Cisco Unified Communications Manager Web Applications Identity Management Subsystem Denial of Service Vulnerability

A vulnerability in the Identity Management subsystem used by the WebApplications of Cisco Unified Communications Manager Cisco UCM software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to invalid session requests. An attacker...

CVE-2015-4206

Cisco Unified Communications Manager UCM 8.0 through 8.6 allows remote attackers to bypass an XSS protection mechanism via a crafted parameter, aka Bug ID CSCuu15266...

CVE-2015-4206

Cisco Unified Communications Manager UCM 8.0 through 8.6 allows remote attackers to bypass an XSS protection mechanism via a crafted parameter, aka Bug ID CSCuu15266...

[SECURITY] Fedora 22 Update: openssl-1.0.1k-13.fc22

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

CVE-2015-6422

The self-service application in Cisco Unified Communications Domain Manager CUCDM 10.61 allows remote authenticated users to cause a denial of service subapplication outage via malformed requests, aka Bug ID CSCuu10981...

CVE-2015-6410

Cisco Unified Communications Manager’s Mobile and Remote Access (MRA) services contain an identity-validation flaw that allows remote attackers to spoof a user and bypass call-reception/ call-setup restrictions. Root cause: edge-device identity validation mishandling (Bug CSCuu97283). Affected pr...

CVE-2015-6422

The self-service application in Cisco Unified Communications Domain Manager CUCDM 10.61 allows remote authenticated users to cause a denial of service subapplication outage via malformed requests, aka Bug ID CSCuu10981...

CVE-2015-6422

The CVE-2015-6422 entry concerns Cisco Unified Communications Domain Manager (CUCDM) self-service application in version 10.6(1). The vulnerability arises from improper handling of malformed requests by the self-service component, allowing an authenticated remote user to cause a denial of service...

Cisco Unified Communications Domain Manager Denial of Service Vulnerability

A vulnerability in Cisco Unified Communications Domain Manager CUCDM could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of malformed requests by the self-service application on an affected CUCDM device. An...

LATENTBOT: Trace Me If You Can

FireEye Labs recently uncovered LATENTBOT, a new, highly obfuscated BOT that has been in the wild since mid-2013. It has managed to leave hardly any traces on the Internet, is capable of watching its victims without ever being noticed, and can even corrupt a hard disk, thus making a PC useless...

France will not Ban Public Wi-Fi Or Tor Network, Prime Minister Valls Confirms

Despite the French Ministry of Interior's demands, France will not ban the TOR anonymity network or Free public Wi-Fi as a way to help the law enforcement fight terrorism. French Prime Minister Manual Valls has gone on record saying that a ban on Free public Wi-Fi is "not a course of action...

Cisco Unified Communications Manager Mobile and Remote Access Services Identity Attack Vulnerability

A vulnerability in edge devices of the Cisco Unified Communications Manager using Mobile and Remote Access MRA services could allow an unauthenticated, remote attacker to perform an identity theft attack. The vulnerability is due to improper identity validation of the edge devices. An attacker...

Cisco Unity Connection cross-site scripting Vulnerability(CVE-2 0 1 5-6 3 9 0)-vulnerability warning-the black bar safety net

CVECAN ID: CVE-2 0 1 5-6 3 9 0 Cisco Unity Connection is a feature-rich voice mail platform, using Linux Unified Communicationsoperating system. Cisco Unity Connection 9.11.10the Management Interface cross-site scripting vulnerability, the remote attacker via a URL within the structure of the...

wireshark: GSM RLC/MAC dissector infinite loop (wnpa-sec-2015-25)

epan/dissectors/packet-gsmrlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...

Cisco Unified Communications Domain Manager Information Disclosure Vulnerability

Cisco Unified Communications Domain Manager is an enterprise-class IP telephony call-processing system from the American company Cisco Cisco. An information disclosure vulnerability exists in Cisco Unified Communications Domain Manager versions prior to 10.6. It allows a remote attacker to...

CVE-2015-6352

Cisco Unified Communications Domain Manager before 10.61 provides different error messages for pathname access attempts depending on whether the pathname exists, which allows remote attackers to map a filesystem via a series of requests, aka Bug ID CSCut67891...

CVE-2015-6352

Cisco Unified Communications Domain Manager before 10.61 provides different error messages for pathname access attempts depending on whether the pathname exists, which allows remote attackers to map a filesystem via a series of requests, aka Bug ID CSCut67891...

CVE-2015-6352

Cisco Unified Communications Domain Manager (UCD) before version 10.6(1) is affected by an information-disclosure vulnerability where error messages for pathname access differ depending on whether the path exists. This enables remote attackers to map the filesystem by issuing a sequence of reques...

Cisco Unified Communications Domain Manager URI Enumeration Vulnerability

A vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to map a file system structure. The vulnerability is due to different handling of existent and nonexistent paths. An attacker could exploit this vulnerability by enumerating all possible...

[USN-2769-1] Apache Commons HttpClient

========================================================================== Ubuntu Security Notice USN-2769-1 October 14, 2015 commons-httpclient vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its...