CVE-2013-1158

CVE-2013-1158 affects the IBM Tivoli Monitoring (ITM) help menus in Cisco Prime Central for Hosted Collaboration Solution. It describes a Cross-site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. The description does...

PT-2013-2928

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution affected versions not specified Description A cross-site scripting XSS issue exists in the OpenView web menus, allowing remote attackers to inject arbitrary web script or HTML via an...

PT-2013-2926

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution affected versions not specified Description A cross-site scripting XSS issue exists in the IBM Tivoli Monitoring ITM help menus, allowing remote attackers to inject arbitrary web script or...

PT-2013-2927

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution affected versions not specified Description A cross-site scripting XSS issue exists in the Netcool Impact NCI web menus, allowing remote attackers to inject arbitrary web script or HTML via...

PT-2013-2924

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution affected versions not specified Description A directory traversal issue allows remote attackers to read arbitrary files by using a crafted URL. Recommendations At the moment, there is no...

CVE-2013-1157: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the IBM Tivoli Monitoring ITM Java servlet container in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud51068...

CVE-2013-1160: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the OpenView web menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud56743...

CVE-2013-1159: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Netcool Impact NCI web menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud56706...

CVE-2013-1158: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the IBM Tivoli Monitoring ITM help menus in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud54397...

CVE-2013-1156: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to read arbitrary files via a crafted URL, aka Bug ID CSCud51034...

PT-2013-2925

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution affected versions not specified Description A cross-site scripting XSS issue exists in the IBM Tivoli Monitoring ITM Java servlet container, allowing remote attackers to inject arbitrary we...

CVE-2013-1174

Cisco Tivoli Business Service Manager TBSM in Hosted Collaboration Mediation HCM in Cisco Hosted Collaboration Solution allows remote attackers to cause a denial of service temporary service hang by sending many TCP packets to certain ports, aka Bug ID CSCue03703...

CVE-2013-1174

CVE-2013-1174 affects Cisco Tivoli Business Service Manager (TBSM) within Hosted Collaboration Mediation (HCM) of Cisco Hosted Collaboration Solution. A remote attacker can cause a partial denial of service (temporary service hang) by flooding ports 17310–17542 with TCP packets. This vulnerabilit...

PT-2013-2942

Name of the Vulnerable Software and Affected Versions Cisco Hosted Collaboration Solution affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a temporary service hang, by sending many TCP packets to certain ports. Recommendation...

CVE-2013-1174: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco Tivoli Business Service Manager TBSM in Hosted Collaboration Mediation HCM in Cisco Hosted Collaboration Solution allows remote attackers to cause a denial of service temporary service hang by sending many TCP packets to certain ports, aka Bug ID CSCue03703...

PT-2013-2905

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution HCS Assurance versions 8.6 through 9.0 Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption and monitoring outage, via malformed TLS...

CVE-2013-1135: Improper Input Validation

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.0 allows remote attackers to cause a denial of service CPU consumption and monitoring outage via malformed TLS messages to TCP port 1 9043 or 2 9443, aka Bug ID CSCuc07155...

Debian DSA-2631-1 : squid3 - denial of service

Squid3, a fully featured Web proxy cache, is prone to a denial of service attack due to memory consumption caused by memory leaks in cachemgr.cgi : - CVE-2012-5643 squid's cachemgr.cgi was vulnerable to excessive resource use. A remote attacker could exploit this flaw to perform a denial of servi...

RHEL 3 / 4 : redhat-release (EOL Notice) (RHSA-2011:0002)

This is the End Of Life notification for RHN Proxy Server 4. On December 31st, 2010, per the life cycle support policy, the version 4 series of Satellite and Proxy products exited Production Phase 2 marking the end of their support by Red Hat. Please reference the support policy here :...

Smartphone Pentest Framework - Multiple Remote Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/56881/info Smartphone Pentest Framework is prone to multiple remote command-execution vulnerabilities. Remote attackers can exploit these issues to execute arbitrary commands within the context of the vulnerable application to gain root access. This may...