PT-2017-17209

Name of the Vulnerable Software and Affected Versions Cisco Remote Expert Manager Software version 11.0.0 Description A vulnerability in the web interface could allow an unauthenticated, remote attacker to access sensitive Virtual Directory information. The issue exists because the software does...

Cisco Prime Collaboration Provisioning < 12.1 Multiple Vulnerabilities (cisco-sa-20170517-pcp1 - cisco-sa-20170517-pcp3)

According to its self-reported version number, the remote Cisco Prime Collaboration Provisioning server is 9.x, 10.x, 11.x, or 12.x prior to 12.1. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the web interface when handling HTTP...

PT-2017-17210

Name of the Vulnerable Software and Affected Versions Cisco Remote Expert Manager Software version 11.0.0 Description A vulnerability in the web interface could allow an unauthenticated, remote attacker to access sensitive information on an affected system. This issue exists because the software...

PT-2017-17205

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning Software versions prior to 11.1 Description The issue allows an authenticated, remote attacker to view any file on an affected system due to improper input validation of HTTP requests and the failure to...

PT-2017-17208

Name of the Vulnerable Software and Affected Versions Cisco Remote Expert Manager Software version 11.0.0 Description A vulnerability in the web interface could allow an unauthenticated, remote attacker to access sensitive information on an affected system. This issue exists because the software...

PT-2017-17213

Name of the Vulnerable Software and Affected Versions Cisco Remote Expert Manager Software version 11.0.0 Description A vulnerability in the web interface could allow an unauthenticated, remote attacker to access sensitive Temporary File information on an affected system. This issue exists becaus...

PT-2017-17211

Name of the Vulnerable Software and Affected Versions Cisco Remote Expert Manager Software version 11.0.0 Description A vulnerability in the web interface could allow an unauthenticated, remote attacker to access sensitive Virtual Temporary Directory information. The issue exists because the...

PT-2017-17212

Name of the Vulnerable Software and Affected Versions Cisco Remote Expert Manager Software version 11.0.0 Description A vulnerability in the web interface could allow an unauthenticated, remote attacker to access sensitive Order information on an affected system. This issue exists because the...

Disk Pulse Enterprise Server HttpParser Buffer Overflow

A buffer overflow vulnerability has been reported in the web server component of Disk Pulse Enterprise Server. The vulnerability is due to a failure on part of the application to implement proper bounds checking on components found in HTTP requests. A remote, unauthenticated attacker could exploi...

CVE-2017-4014

CVE-2017-4014 affects McAfee Network Data Loss Prevention (NDLP) 9.3.x. The vulnerability is described as a session-side hijack in the server, allowing remote authenticated users to view, add, and remove users by modifying HTTP requests. Affected component is the server implementation of NDLP 9.3...

Cisco Remote Expert Manager Order Information Disclosure Vulnerability

A vulnerability in the web interface of Cisco Remote Expert Manager Software could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when responding t...

Cisco Prime Collaboration Provisioning Directory Traversal Arbitrary File Deletion Vulnerability

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software could allow an authenticated, remote attacker to delete any file from an affected system. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests and...

Cisco Remote Expert Manager Temporary File Information Disclosure Vulnerability

A vulnerability in the web interface of Cisco Remote Expert Manager Software could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when responding t...

Cisco Remote Expert Manager Virtual Directory Information Disclosure Vulnerability

A vulnerability in the web interface of Cisco Remote Expert Manager Software could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when responding t...

I_ Librarian 4.6/4.7 - Command Injection / Server Side Request Forgery / Directory Enumeration / Cross-Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: I, Librarian PDF manager vulnerable version: =4.6 & 4.7 fixed version: 4.8 CVE number: - impact: Critical homepage:...

CVE-2016-9692

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to...

Input validation

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to...

CVE-2016-9692

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to...

CVE-2016-9692

The CVE affects IBM WebSphere Cast Iron Solution versions 7.0.0 and 7.5.0.0, where improper validation of user-supplied input enables External Service Interaction. An attacker can induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names, potentially cau...

CVE-2016-9692: Improper Input Validation

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to...