID CSCtq67899...

CVE-2024-20272

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system and execute commands on the underlying operating system. This vulnerability is due to a lack of authentication in a...

Cisco Unity Connection Cross-Site Scripting Vulnerability (CNVD-2024-10470)

Cisco Unity Connection UC is a set of voice messaging platforms from the U.S. company Cisco Cisco. The platform can use voice commands to make calls or listen to messages hands-free. Cisco Unity Connection suffers from a cross-site scripting vulnerability that stems from the web-based...

The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the web interface for managing the Cisco Unity Connection integrated messaging system is related to the lack of protective measures taken for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...