Cisco Unified Communications Manager SQL Injection Vulnerability

A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries. The attacker must be authenticated as an administrative user to execute SQL database queries. The...

The vulnerability of the Cisco Unified Communications Manager system allows attackers to carry out cross-site scripting attacks.

The vulnerability of the web-based application framework of the Cisco Unified Communications Manager exists due to the lack of protective measures taken for the structure of the web page. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Cisco Unified Communications Manager system allows a perpetrator to compromise data integrity.

The vulnerability of the web interface of the Cisco Unified Communications Manager web application is related to the falsification of cross-site requests. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

(Pwn2Own) VMware Workstation Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2016-5857

The Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code within the context of the kernel via a crafted application, aka Android internal bug 34386529 and Qualcomm internal bug CR1094140...

AXIS Communication Cross-Site Scripting Vulnerability

AXIS Communications is a webcam. AXIS Communications suffers from a cross-site scripting vulnerability that could be exploited by an attacker to inject arbitrary web script or HTML...

Cross site scripting

A vulnerability in the web framework of Cisco Unified Communications Manager CallManager could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack. More Information: CSCvb70033. Known Affected Releases: 11.51.11007.2. Known Fixed Releases: 12.00.98000.507...

CVE-2017-3872

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of an affected device. More Information: CSCvc21620. Known Affected Releases:...

CVE-2017-3874

A vulnerability in the web framework of Cisco Unified Communications Manager CallManager could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack. More Information: CSCvb70033. Known Affected Releases: 11.51.11007.2. Known Fixed Releases: 12.00.98000.507...

CVE-2017-3877

A vulnerability in the web framework of Cisco Unified Communications Manager CallManager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against a user of the web interface of the affected software. More Information: CSCvb70021. Known Affected...

Cross site request forgery (csrf)

A vulnerability in the web framework of Cisco Unified Communications Manager CallManager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against a user of the web interface of the affected software. More Information: CSCvb70021. Known Affected...

CVE-2017-3877

A vulnerability in the web framework of Cisco Unified Communications Manager CallManager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against a user of the web interface of the affected software. More Information: CSCvb70021. Known Affected...

Cross site scripting

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of an affected device. More Information: CSCvc21620. Known Affected Releases:...

CVE-2017-3874

The CVE-2017-3874 issue affects Cisco Unified Communications Manager (CUCM) web framework. An authenticated, remote attacker can exploit insufficient validation in the CUCM User Options portal to perform a cross-site scripting (XSS) attack. Affected release: 11.5(1.11007.2). Fixed in: 12.0(0.9800...

CVE-2017-3874

A vulnerability in the web framework of Cisco Unified Communications Manager CallManager could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack. More Information: CSCvb70033. Known Affected Releases: 11.51.11007.2. Known Fixed Releases: 12.00.98000.507...

CVE-2017-3872

CVE-2017-3872 affects the Cisco Unified Communications Manager web-based management interface. The issue is an XSS filter bypass in the UI that allows an unauthenticated, remote attacker to conduct XSS attacks against a user of an affected device. Affected release: 10.5(2.14076.1). Fixed in: 12.0...

CVE-2017-3877

CVE-2017-3877 concerns Cisco Unified Communications Manager (CallManager) CSRF vulnerability in the web framework. An unauthenticated remote attacker could induce a user to perform arbitrary actions in the affected web interface due to insufficient CSRF protections (CSCvb70021). Affected release ...

CVE-2017-3877

A vulnerability in the web framework of Cisco Unified Communications Manager CallManager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against a user of the web interface of the affected software. More Information: CSCvb70021. Known Affected...

CVE-2017-3872

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of an affected device. More Information: CSCvc21620. Known Affected Releases:...

CVE-2017-0129

Microsoft Lync for Mac 2011 fails to properly validate certificates, allowing remote attackers to alter server-client communications, aka "Microsoft Lync for Mac Certificate Validation Vulnerability."...