CVE-2010-5288

Buffer overflow in the lsConnectionCached function in editcp in EDItran Communications Platform 4.1 R7 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted packet to TCP port 7777...

CVE-2012-0376

The voice-sipstack component in Cisco Unified Communications Manager CUCM 8.5 allows remote attackers to cause a denial of service core dump via vectors involving SIP messages that arrive after an upgrade, aka Bug ID CSCtj87367...

CVE-2013-3451

Multiple cross-site request forgery CSRF vulnerabilities in Cisco Unified Communications Manager Unified CM allow remote attackers to hijack the authentication of arbitrary users for requests that perform arbitrary Unified CM operations, aka Bug ID CSCui13033...

CVE-2013-3453

Memory leak in Cisco Unified Communications Manager IM and Presence Service before 8.65SU1 and 9.x before 9.12, and Cisco Unified Presence, allows remote attackers to cause a denial of service memory and CPU consumption by making many TCP connections to port 1 5060 or 2 5061, aka Bug ID CSCud8495...

CVE-2013-3450

Cross-site request forgery CSRF vulnerability in the User WebDialer page in Cisco Unified Communications Manager Unified CM allows remote attackers to hijack the authentication of arbitrary users for requests that dial calls, aka Bug ID CSCui13028...

CVE-2013-3442

The web portal in Cisco Unified Communications Manager Unified CM allows remote authenticated users to obtain sensitive stack-trace information via unspecified vectors that trigger a stack exception, aka Bug ID CSCug34854...

CVE-2013-3418

Cisco Unified Communications Domain Manager does not properly allocate memory for GET and POST requests, which allows remote authenticated users to cause a denial of service memory consumption and process crash via crafted requests to the management interface, aka Bug ID CSCud22922...

CVE-2015-2968

LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM man-in-the-middle attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM man-in-the-middle attacker...

CVE-2015-0897

LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM man-in-the-middle attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM man-in-the-middle attacker...

CVE-2013-1134

The Location Bandwidth Manager LBM Intracluster-communication feature in Cisco Unified Communications Manager CUCM 9.x before 9.11 does not require authentication from the remote LBM Hub node, which allows remote attackers to conduct cache-poisoning attacks against transaction records, and cause ...

CVE-2013-1133

Cisco Unified Communications Manager CUCM 8.6 before 8.62asu2, 8.6 BE3k before 8.64 BE3k, and 9.x before 9.01 allows remote attackers to cause a denial of service CPU consumption and GUI and voice outages via malformed packets to unused UDP ports, aka Bug ID CSCtx43337...

CVE-2004-2629

Multiple vulnerabilities in the H.323 protocol implementation for First Virtual Communications Click to Meet Express when used with H.323 conferencing endpoints, Click to Meet Premier, Conference Server, and V-Gate allow remote attackers to cause a denial of service, as demonstrated by the...

CVE-2008-1114

Vocera Communications wireless handsets, when using Protected Extensible Authentication Protocol PEAP, do not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle MITM attacks...

CVE-2025-20112 Cisco Unified Communications Products Privilege Escalation Vulnerability

A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to excessive permissions that have been assigned to system commands. An attack...

CVE-2025-20112

CVE-2025-20112 affects multiple Cisco Unified Communications and Contact Center Solutions. Affected component/impact: privilege escalation to root on the device via exploitation of excessive permissions on system commands, leading to escape from restricted shell. Exploitation requires local, auth...

CVE-2025-20112 Cisco Unified Communications Products Privilege Escalation Vulnerability

A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to excessive permissions that have been assigned to system commands. An attack...

[SECURITY] Fedora 42 Update: openssh-9.9p1-11.fc42

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

Cisco Unified Communications 安全漏洞

Cisco Unified Communications is an enterprise call control and session management platform from Cisco USA that connects people anywhere using any device. A security vulnerability exists in Cisco Unified Communications that stems from excessive system command privileges, which could lead to elevat...

PT-2025-22376 · Cisco +1 · Cisco Unified Communications/Contact Center Solutions +1

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications and Contact Center Solutions products affected versions not specified Description: A vulnerability in the system could allow an authenticated, local attacker to elevate privileges to root on an affected device. Th...

SQL Injection Vulnerability in NetDrive Unified Communication Platform of Beijing NetDrive Network Technology Co.

NetDrive Unified Communications Platform is a comprehensive communications platform designed to enhance users' communication efficiency and convenience and provide a unified communications environment. A SQL injection vulnerability exists in the NetDrive Unified Communications Platform of Beijing...