Cisco Unified Communications Manager Operating System-Level Privilege Escalation Vulnerability

A vulnerability in underlying file permissions of specific operating system-level commands of Cisco Unified Communications Manager Cisco Unified CM could allow an authenticated, local attacker to gain elevated privileges. The vulnerability is due to insufficient file permissions. An attacker coul...

Threat Outbreak Alert: Fake Eviction Notice Email Messages on January 31, 2014

Medium Alert ID: 32642 First Published: 2014 January 31 15:09 GMT Last Updated: 2014 February 3 14:25 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an eviction notice for the recipient. The text in the email message...

Cisco Identity Services Engine HTTP Control Interface for NAC Web Agent Cross-Site Scripting Vulnerability

A vulnerability in the HTTP control interface for NAC Web Agent of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to execute a cross-site scripting XSS attack. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerabili...

Cisco Identity Services Engine Reports Output Cross-Site Scripting Vulnerability

A vulnerability in certain report output pages of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the report pages of Cisco ISE. The vulnerability is due to insufficient input validation. An attacker could...

Cisco Video Surveillance 5000 Series HD IP Dome Camera Multiple Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web user interface of the Cisco Video Surveillance 5000 Series HD IP Dome Cameras could allow an unauthenticated, remote attacker to execute a cross-site scripting XSS attack. The vulnerabilities are due to insufficient validation of user-supplied input. An attacke...

Threat Outbreak Alert: Fake Payment Notice Confirmation Email Messages on January 26, 2014

Medium Alert ID: 32574 First Published: 2014 January 27 14:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment receipt for the recipient. The text in the email message attempts to convince the recipient to open...

Cisco Secure ACS Portal Session Management Vulnerability

A vulnerability in the portal interface of Cisco Secure Access Control System ACS could allow an authenticated, remote attacker to access the portal with the access capabilities of another user. The vulnerability is due to insufficient session management in the portal. An attacker could exploit...

Cisco Video Surveillance Operations Manager MySQL Database Insufficient Authentication Controls Vulnerability

A vulnerability in the configuration of the MySQL database as installed by Cisco Video Surveillance Operations Manager VSOM could allow an unauthenticated, remote attacker to access the MySQL database. The vulnerability is due to insufficient authentication controls. An attacker could exploit thi...

Cisco NX-OS Software Label Distribution Protocol Message Vulnerability

A vulnerability in the Label Distribution Protocol LDP message processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to stop accepting valid LDP sessions during a 60-second period. The vulnerability is due to how certain malformed LDP Hello...

Cisco TelePresence Video Communication Server Expressway Default SSL Certificate Vulnerability

A vulnerability in the Cisco TelePresence Video Communication Server VCS Expressway could allow an unauthenticated, remote attacker to execute a man-in-the-middle MITM attack between one or more affected devices. The vulnerability occurs because the same default SSL certificate is used across all...

Cisco NX-OS Software TACACS+ Command Authorization Vulnerability

A vulnerability in the TACACS+ command authorization code of Cisco NX-OS Software could allow an authenticated, local attacker to execute certain commands without TACACS+ server authorization. The vulnerability is due to the processing of certain commands when executed in a sequence. An attacker...

Cisco MediaSense Open Redirection Vulnerability

A vulnerability in a specific URL parameter of Cisco MediaSense could allow an unauthenticated, remote attacker to perform site redirection. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including a desired remote site URL in the affect...

Cisco MediaSense Search and Play Authorization Vulnerability

A vulnerability in the Search and Play interface of Cisco MediaSense could allow an authenticated, remote attacker to access recordings in the Search and Play interface. The vulnerability is due to insufficient authorization controls. An attacker could exploit this vulnerability by accessing the...

Cisco Secure ACS Portal Cross-Site Scripting Vulnerability

A vulnerability in the portal of the Cisco Secure Access Control System ACS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the portal on the affected system. The vulnerability is due to insufficient input validation of a parameter. A...

Mastery OA to the latest version of the override to delete the others notice, notice reply, a few at a stored XSS-vulnerability warning-the black bar safety net

Test version: mastery OA 2 0 1 3 enhanced Edition 125MB Download: http://www.tongda2000.com/download/2013adv.php Updated on 2013-12-26 1 3:3 0 In the news, announcements, notifications, etc. reply, you can override delete someone else's reply, just need someone to reply to the content of the id c...

Threat Outbreak Alert: Fake Court Notice Email Messages on January 17, 2014

Medium Alert ID: 32478 First Published: 2014 January 17 19:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a notification to attend a court hearing for the recipient. The text in the email message attempts to convince...

Cisco WebEx Meetings Server Enterprise License Manager Administrative Password Disclosure Vulnerability

A vulnerability in the Cisco WebEx Meetings Server Enterprise License Manager web portal could allow an authenticated, remote attacker to view the administrative password for Cisco WebEx Meetings Server in clear text. The vulnerability is due to the inclusion of the Cisco WebEx Meetings Server...

Threat Outbreak Alert: Fake Court Appearance Request Email Messages on January 22, 2014

Medium Alert ID: 32426 First Published: 2014 January 14 15:46 GMT Last Updated: 2014 January 24 12:42 GMT Version: 5 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a court appearance notice for the recipient. The text in the email...

Cisco IOS XE Software TFTP DoS

A vulnerability in the flow manager code in Cisco IOS XE could allow a remote, unauthenticated attacker to trigger a denial of service condition resulting in a crash of the device by sending specially generated TFTP UDP traffic. It should be noted that this plugin merely checks for an affected IO...

Threat Outbreak Alert: Fake Court Attendance Request Email Messages on January 10, 2014

Medium Alert ID: 32404 First Published: 2014 January 10 22:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a court appearance notification for the recipient. The text in the email message attempts to convince the...