4464 matches found
Microsoft Intelligent Security Association welcomes members of the Microsoft Virus Initiative
As we head into our annual partner conference, Microsoft Inspire, I’m excited to make a major announcement! The Microsoft Virus Initiative MVI is formally joining the Microsoft Intelligent Security Association MISA. For more than 20 years, Microsoft and our antimalware partners have collaborated...
SQL Injection Vulnerability in Cisco Collaboration OA Office Software
Cisco collaborative OA office software system is a collaborative OA office software developed by Guangdong Cisco Technology Co. SQL injection vulnerability exists in Cisco Collaborative OA Office Software, which can be exploited by attackers to obtain database information...
Cisco TelePresence Codec and Collaboration Endpoint Software Operating System Command Injection Vulnerability
Cisco TelePresence Integrator C Series and so on are the products of the United States Cisco Cisco company.Cisco TelePresence Integrator C Series is a set of C series telepresence system.Cisco TelePresence EX Series is a set of EX series telepresence system.Cisco TelePresence SX Series is a set o...
Enhancing Customer Value, Building Customer Relationships and Strengthening Team Collaboration
Effective communication skills are fundamental to developing both immediate and long term relationships with our customers. How else can we learn the answers to questions such as: "What are our customers concerns, needs, and desires?", "How can we best address their short and long term needs?", A...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Collaboration and Deployment Services
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version, JRE71SR4FP15, JRE8SR5FP5, JRE8SR5FP20 and JRE8SR5FP25 used by Collaboration and Deployment Services. These issues were disclosed as part of the IBM Java SDK updates in April 2019 and January 2019. Vulnerability...
The vulnerability of the Cisco Discovery Protocol implementation in microprogramming software for Cisco TelePresence Codec (TC) and Cisco Collaboration Endpoint (CE) devices arises due to insufficient validation of input data. This allows attackers to execute arbitrary commands or carry out arbitrary scripts.
The vulnerability of the Cisco Discovery Protocol implementation in microprogramming software for Cisco TelePresence Codec TC and Cisco Collaboration Endpoint CE software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitra...
Remote Command Execution Vulnerability in Zhiyuan A8+ Collaboration Management Software
Zhiyuan Internet is a provider of collaboration management software and cloud services in China, specializing in the field of collaboration management software. A remote command execution vulnerability exists in Zhiyuan A8+ collaboration management software. An attacker can Getshell the target...
MozDef - Mozilla Enterprise Defense Platform
The inspiration for MozDef comes from the large arsenal of tools available to attackers. Suites like metasploit, armitage, lair, dradis and others are readily available to help attackers coordinate, share intelligence and finely tune their attacks in real time. Defenders are usually limited to...
Unauthorized Access Vulnerability in Zhiyuan Collaboration Management Software
Zhiyuan Collaboration Management Software is a set of collaborative office management software. An unauthorized access vulnerability exists in Zhiyuan Collaboration Management Software, which can be exploited by attackers to obtain sensitive information...
CVE-2019-1878
A vulnerability in the Cisco Discovery Protocol CDP implementation for the Cisco TelePresence Codec TC and Collaboration Endpoint CE Software could allow an unauthenticated, adjacent attacker to inject arbitrary shell commands that are executed by the device. The vulnerability is due to...
Input validation
A vulnerability in the Cisco Discovery Protocol CDP implementation for the Cisco TelePresence Codec TC and Collaboration Endpoint CE Software could allow an unauthenticated, adjacent attacker to inject arbitrary shell commands that are executed by the device. The vulnerability is due to...
CVE-2019-1878
CVE-2019-1878 describes a shell-injection vulnerability in the Cisco TelePresence Codec (TC) and Collaboration Endpoint (CE) software via the Cisco Discovery Protocol (CDP). The root cause is insufficient input validation of CDP packets, enabling an unauthenticated, adjacent attacker to craft CDP...
Zimbra Collaboration Suite ProxyServlet Server Side Request Forgery
Added: 06/06/2019 CVE: CVE-2019-9621 Background Zimbra Collaboration Suite is an email, calendar, and collaboration solution for enterprises. Problem The ProxyServlet component allows a remote attacker to upload arbitrary files, which can then be executed, using XML External Entity injection and...
Zimbra Collaboration Suite ProxyServlet Server Side Request Forgery
Added: 06/06/2019 CVE: CVE-2019-9621 Background Zimbra Collaboration Suite is an email, calendar, and collaboration solution for enterprises. Problem The ProxyServlet component allows a remote attacker to upload arbitrary files, which can then be executed, using XML External Entity injection and...
Zimbra Collaboration Suite ProxyServlet Server Side Request Forgery
Added: 06/06/2019 CVE: CVE-2019-9621 Background Zimbra Collaboration Suite is an email, calendar, and collaboration solution for enterprises. Problem The ProxyServlet component allows a remote attacker to upload arbitrary files, which can then be executed, using XML External Entity injection and...
Weak Password Vulnerability in Zhiyuan Internet Collaboration Office OA System
The Zhiyuan Internet collaborative office OA system is a set of collaborative office management software. A weak password vulnerability exists in the Zhiyuan Internetwork OA system, which can be exploited by attackers to obtain sensitive information...
Design/Logic Flaw
Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console...
CVE-2015-2230
Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console...
CVE-2015-2230
CVE-2015-2230 affects Synacor Zimbra Collaboration Server 8.x prior to 8.7.0, where the admin console is vulnerable to a reflected cross‑site scripting (XSS) flaw. The issue arises from improper handling of user-supplied input in the admin console, allowing an attacker to execute client-side scri...
