Lucene search
+L

1250 matches found

Microsoft KB
Microsoft KB
•added 2018/09/26 2:34 a.m.•24 views

Description of the update for Lync Server 2010, Mobility Service: March 2012

Describes the update for Lync Server 2010, Mobility Service that is dated March 2012.SummaryThis article describes the update for Microsoft Lync Server 2010, Mobility Service that is dated March 2012.INTRODUCTIONThis update improves the reliability, stability and performance of Lync Server 2010,...

0.1AI score
SaveExploits0
Cvelist
Cvelist
•added 2018/09/19 9:00 p.m.•33 views

CVE-2018-8889

A directory traversal vulnerability in the Connect Service of the BlackBerry Enterprise Mobility Server BEMS 2.8.17.29 and earlier could allow an attacker to retrieve arbitrary files in the context of a BEMS administrator account...

4.8AI score0.00478EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2018/09/19 8:29 p.m.•6 views

CVE-2018-8889

A directory traversal vulnerability in the Connect Service of the BlackBerry Enterprise Mobility Server BEMS 2.8.17.29 and earlier could allow an attacker to retrieve arbitrary files in the context of a BEMS administrator account...

4.7CVSS5.8AI score0.00478EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2018/09/19 8:29 p.m.•20 views

Directory traversal

A directory traversal vulnerability in the Connect Service of the BlackBerry Enterprise Mobility Server BEMS 2.8.17.29 and earlier could allow an attacker to retrieve arbitrary files in the context of a BEMS administrator account...

4.7CVSS4.9AI score0.00478EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2018/09/19 8:29 p.m.•15 views

CVE-2018-8889

A directory traversal vulnerability in the Connect Service of the BlackBerry Enterprise Mobility Server BEMS 2.8.17.29 and earlier could allow an attacker to retrieve arbitrary files in the context of a BEMS administrator account...

4.7CVSS5.9AI score0.00478EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/19 12:00 a.m.•6 views

CVE-2018-8889: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability in the Connect Service of the BlackBerry Enterprise Mobility Server BEMS 2.8.17.29 and earlier could allow an attacker to retrieve arbitrary files in the context of a BEMS administrator account...

4.7CVSS5.7AI score0.00478EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2018/08/30 12:00 a.m.•31 views

Cisco AnyConnect Secure Mobility Client 4.6.01099 Denial Of Service

Exploit Title: Cisco AnyConnect Secure Mobility Client 4.6.01099 - 'Introducir URL' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2018-08-29 Vendor Homepage: https://www.cisco.com/ Software Link: App Store for iOS devices Tested Version: 4.6.01099 Vulnerability Type: Denial of...

0.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2018/08/29 12:00 a.m.•34 views

Cisco AnyConnect Secure Mobility Client 4.6.01099 - Introducir URL Denial of Service (PoC)

Cisco AnyConnect Secure Mobility Client 4.6.01099 - Introducir URL Denial of Service PoC Exploit Title: Cisco AnyConnect Secure Mobility Client 4.6.01099 - 'Introducir URL' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2018-08-29 Vendor Homepage: https://www.cisco.com/ Softwar...

SaveExploits0
OSV
OSV
•added 2018/08/06 8:29 p.m.•12 views

CVE-2017-9000

ArubaOS, all versions prior to 6.3.1.25, 6.4 prior to 6.4.4.16, 6.5.x prior to 6.5.1.9, 6.5.2, 6.5.3 prior to 6.5.3.3, 6.5.4 prior to 6.5.4.2, 8.x prior to 8.1.0.4 FIPS and non-FIPS versions of software are both affected equally is vulnerable to unauthenticated arbitrary file access. An...

9.8CVSS5.9AI score0.05673EPSS
SaveExploits0References2
Prion
Prion
•added 2018/07/13 8:29 p.m.•25 views

Design/Logic Flaw

On iOS and Android devices, the ShoreTel Mobility Client app version 9.1.3.109 fails to properly validate SSL certificates provided by HTTPS connections, which means that an attacker in the position to perform MITM attacks may be able to obtain sensitive account information such as login...

