844 matches found
CVE-2020-27121
A vulnerability in Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P Software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication Service on an affected device to restart, resulting in a denial of service DoS condition. The vulnerability is...
Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability
A vulnerability in Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P Software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication Service on an affected device to restart, resulting in a denial of service DoS condition. The vulnerability is...
PT-2020-4617
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P Software affected versions not specified Description A vulnerability in the software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication...
theater-im-gewoelbe.de Cross Site Scripting vulnerability OBB-1472659
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Arbitrary File Read Vulnerability in Im***.php File on Qibo's New X1.0 System
Zibo's new X1.0 system is a website management system based on the latest thinkphp5 framework. There is an arbitrary file read vulnerability in the Im.php file of the Qibo New X1.0 system. An attacker can exploit this vulnerability to obtain sensitive information...
bibliothek-im-logenhaus.de Cross Site Scripting vulnerability OBB-1400593
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
im-machinery.de Cross Site Scripting vulnerability OBB-1334375
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
bridge-im-lehel.de Cross Site Scripting vulnerability OBB-1327181
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-3495
Cisco Jabber is vulnerable to Cross Site Scripting XSS through XHTML-IM messages. The application does not properly sanitize incoming HTML messages and instead passes them through a flawed XSS filter. Recent assessments: wvu-r7 at September 03, 2020 7:38pm UTC reported: This XSS combined with...
im-tech.com Cross Site Scripting vulnerability OBB-1290902
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
im-a-puzzle.com Cross Site Scripting vulnerability OBB-1269382
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
SQL injection vulnerability in im***.asp page of website building system of Hanzhong Qiyuan Power Network Co.
Hanzhong Qiyuan Power Network Co., Ltd. is a high-tech Internet technology service provider. Hanzhong Qiyuan Power Network Co., Ltd. website building system im.asp page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...
SQL injection vulnerability in im***.asp page of website building system of Hanzhong Qiyuan Power Network Co.
Hanzhong Qiyuan Power Network Co., Ltd. is a high-tech Internet technology service provider. Hanzhong Qiyuan Power Network Co., Ltd. website building system im.asp page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...
CVE-2020-3282: Improper Neutralization of Input During Web Page Generation
A vulnerability in the web-based management interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM & Presence Service, and Cisco Unity Connection could allow an unauthenticated, remote attacker to...
PT-2020-3144
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager affected versions not specified Cisco Unified Communications Manager Session Management Edition affected versions not specified Cisco Unified Communications Manager IM & Presence Service affected versions n...
smartwatch-im-praxistest.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1184401 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
edd-im-web.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1171831 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
im-plus.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1158331 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Ubuntu: Security Advisory (USN-4306-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4306-1: Dino vulnerabilities
It was discovered that Dino incorrectly validated inputs. An attacker could use this issue to possibly obtain, inject or remove sensitive information. This update also includes a fix to the encryption implementation in Dino to support 12 byte IVs, in addition to 16 byte IVs...