CVE-2015-0602

The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to obtain sensitive information by sniffing the network, aka Bug ID CSCuq12117...

CVE-2015-0600: Improper Input Validation

The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to cause a denial of service logoff via crafted packets, aka Bug ID CSCuq12139...

CVE-2015-0602: Exposure of Sensitive Information to an Unauthorized Actor

The mobility extension on Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allows remote attackers to obtain sensitive information by sniffing the network, aka Bug ID CSCuq12117...

Cisco Unified IP Phones 9900 Series Denial of Service Vulnerability (CNVD-2015-00923)

Cisco Unified IP Phone 9900 is a 9900 series IP phone terminal equipment from Cisco USA. The device provides voice, video, and other features. A security vulnerability exists in the mobility extension of the Cisco Unified IP Phone 9900 Series. A remote attacker could exploit this vulnerability to...

Cisco Unified IP Phones 9900 Series Information Disclosure Vulnerability

Cisco Unified IP Phone 9900 is a 9900 series IP phone terminal equipment from Cisco USA. The device provides voice, video, and other features. A security vulnerability exists in the mobility extension of the Cisco Unified IP Phone 9900 Series. A remote attacker could exploit this vulnerability to...

Cisco Unified IP Phone 9900 Series Mobility Extension Availability Vulnerability

A vulnerability in the mobility extension support of Cisco Unified IP Phone 9900 Series could allow an unauthenticated, remote attacker to log off the mobility extension user. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability ...

Cisco Unified IP Phone 9900 Series Data Disclosure Vulnerability

A vulnerability in the mobility extension feature of Cisco Unified IP Phone 9900 Series could allow an unauthenticated, remote attacker to obtain sensitive information. The vulnerability is due to insufficient protections of information in transit. An attacker could exploit this vulnerability by...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco AnyConnect Secure Mobility Client 3.1.02043 and earlier and Cisco HostScan Engine 3.1.05183 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving an applet-path URL, aka Bug IDs CSCup82990 and CSCuq80149...

CVE-2014-8021

CVE-2014-8021 is an XSS vulnerability in Cisco AnyConnect Secure Mobility Client <= 3.1.x and Cisco HostScan Engine

CVE-2014-8021: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco AnyConnect Secure Mobility Client 3.1.02043 and earlier and Cisco HostScan Engine 3.1.05183 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving an applet-path URL, aka Bug IDs CSCup82990 and CSCuq80149...

Mac OS X : Cisco AnyConnect Secure Mobility Client < 3.1(6042) Host Validation Vulnerability

The remote Mac OS X host has a version of Cisco AnyConnect Secure Mobility Client prior to 3.16042. It is, therefore, affected by a vulnerability due to insufficient validation of the type of host which the client is connecting to. An attacker, by tricking users to connect to a malicious host, ca...

CVE-2013-6222: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Mobility Web Client and Service Request Catalog SRC components in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Fedora Update for qt-mobility FEDORA-2014-8183

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: qt-mobility-1.2.2-0.16.20140317git169da60c.fc20

Qt Mobility Project delivers a set of new APIs to Qt with features that are well known from the mobile device world, in particular phones. However, these AP Is allow the developer to use these features with ease from one framework and apply them to phones, netbooks and non-mobile personal...

Aruba MC-800 Mobility Controller Screens Directory HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26465/info Aruba MC-800 Mobility Controller is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute HTML and...

Cisco Unified Communications Manager Enterprise Mobility Application Blind SQL Injection Vulnerability

A vulnerability in the Enterprise Mobility Application EMApp interface of Cisco Unified Communications Manager Cisco Unified CM could allow an unauthenticated, remote attacker to impact the integrity of the system by executing arbitrary SQL queries. The vulnerability is due to a failure to valida...

CVE-2014-0729

SQL injection vulnerability in the Enterprise Mobility Application EMApp interface in Cisco Unified Communications Manager UCM allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05302...

Sql injection

SQL injection vulnerability in the Enterprise Mobility Application EMApp interface in Cisco Unified Communications Manager UCM allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05302...

CVE-2014-0729: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Enterprise Mobility Application EMApp interface in Cisco Unified Communications Manager UCM allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05302...

Mac OS X : Cisco AnyConnect Secure Mobility Client 2.x / 3.x < 3.0(629) Multiple Vulnerabilities

The remote host has a version of Cisco AnyConnect 2.x or 3.x prior to 3.0629 and is, therefore, affected by the following vulnerabilities : - When the client is obtained from the VPN headend using a web browser, a helper application performs the download and installation. This helper application...