1038 matches found
Cisco Jabber Client Framework for Mac Code Execution Vulnerability
A vulnerability in Cisco Jabber Client Framework JCF for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device The vulnerability is due to improper file level permissions on an affected devi...
PT-2019-3259
Name of the Vulnerable Software and Affected Versions Cisco Jabber Client Framework for Mac affected versions not specified Description The issue is related to improper file level permissions, allowing an authenticated, local attacker to execute arbitrary code on an affected device. An attacker...
The vulnerability of the dynamic library loading mechanism in the Cisco Jabber for Windows multimedia corporate messaging system allows a hacker to execute arbitrary code with the privileges of another user’s account.
The vulnerability of the dynamic library loading mechanism in the Cisco Jabber for Windows multimedia corporate messaging system is related to insufficient checking of resources loaded by the application. Exploiting this vulnerability allows a perpetrator to execute arbitrary code with the...
Cisco Jabber for Windows DLL Preloading Vulnerability (cisco-sa-20190703-jabber-dll)
According to its self-reported version, Cisco Jabber for Windows is affected by a vulnerability in the loading mechanism of specific dynamic link libraries due to insufficient validation of the resources loaded by the application at run time. An authenticated, local attacker can exploit this to...
CVE-2019-1855
A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to perform a DLL preloading attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The...
CVE-2019-1855
A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to perform a DLL preloading attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The...
Input validation
A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to perform a DLL preloading attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The...
CVE-2019-1855 Cisco Jabber for Windows DLL Preloading Vulnerability
A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to perform a DLL preloading attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The...
CVE-2019-1855
Cisco Jabber for Windows DLL Preloading Vulnerability (CVE-2019-1855) affects Jabber for Windows where insufficient validation of loaded resources allows a local, authenticated attacker to preload a malicious DLL and achieve arbitrary code execution when Jabber launches. Exploitation requires cra...
CVE-2019-1855 Cisco Jabber for Windows DLL Preloading Vulnerability
A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to perform a DLL preloading attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The...
CVE-2019-1855: Uncontrolled Search Path Element
A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to perform a DLL preloading attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The...
Cisco Jabber for Windows DLL Preloading Vulnerability
A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to perform a DLL preloading attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The...
PT-2019-2649
Name of the Vulnerable Software and Affected Versions Cisco Jabber for Windows affected versions not specified Description A vulnerability in the loading mechanism of specific dynamic link libraries could allow an authenticated, local attacker to perform a DLL preloading attack. The vulnerability...
Cisco Releases Security Updates for Multiple Products
Cisco has released security updates to address vulnerabilities in multiple Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review the...
KLA12055 ACE vulnerability in Cisco Jabber
A loading mechanism vulnerability was found in Cisco Jabber. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Cisco Jabber for Windows DLL Preloading Vulnerability Exploitation Related products Cisco-Jabber CVE list CVE-2019-1855 high Solution Update t...
DEBIAN-CVE-2019-12855
In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections...
CVE-2019-10288
Jenkins Jabber Server Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
Design/Logic Flaw
Jenkins Jabber Server Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
