Lucene search
+L

1715 matches found

NVD
NVD
added 2019/02/07 9:29 p.m.36 views

CVE-2019-1680

A vulnerability in Cisco Webex Business Suite could allow an unauthenticated, remote attacker to inject arbitrary text into a user's browser. The vulnerability is due to improper validation of input. An attacker could exploit this vulnerability by convincing a targeted user to view a malicious UR...

4.3CVSS4.8AI score0.01412EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2019/02/07 9:00 p.m.12 views

CVE-2019-1680 Cisco Webex Business Suite Content Injection Vulnerability

A vulnerability in Cisco Webex Business Suite could allow an unauthenticated, remote attacker to inject arbitrary text into a user's browser. The vulnerability is due to improper validation of input. An attacker could exploit this vulnerability by convincing a targeted user to view a malicious UR...

4.3CVSS7.1AI score0.01412EPSS
SaveExploits0References2
NVD
NVD
added 2019/02/07 7:29 p.m.28 views

CVE-2019-1677

A vulnerability in Cisco Webex Meetings for Android could allow an unauthenticated, local attacker to perform a cross-site scripting attack against the application. The vulnerability is due to insufficient validation of the application input parameters. An attacker could exploit this vulnerabilit...

5CVSS4.7AI score0.00392EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2019/02/07 7:00 p.m.12 views

CVE-2019-1677 Cisco Webex Meetings for Android Cross-Site Scripting Vulnerability

A vulnerability in Cisco Webex Meetings for Android could allow an unauthenticated, local attacker to perform a cross-site scripting attack against the application. The vulnerability is due to insufficient validation of the application input parameters. An attacker could exploit this vulnerabilit...

5CVSS6.1AI score0.00392EPSS
SaveExploits0References2
CVE
CVE
added 2019/02/07 7:00 p.m.64 views

CVE-2019-1677

Summary: CVE-2019-1677 is a cross-site scripting vulnerability in Cisco Webex Meetings for Android. An unauthenticated, local attacker could exploit insufficient validation of input parameters by sending a crafted intent, allowing script execution in the Webex app context. Affected versions: prio...

5CVSS4.7AI score0.00392EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2019/02/07 12:00 a.m.12 views

PT-2019-2945 · Cisco · Cisco Webex Network Recording Player +1

Name of the Vulnerable Software and Affected Versions: Cisco Webex Network Recording Player versions affected versions not specified Cisco Webex Player versions affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited by sending a...

9.3CVSS8.1AI score0.01508EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/02/07 12:00 a.m.11 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted ARF or...

7.8CVSS7.9AI score0.0148EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/02/07 12:00 a.m.11 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted ARF or...

7.8CVSS7.9AI score0.0148EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/02/07 12:00 a.m.17 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted ARF or WR...

7.8CVSS7.9AI score0.0148EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/02/07 12:00 a.m.10 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted ARF or...

7.8CVSS7.9AI score0.01431EPSS
SaveExploits0References3Affected Software3
Positive Technologies
Positive Technologies
added 2019/02/07 12:00 a.m.10 views

PT-2019-2946 · Cisco · Cisco Webex Network Recording Player +1

Name of the Vulnerable Software and Affected Versions: Cisco Webex Network Recording Player versions affected versions not specified Cisco Webex Player versions affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing a remote attacker to execute...

9.3CVSS8.1AI score0.01465EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/02/05 12:00 a.m.11 views

The vulnerability in the web interface of the Cisco WebEx Meetings Server software allows attackers to execute cross-site scripting attacks.

The vulnerability of the administration web interface of Cisco WebEx Meetings Server software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially crafted link...

6.4CVSS6AI score0.00918EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/05 12:00 a.m.11 views

The vulnerability of the Cisco Webex Teams collaboration software exists due to the lack of measures taken to neutralize special elements used in the operating system’s command sequence. This allows attackers to execute arbitrary commands.

The vulnerability of the Cisco Webex Teams collaboration software exists because measures are not taken to neutralize the special elements used in the operating system’s command sequence. Exploiting this vulnerability allows an attacker to execute arbitrary commands with privileges of the target...

7.8CVSS7.6AI score0.46891EPSS
SaveExploits3References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/05 12:00 a.m.9 views

The vulnerability of the MyWebex software component for Cisco WebEx Business Suite allows attackers to execute cross-site scripting attacks.

The vulnerability of the MyWebex software component for Cisco WebEx Business Suite exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

6.4CVSS6AI score0.01211EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2019/01/29 12:00 a.m.36 views

Cisco WebEx Network Recording Player ARF File Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7CVSS4.8AI score0.0148EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/25 12:00 a.m.39 views

Cisco Webex Teams Cisco Spark URI Handler Remote Command Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Webex Cisco Spark. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. There is an issue with the way the product handles URIs within...

8.8CVSS3.7AI score0.46891EPSS
SaveExploits3References1
Zero Day Initiative
Zero Day Initiative
added 2019/01/25 12:00 a.m.31 views

Cisco WebEx Network Recording Player ARF File Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS4.8AI score0.0148EPSS
SaveExploits0References1
Prion
Prion
added 2019/01/24 4:29 p.m.29 views

Cross site scripting

A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface of the affected software. The vulnerability is due to insufficient validation...

4.3CVSS5.9AI score0.00918EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2019/01/24 4:29 p.m.24 views

CVE-2019-1655

A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface of the affected software. The vulnerability is due to insufficient validation...

6.1CVSS6AI score0.00918EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2019/01/24 4:00 p.m.12 views

CVE-2019-1655 Cisco Webex Meetings Server Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface of the affected software. The vulnerability is due to insufficient validation...

6.1CVSS6.1AI score0.00918EPSS
SaveExploits0References2
Rows per page
Query Builder