Cisco Unified Communications Domain Manager Blind SQL Injection Vulnerability

A vulnerability in the web framework of Cisco Unified Communications Domain Manager could allow an authenticated, remote attacker to impact the integrity and availability of the affected system by executing arbitrary SQL queries. The vulnerability is due to a failure to validate user-supplied inp...

USN-1985-1: Python 3.3 vulnerabilities

Florian Weimer discovered that Python incorrectly handled matching multiple wildcards in ssl certificate hostnames. An attacker could exploit this to cause Python to consume resources, resulting in a denial of service. CVE-2013-2099 Ryan Sleevi discovered that Python did not properly handle...

Cisco Unity Connection Version

Cisco Unity Connection was found. TRUSTED...

Cisco Unified Communications Manager Multiple DoS Vulnerabilities (cisco-sa-20130227-cucm)

According to its self-reported version, the remote Cisco Unified Communications Manager CUCM device is affected by one of the following denial of service vulnerabilities : - A flaw exists in the in the 8.6 branch due to improper processing of malformed packets to unused UDP ports. A remote,...

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : pyopenssl vulnerability (USN-1965-1)

It was discovered that pyOpenSSL did not properly handle certificates with NULL characters in the Subject Alternative Name field. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Note that Tenable Network Securit...

Ubuntu: Security Advisory (USN-1965-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco Unified Communications Manager Remote Buffer Overflow (CSCud54358)

According to its self-reported version, the remote Cisco Unified Communications Manager CUCM device is affected by a remote buffer overflow vulnerability that allows an authenticated, remote attacker to corrupt data, disrupt services, or execute arbitrary commands. %NASLMINLEVEL 70300 C Tenable...

Cisco Unified Communications Manager UDP Memory Leak DoS (CSCub85597)

According to its self-reported version, the remote Cisco Unified Communications Manager CUCM device insufficiently limits the rate of traffic on certain UDP ports, allowing a remote attacker to cause a denial of service condition by sending UDP packets at a high rate. %NASLMINLEVEL 70300 C Tenabl...

Cisco Unified Communications Manager (CUCM) Web Detection

The web interface for Cisco Unified Communications Manager CUCM was detected. Note: This plugin does not report anything. It only collects version information to be used downstream. C Tenable, Inc. include'compat.inc'; if description scriptid70088; scriptversion"1.9";...

Cisco Unified Communications Manager SIP DoS (CSCub85597)

According to its self-reported version, the remote Cisco Unified Communications Manager CUCM device insufficiently limits the rate of traffic on the session initiation protocol SIP port, allowing an attacker to cause a denial of service condition by sending UDP packets at high rates to that port...

Cisco Unified Communications Manager Registration Messages DoS (CSCuf93466)

According to its self-reported version, the remote Cisco Unified Communications Manager CUCM device improperly handles registration messages, allowing an unauthenticated, remote attacker to cause a denial of service condition. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

USN-1965-1: pyOpenSSL vulnerability

It was discovered that pyOpenSSL did not properly handle certificates with NULL characters in the Subject Alternative Name field. An attacker could exploit this to perform a machine-in-the-middle attack to view sensitive information or alter encrypted communications...

IBM Lotus Sametime Connect Client Installed

IBM Lotus Sametime Connect Client, a communications client application, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70071; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

FISC: No Phone Company Ever Challenged Metadata Collection Orders

A newly declassified opinion from the Foreign Intelligence Surveillance Court from this summer shows the court’s interpretation of the controversial Section 215 of the USA PATRIOT Act that’s used to justify the National Security Agency’s bulk telephone metadata collections, and reveals that none ...

Cooper Power Systems Improper Input Validation Vulnerability

OVERVIEW Adam Crain of Automatak and independent researcher Chris Sistrunk have identified an improper input validation vulnerability in the Cooper Power Systems SMP Gateway DNP3 protocol components. Cooper Power Systems has produced a new firmware version that mitigates this vulnerability. Coope...

Frequently Unanswered Questions on the NSA Leaks

The flood of documents regarding the NSA’s collection methods and capabilities that have been leaked this summer has produced thousands of news stories and several metric tons of speculation about what it all means. But for all of the postulating, analysis and reporting, there are still a lot of...

Vestel TV 42pf9322 - Denial of Service

!/usr/bin/python Exploit Title: Vestel TV Denial of Service DoS Attack Exploit Author: HackerSofi - [email protected] Date: 12/09/2013 CVE Number: Vendor Homepage: http://www.vestel.com/ Description: Some TV's Has Communication Port. Vestel 42pf9322 Models TV Using Port 0f 111 For Network...

Vestel TV Denial Of Service

!/usr/bin/python Exploit Title: Vestel TV Denial of Service DoS Attack Exploit Author: HackerSofi - [email protected] Date: 12/09/2013 CVE Number: Vendor Homepage: http://www.vestel.com/ Description: Some TV's Has Communication Port. Vestel 42pf9322 Models TV Using Port 0f 111 For Network...

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : php5 vulnerability (USN-1937-1)

It was discovered that PHP did not properly handle certificates with NULL characters in the Subject Alternative Name field. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Note that Tenable Network Security has...

Description of the cumulative update for Lync Server 2010, Unified Communications Managed API 3.0 Runtime: April 2011

Describes the cumulative update for Lync Server 2010, Unified Communications Managed API 3.0 Runtime that is dated April 2011.SummaryThis article describes the Microsoft Lync Server 2010, Unified Communications Managed API 3.0 Runtime issue that is fixed in the cumulative update for Lync Server...