EUVD-2019-10435

Malware in sbrugna...

EUVD-2010-0673

Malware in sbrugna...

EUVD-2010-0672

Malware in sbrugna...

EUVD-2004-0649

Malware in sbrugna...

Cisco Customer Collaboration Platform Disclosure

The vulnerability of the web interface of the software for monitoring social networks on the Cisco Customer Collaboration Platform formerly Cisco SocialMiner is related to errors in information processing. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

Cisco and Wiz Help Customers Modernize Cybersecurity

Enhanced collaboration deepens cloud security capabilities, democratizes security across cloud businesses...

Security Bulletin: Multiple vulnerabilities in Apache Commons Collections affect IBM InfoSphere Information Server

Summary Multiple vulnerabilities in Apache Commons Collections used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2015-4852 DESCRIPTION: The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers t...

Security Bulletin: IBM Jazz for Service Management (JazzSM) is affected with multiple vulnerabilities (CVE-2015-4852, CVE-2015-6420, CVE-2017-15708)

Summary Jazz for Service Management is affected with multiple vulnerabilities CVE-2015-4852, CVE-2015-6420, CVE-2017-15708 Vulnerability Details CVEID: CVE-2017-15708 DESCRIPTION: In Apache Synapse, by default no authentication is required for Java Remote Method Invocation RMI. So Apache Synapse...

PT-2020-1740

Name of the Vulnerable Software and Affected Versions Cisco Intelligent Proximity solution affected versions not specified Cisco Webex video devices affected versions not specified Cisco collaboration endpoints affected versions not specified Description A vulnerability in the SSL implementation...

CVE-2020-3155: Improper Certificate Validation

A vulnerability in the SSL implementation of the Cisco Intelligent Proximity solution could allow an unauthenticated, remote attacker to view or alter information shared on Cisco Webex video devices and Cisco collaboration endpoints if the products meet the conditions described in the Vulnerable...

Cisco Emergency Responder Denial of Service (cisco-sa-20171115-vos)

According to its self-reported version, the Cisco Emergency Responder CER is affected by an unauthorized access vulnerability. The vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated,...

SQL Injection Vulnerability in Cisco Collaboration OA Office Software

Cisco collaborative OA office software system is a collaborative OA office software developed by Guangdong Cisco Technology Co. SQL injection vulnerability exists in Cisco Collaborative OA Office Software, which can be exploited by attackers to obtain database information...

CVE-2019-1878: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the Cisco Discovery Protocol CDP implementation for the Cisco TelePresence Codec TC and Collaboration Endpoint CE Software could allow an unauthenticated, adjacent attacker to inject arbitrary shell commands that are executed by the device. The vulnerability is due to...

PT-2019-2438

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Codec TC and Collaboration Endpoint CE Software affected versions not specified Description A vulnerability in the Cisco Discovery Protocol CDP implementation could allow an unauthenticated, adjacent attacker to inject...

Cisco WebEx Meetings Desktop App Software Update Service Command Execution

The vulnerability of the software update service for Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows operating systems is related to the improper handling of special elements used in the operating system’s command line. Exploiting this vulnerability can allow an attacker...

CVE-2017-6779

Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability occu...

CVE-2017-6779

CVE-2017-6779 affects multiple Cisco VOS-based products (Emergency Responder, Finesse, UCM family, Unity Connection, UIC, SME, UCCx, MediaSense, Prime products, and related). Root cause: system log file has no maximum size limit, enabling an unauthenticated, remote attacker to cause high disk uti...

PT-2018-8346

Name of the Vulnerable Software and Affected Versions Cisco Voice Operating System VOS-based products versions affected versions not specified Cisco Emergency Responder versions affected versions not specified Cisco Finesse versions affected versions not specified Cisco Hosted Collaboration...

CVE-2017-12337: Improper Authentication

A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote attacker to gain unauthorized, elevated access to an affected device. The vulnerability occurs when a refresh upgrade RU or...

PT-2017-3275 · Cisco · Cisco Voice Operating System

Name of the Vulnerable Software and Affected Versions: Cisco collaboration products based on the Cisco Voice Operating System software platform affected versions not specified Description: A vulnerability in the upgrade mechanism of Cisco collaboration products could allow an unauthenticated,...