CVE-2016-1314

CVE-2016-1314 concerns Cisco Unified Communications Domain Manager (CDM) 8.1(1). A cross-site scripting (XSS) flaw allows an authenticated remote user to inject arbitrary web script or HTML via a crafted URL due to insufficient input validation. Multiple sources (NVD, CNVD, CVE list, Cisco adviso...

Cisco Unified Communications Domain Manager Cross-Site Scripting Vulnerability

A vulnerability in the Cisco Unified Communications Domain Manager Unified CDM could allow an authenticated, remote attacker to execute a cross-site scripting XSS attack. The vulnerability is due to insufficient input validation of user-supplied input. An attacker could exploit this vulnerability...

CVE-2016-1350

Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service device reload via malformed SIP messages, aka Bug ID CSCuj23293...

CVE-2016-1350

Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service device reload via malformed SIP messages, aka Bug ID CSCuj23293...

CVE-2016-1350

Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service device reload via malformed SIP messages, aka Bug ID CSCuj23293...

Cisco IOS and IOS XE and Cisco Unified Communications Manager Software Session Initiation Protocol Memory Leak Vulnerability

A vulnerability in the Session Initiation Protocol SIP gateway implementation in Cisco IOS, IOS XE, and Cisco Unified Communications Manager Software could allow an unauthenticated, remote attacker to cause a memory leak and eventual reload of an affected device. The vulnerability is due to...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in multiple products. Exploitation of these vulnerabilities could allow a remote attacker to create a denial-of-service condition. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply...

[SECURITY] Fedora 23 Update: openssh-7.2p2-1.fc23

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

[SECURITY] Fedora 22 Update: openssl-1.0.1k-14.fc22

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

The vulnerability of Oracle Communications Applications’ network management and organization software allows attackers to compromise the confidentiality of information.

The vulnerability of the Oracle Communications Convergence component of the Oracle Communications Applications software and network management suite is related to code errors. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of information through...

The vulnerability of the Cisco Unified Communications Manager system, a software solution for instant messaging, Unified Communications Manager IM and Presence Service, and Unified Contact Center Express, a software solution for automating operator operations, as well as the integrated Cisco Unity Connection messaging system, allows a violator to obtain confidential information.

The vulnerabilities of the Cisco Unified Communications Manager, a software solution for instant messaging, Unified Communications Manager IM and Presence Service, and Unified Contact Center Express, a software solution for automating operator operations, as well as the integrated Cisco Unity...

Cisco Unified Communications Domain Manager Cross-Site Scripting Vulnerability (CNVD-2016-01465)

Cisco Unified Communications Domain Manager CUCDM is the United States Cisco Cisco company developed a dedicated unified communications solutions in the call processing components. The component has scalable, distributable, highly available enterprise voice-over-IP call processing capabilities. A...

[SECURITY] Fedora 23 Update: openssl-1.0.2g-2.fc23

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

CVE-2016-1354

Cross-site scripting XSS vulnerability in Cisco Unified Communications Domain Manager UCDM 8.x before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCud41176...

CVE-2016-1354

CVE-2016-1354 affects Cisco Unified Communications Domain Manager (UCDM/UCDM) versions 8.x before 8.1.1. The vulnerability is a cross-site scripting (XSS) flaw in the web framework triggered by crafted markup data, due to insufficient input validation. Multiple sources (NVD, CVE listings, CNVD, C...

CVE-2016-1354

Cross-site scripting XSS vulnerability in Cisco Unified Communications Domain Manager UCDM 8.x before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCud41176...

Cisco Unified Communications Domain Manager Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Unified Communications Domain Manager UCDM Software could allow an unauthenticated, remote attacker to perform a cross-site scripting XSS attack. The vulnerability is due to insufficient input validation of user-submitted content. An attacker could...

The vulnerability of the Cisco Unified Communications Manager system allows a perpetrator to access information related to table names and database entities.

The vulnerability of the Cisco Unified Communications Manager IP-telephony management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to information about table names and database...

The vulnerability of the Cisco Unified Communications Manager system allows a perpetrator to execute arbitrary SQL commands.

The vulnerability of the Cisco Unified Communications Manager IP telephony management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using a specially crafted URL...

Malwarebytes Anti-Malware Elevation of Privilege Vulnerability

Malwarebytes Anti-Malware MBAM is a suite of anti-malware spyware from the American company Malwarebytes. The software supports the removal of worms, dial-up programs, Trojans, rootkits, spyware, exploits, bots, and other malware, among others. An elevation of privilege vulnerability exists in...