6827 matches found
CVE-2014-2102
Cisco Unified Contact Center Express Unified CCX does not properly restrict the content of the CCMConfig page, which allows remote authenticated users to obtain sensitive information by examining this content, aka Bug ID CSCum95575...
CVE-2014-0745
Cross-site request forgery CSRF vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center Express Unified CCX allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCum95502...
CVE-2014-2102
Cisco Unified Contact Center Express (Unified CCX) CCMConfig page contains sensitive information that can be accessed by an authenticated, remote attacker. The issue arises from improper content restriction on CCMConfig, enabling information disclosure. Cisco advisories state no software updates ...
CVE-2014-0746
CVE-2014-0746 affects Cisco Unified Contact Center Express (Unified CCX) Disaster Recovery System (DRS). The issue is an information disclosure: extraneous fields on a DRS web page allow an authenticated, remote attacker to obtain sensitive device information. Root cause is inclusion of sensitive...
CVE-2014-0746
The disaster recovery system DRS in Cisco Unified Contact Center Express Unified CCX allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCum95536...
PT-2014-3808
Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express Unified CCX affected versions not specified Description A cross-site request forgery CSRF issue in the Unified Serviceability subsystem allows remote attackers to hijack the authentication of arbitrary user...
PT-2014-4484
Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express Unified CCX affected versions not specified Description The issue allows remote authenticated users to obtain sensitive information by examining the content of the CCMConfig page, due to improper restrictio...
PT-2014-3809
Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express Unified CCX affected versions not specified Description The issue in Cisco Unified Contact Center Express Unified CCX allows remote authenticated users to obtain sensitive information. This is due to the...
CVE-2014-0745: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Unified Serviceability subsystem in Cisco Unified Contact Center Express Unified CCX allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCum95502...
CVE-2014-0746: Exposure of Sensitive Information to an Unauthorized Actor
The disaster recovery system DRS in Cisco Unified Contact Center Express Unified CCX allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCum95536...
CVE-2014-2102: Undefined Security Weakness
Cisco Unified Contact Center Express Unified CCX does not properly restrict the content of the CCMConfig page, which allows remote authenticated users to obtain sensitive information by examining this content, aka Bug ID CSCum95575...
PT-2014-4196
Name of the Vulnerable Software and Affected Versions BlackBerry Enterprise Service 10 versions prior to 10.2.1 Universal Device Service version 6 Enterprise Server Express for Domino versions prior to 5.0.4 Enterprise Server Express for Exchange versions prior to 5.0.4 Enterprise Server for Domi...
CVE-2014-1467: Undefined Security Weakness
BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server Express for Domino through 5.0.4, Enterprise Server Express for Exchange through 5.0.4, Enterprise Server for Domino through 5.0.4 MR6, Enterprise Server for Exchange through 5.0.4 MR6, and Enterprise...
Apache Tomcat Manager Code Execution Exploit
This Metasploit module can be used to execute a payload on Apache Tomcat servers that have an exposed "manager" application. The payload is uploaded as a WAR archive containing a jsp application using a POST request against the /manager/html/upload component. NOTE: The compatible payload sets var...
NCH Software Express Burn Plus 4.68 - '.EBP' Project File Buffer Overflow
!/usr/local/bin/perl NCH Software Express Burn Plus 4.68 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.68 Summary: Express Burn is a program that allows you to create and copy many kinds of disc media, including...
NCH Software Express Burn Plus 4.68 (.EBP) Project File Buffer Overflow
Exploit for windows platform in category dos / poc !/usr/local/bin/perl NCH Software Express Burn Plus 4.68 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.68 Summary: Express Burn is a program that allows you to...
NCH Software Express Burn Plus 4.68 Buffer Overflow
NCH Software Express Burn Plus version 4.68 suffers from an EBP project file handling buffer overflow vulnerability. !/usr/local/bin/perl NCH Software Express Burn Plus 4.68 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected...
NCH Software Express Burn Plus 4.68 Buffer Overflow
!/usr/local/bin/perl NCH Software Express Burn Plus 4.68 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.68 Summary: Express Burn is a program that allows you to create and copy many kinds of disc media, including...
NCH Software Express Burn Plus 4.68缓冲区溢出漏洞
NCH Software是适用于Windows和Mac OS X的音频，视频，听写，商业和计算机实用软件的厂商。 该漏洞是由于项目文件处理时的边界错误引起的，当用户打开例如特制的.EBP文件时，导致一个unicode缓冲区溢出。成功利用此漏洞可能允许执行任意代码。 0 NCH Software Express Burn Plus 4.68 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.nchsoftware.com/ use Cwd; use LWP::Simple; print "\n...
NCH Software Express Burn Plus 4.68 EBP Project File Handling Buffer Overflow PoC
Summary Express Burn is a program that allows you to create and copy many kinds of disc media, including Audio audio CDs / .mp3 CDs, Video DVDs, and Data CDs / DVDs / Blu-ray. Description The vulnerability is caused due to a boundary error in the processing of a project file, which can be exploit...