7007 matches found
CVE-2010-5288
Buffer overflow in the lsConnectionCached function in editcp in EDItran Communications Platform 4.1 R7 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted packet to TCP port 7777...
CVE-2010-5288
Buffer overflow in the lsConnectionCached function in editcp in EDItran Communications Platform 4.1 R7 allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted packet to TCP port 7777...
CVE-2010-5288
CVE-2010-5288 affects EDItran Communications Platform 4.1 R7. The vulnerability is a buffer overflow in the lsConnectionCached function within editcp. It can be triggered by a crafted TCP packet sent to port 7777, potentially causing a daemon crash (DoS) or enabling arbitrary code execution. All ...
CVE-2013-3397
Cross-site request forgery CSRF vulnerability in the Unified Serviceability component in Cisco Unified Communications Manager CUCM allows remote attackers to hijack the authentication of arbitrary users for requests that perform Unified Serviceability actions, aka Bug ID CSCuh10298...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Unified Serviceability component in Cisco Unified Communications Manager CUCM allows remote attackers to hijack the authentication of arbitrary users for requests that perform Unified Serviceability actions, aka Bug ID CSCuh10298...
CVE-2013-3397
Cisco CUCM Unified Serviceability CSRF vulnerability (CVE-2013-3397) arises from insufficient CSRF protections in the Unified Serviceability component. Remote attackers could hijack the authentication of arbitrary users to perform actions in the Unified Serviceability pages, potentially with the ...
CVE-2013-3397
Cross-site request forgery CSRF vulnerability in the Unified Serviceability component in Cisco Unified Communications Manager CUCM allows remote attackers to hijack the authentication of arbitrary users for requests that perform Unified Serviceability actions, aka Bug ID CSCuh10298...
Handling of Encryption, Tor Exposed in Leaked NSA Documents
New top-secret NSA documents released by the Guardian UK newspaper reveal that the United States’ top spy agency can retain encrypted communications for as long as it takes analysts to decrypt the secret messages—even if they’re collected by chance and without a warrant. In addition, the document...
WikiLeaks founder Julian Assange will not leave Ecuadorian Embassy in London
WikiLeaks founder Julian Assange says he will not leave the Ecuadorian Embassy after Ecuador's foreign minister has said its embassy in London will continue to provide political asylum to Julian Assange. He was staying in embassy for the past year to avoid extradition to Sweden. The Australian wi...
NSA collecting phone records of millions of US citizens daily
The National Security Agency is collecting telephone records for millions of Americans without informing the individuals involved. The shocking news has been revealed by 'Guardian' whose journalists had access to a "Top Secret" court order, signed by Judge Roger Vinson, issued in April against...
New Android malware forwards incoming messages to hacker
A new type of Android malware that can intercept text messages and forwarding to hackers is discovered by the Russian firm Doctor Web. This is a very serious threat to users, because using this malware attackers can easily get two factor authentication code of your Email or bank accounts. The...
Microsoft Lync 远程代码执行漏洞(CVE-2013-1302)(MS13-041)
BUGTRAQ ID: 59791 CVECAN ID: CVE-2013-1302 Microsoft Lync 新一代企业整合沟通平台（前身为 Communications Server），提供了一种全新的、直观的用户体验，跨越 PC、Web、手机等其他移动设备，将不同的沟通方式集成到一个平台之中。 当 Lync 控件尝试访问内存中已删除对象时，存在一个远程执行代码漏洞。通过诱使目标用户接受邀请,以在 Lync 或 Communicator 会话内启动特制内容，攻击者利用此漏洞可以获得与当前用户相同的用户权限。 0 Microsoft Lync 2010 厂商补丁： Microsof...
Authentication flaw
Cisco Unified Communications Manager CUCM does not properly limit the rate of authentication attempts, which allows remote attackers to cause a denial of service application slowdown via a series of requests, aka Bug ID CSCud39515...
Cisco Unified Communications Manager Authentication Denial of Service Vulnerability
A vulnerability in device authentication of Cisco Unified Communications Manager CUCM could allow an unauthenticated, remote attacker to impact application response. The vulnerability is due to incomplete throttling of authentication requests. An attacker could exploit this vulnerability by sendi...
MOXA Weak Entropy in DSA Keys Vulnerability
Overview Researcher Nadia Heninger of the University of California, San Diego, and researchers Zakir Durumeric, Eric Wustrow, and J. Alex Halderman of the University of Michigan identified an insufficient entropy vulnerability in MOXA OnCell Gateways. MOA produced and released a firmware upgrade ...
CVE-2013-1240
The command-line interface in Cisco Unified Communications Manager CUCM does not properly validate input, which allows local users to read arbitrary files via unspecified vectors, aka Bug ID CSCue25770...
Design/Logic Flaw
The command-line interface in Cisco Unified Communications Manager CUCM does not properly validate input, which allows local users to read arbitrary files via unspecified vectors, aka Bug ID CSCue25770...
CVE-2013-1240
The Cisco Unified Communications Manager (CUCM) CLI vulnerability arises from incomplete input validation in the command-line interface. It enables a local, authenticated attacker to read arbitrary files on the device by issuing a crafted command. The exploit requires local access; no public expl...
CVE-2013-1240
The command-line interface in Cisco Unified Communications Manager CUCM does not properly validate input, which allows local users to read arbitrary files via unspecified vectors, aka Bug ID CSCue25770...