7007 matches found
Microsoft Outlook CVE-2013-3905 Information Disclosure Vulnerability
Description Microsoft Outlook is prone to an information-disclosure vulnerability. Attackers can exploit this issue to gain access to potentially sensitive information that may aid in further attacks. Technologies Affected Microsoft Outlook 2007 Service Pack 3 Microsoft Outlook 2010 32-bit editio...
CVE-2013-5555
Cisco Unified Communications Manager aka CUCM or Unified CM allows remote attackers to cause a denial of service service restart via a crafted SIP message, aka Bug ID CSCub54349...
Code injection
Cisco Unified Communications Manager aka CUCM or Unified CM allows remote attackers to cause a denial of service service restart via a crafted SIP message, aka Bug ID CSCub54349...
CVE-2013-5555
Cisco Unified Communications Manager aka CUCM or Unified CM allows remote attackers to cause a denial of service service restart via a crafted SIP message, aka Bug ID CSCub54349...
CVE-2013-5555
Cisco Unified Communications Manager (CUCM) is affected by a DoS vulnerability caused by improper parsing of a crafted SIP message (Bug ID CSCub54349). An unauthenticated, remote attacker can trigger a service restart. Multiple connected sources confirm the issue and Cisco has released an advisor...
CVE-2013-5555
Cisco Unified Communications Manager aka CUCM or Unified CM allows remote attackers to cause a denial of service service restart via a crafted SIP message, aka Bug ID CSCub54349...
Cisco Unified Communications Manager Denial of Service Vulnerability
A vulnerability in Cisco Unified Communications Manager Unified CM could allow an unauthenticated, remote attacker to create a denial of service DoS condition. The vulnerability is due to improper parsing of a SIP message. An attacker could exploit this vulnerability by sending a specific SIP...
Panda AdminSecure Communications Agent < 4.50.0.10 Directory Traversal
The Panda AdminSecure Communications Agent software, which is used for centralized management of Panda Antivirus, installed on the remote Windows host contains a flaw in the handling of MESSAGEFROMREMOTE messages. The software does not properly sanitize inputs, allowing an attacker to craft a...
PANDA Security Communications Agent Service Pagent.exe 'MESSAGE_FROM_REMOTE' Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of PANDA Security for Business Communications. Authentication is not required to exploit this vulnerability. The specific flaw exists within the 'Panda AdminSecure Communications Agent' Pagent.exe whi...
IBM DB2 10.1 < Fix Pack 3 Multiple Vulnerabilities (credentialed check)
According to its version, the installation of IBM DB2 10.1 on the remote host is affected by the following vulnerabilities : - When a multi-node configuration is used, an error exists in the Fast Communications Manager FCM that could allow denial of service attacks. CVE-2013-4032 / IC94434 - An...
D-Link PLANEX COMMUNICATIONS - RuntimeDiagnosticPing() Remote Stack Buffer Overflow
D-Link PLANEX COMMUNICATIONS - RuntimeDiagnosticPing Remote Stack Buffer Overflow source: https://www.securityfocus.com/bid/63234/info Multiple Vendors are prone to a stack-based buffer-overflow vulnerability. Exploiting this vulnerability may allow attackers to execute arbitrary code in the...
Cisco Unified Communications Manager Administrative Web Interface Directory Traversal Vulnerability
A vulnerability in the administrative web interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to obtain the contents of arbitrary files on an affected device. The vulnerability is due to a failure to properly sanitize user-supplied input passed to a...
Directory traversal
Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815...
CVE-2013-5528
Cisco UC Manager 7/8/9 contains a directory traversal vulnerability in the Tomcat-based Administrative Web Interface (CVE-2013-5528; Bug CSCui78815). The issue allows remote authenticated users to read arbitrary files by constructing directory traversal sequences in an input parameter. Affected p...
CVE-2013-5528
Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815...
Sql injection
SQL injection vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuh96567...
CVE-2013-5517
Cisco Unified Communications Domain Manager’s web framework is affected by a SQL injection via a crafted URL. The root cause is failure to validate user-supplied input in SQL queries, allowing an authenticated, remote attacker to execute arbitrary SQL commands and potentially modify or delete dat...
CVE-2013-5517
SQL injection vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuh96567...
Ubuntu 12.10 / 13.04 : python3.3 vulnerabilities (USN-1985-1)
Florian Weimer discovered that Python incorrectly handled matching multiple wildcards in ssl certificate hostnames. An attacker could exploit this to cause Python to consume resources, resulting in a denial of service. CVE-2013-2099 Ryan Sleevi discovered that Python did not properly handle...
Ubuntu 10.04 LTS : python2.6 vulnerability (USN-1982-1)
Ryan Sleevi discovered that Python did not properly handle certificates with NULL characters in the Subject Alternative Name field. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Note that Tenable Network...