2.9CVSS6.2AI score0.00437EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2018/07/13 8:29 p.m.•13 views

CVE-2016-6562

On iOS and Android devices, the ShoreTel Mobility Client app version 9.1.3.109 fails to properly validate SSL certificates provided by HTTPS connections, which means that an attacker in the position to perform MITM attacks may be able to obtain sensitive account information such as login...

7.5CVSS5.8AI score0.00437EPSS
SaveExploits0References3
CVE
CVE
•added 2018/07/13 8:00 p.m.•55 views

CVE-2016-6562

The CVE-2016-6562 entry affects ShoreTel Mobility Client for iOS and Android, with versions 9.1.3.109 and earlier failing to properly validate SSL certificates over HTTPS. This permits MITM exposure of sensitive account information (e.g., login credentials) for devices on the same network. CERT/N...

7.5CVSS7AI score0.00437EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2018/07/13 8:00 p.m.•38 views

CVE-2016-6562 ShoreTel Mobility Client for iOS and Android, version 9.1.3.109 and earlier, fails to properly validate SSL certificates provided by HTTPS connections

On iOS and Android devices, the ShoreTel Mobility Client app version 9.1.3.109 fails to properly validate SSL certificates provided by HTTPS connections, which means that an attacker in the position to perform MITM attacks may be able to obtain sensitive account information such as login...

7AI score0.00437EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/13 12:00 a.m.•3 views

CVE-2016-6562: Improper Certificate Validation

On iOS and Android devices, the ShoreTel Mobility Client app version 9.1.3.109 fails to properly validate SSL certificates provided by HTTPS connections, which means that an attacker in the position to perform MITM attacks may be able to obtain sensitive account information such as login...

7.5CVSS7.2AI score0.00437EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
•added 2018/06/26 6:11 p.m.•15 views

bosch-mobility-solutions.com.br XSS vulnerability

Open Bug Bounty ID: OBB-636952 Description| Value ---|--- Affected Website:| bosch-mobility-solutions.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| angular Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/21 12:00 a.m.•2 views

CVE-2018-0373: Improper Input Validation

A vulnerability in vpnva-6.sys for 32-bit Windows and vpnva64-6.sys for 64-bit Windows of Cisco AnyConnect Secure Mobility Client for Windows Desktop could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected system. The vulnerability is due to improper...

5.5CVSS6AI score0.00394EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2018/06/15 12:00 a.m.•504 views

Cisco AnyConnect Secure Mobility Client < 4.6.01098 Certificate Bypass Vulnerability

The version of Cisco AnyConnect Secure Mobility Client installed on the remote Windows host is prior to 4.6.01098. It is, therefore, affected by a certificate bypass vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid110563; scriptversion"1.7";...

5.8CVSS5.3AI score0.00983EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/06/12 12:00 a.m.•21 views

Cisco AnyConnect Network Access Manager and AnyConnect Secure Mobility Client Certificate Bypass Vulnerability

Cisco AnyConnect Network Access Manager and AnyConnect Secure Mobility Client are both products of Cisco, U.S.A. Cisco Network Access Manager NAM is one of the network access managers. AnyConnect Secure Mobility Client is a secure mobility client that provides secure access to networks and...

5.8CVSS6.9AI score0.00983EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/07 12:00 a.m.•1 views

CVE-2018-0334: Improper Certificate Validation

A vulnerability in the certificate management subsystem of Cisco AnyConnect Network Access Manager and of Cisco AnyConnect Secure Mobility Client for iOS, Mac OS X, Android, Windows, and Linux could allow an unauthenticated, remote attacker to bypass the TLS certificate check when downloading...

5.8CVSS5.7AI score0.00983EPSS
SaveExploits0References3
Cisco
Cisco
•added 2018/06/06 4:00 p.m.•167 views

Cisco AnyConnect Secure Mobility Client Certificate Bypass Vulnerability

A vulnerability in the certificate management subsystem of Cisco AnyConnect Network Access Manager and of Cisco AnyConnect Secure Mobility Client for iOS, Mac OS X, Android, Windows, and Linux could allow an unauthenticated, remote attacker to bypass the TLS certificate check when downloading...

4.8CVSS1.2AI score0.00983EPSS
SaveExploits0References1
Rows per page
Query Builder