1125 matches found
CVE-2015-6425
The WebApplications Identity Management subsystem in Cisco Unified Communications Manager 10.50.98000.88 allows remote attackers to cause a denial of service subsystem outage via invalid session tokens, aka Bug ID CSCul83786...
CVE-2015-6425
CVE-2015-6425 affects Cisco Unified Communications Manager 10.5(0.98000.88) Web Applications Identity Management. A remote attacker can trigger a denial-of-service by sending invalid session tokens to the Identity Management subsystem (Bug ID CSCul83786). Cisco’s advisory (CISCO-SA-20151215-UCMIM...
PT-2015-7246
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 10.50.98000.88 Description The issue allows remote attackers to cause a denial of service, resulting in a subsystem outage, by utilizing invalid session tokens. Recommendations For Cisco Unified...
CVE-2015-6425: Undefined Security Weakness
The WebApplications Identity Management subsystem in Cisco Unified Communications Manager 10.50.98000.88 allows remote attackers to cause a denial of service subsystem outage via invalid session tokens, aka Bug ID CSCul83786...
Cisco Unified Communications Manager Web Applications Identity Management Subsystem Denial of Service Vulnerability
A vulnerability in the Identity Management subsystem used by the WebApplications of Cisco Unified Communications Manager Cisco UCM software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to invalid session requests. An attacker...
Design/Logic Flaw
Janitza UMG 508, 509, 511, 604, and 605 devices improperly generate session tokens, which makes it easier for remote attackers to determine a PIN value via unspecified computations on session-token values...
CVE-2015-3973
CVE-2015-3973 affects Janitza UMG power quality devices (UMG 508, 509, 511, 604, 605). The root cause is improper session token generation, where session tokens derive from the 4‑digit PIN plus a server‑generated challenge, enabling an attacker to potentially determine the PIN from session tokens...
CVE-2015-3973
Janitza UMG 508, 509, 511, 604, and 605 devices improperly generate session tokens, which makes it easier for remote attackers to determine a PIN value via unspecified computations on session-token values...
CVE-2015-3973: Undefined Security Weakness
Janitza UMG 508, 509, 511, 604, and 605 devices improperly generate session tokens, which makes it easier for remote attackers to determine a PIN value via unspecified computations on session-token values...
Multiple Cross-Site Scripting vulnerabilities in Synology Download Station
------------------------------------------------------------------------ Multiple Cross-Site Scripting vulnerabilities in Synology Download Station ------------------------------------------------------------------------ Han Sahin, September 2015...
Weak authentication in EMC Secure Remote Services Virtual Edition Web Portal
------------------------------------------------------------------------ Weak authentication in EMC Secure Remote Services Virtual Edition Web Portal ------------------------------------------------------------------------ Han Sahin, November 2014...
CVE-2015-0544: Undefined Security Weakness
EMC Secure Remote Services Virtual Edition ESRS VE 3.x before 3.06 does not properly generate random values for session cookies, which makes it easier for remote attackers to hijack sessions by predicting a value...
NewStatPress <= 1.0.3 - Unauthenticated Stored Cross-Site Scripting (XSS)
An insufficient user input validation of HTTP-Header: "Referer" results in a persistent XSS in the WordPress admin-panel. An attacker may be able to access any cookies, session tokens or other sensitive information retained by the browser and used with that site...
Reflected Cross-Site Scripting in Synology DiskStation Manager
------------------------------------------------------------------------ Reflected Cross-Site Scripting in Synology DiskStation Manager ------------------------------------------------------------------------ Han Sahin, May 2015...
Synology Photo Station 6.2-2858 Cross Site Scripting
------------------------------------------------------------------------ Synology Photo Station multiple Cross-Site Scripting vulnerabilities ------------------------------------------------------------------------ Han Sahin, May 2015...
Reflected Cross-Site Scripting vulnerability in asdoc generated documentation
------------------------------------------------------------------------ Reflected Cross-Site Scripting vulnerability in asdoc generated documentation ------------------------------------------------------------------------ Radjnies Bhansingh, March 2014...
SAP NetWeaver AS Java 7.4 DataArchivingService servlet XSS
Application: SAP NetWeaver AS JAVA Versions Affected: SAP NetWeaver AS JAVA 7.4 Vendor URL: SAP Bugs: XXS Reported: 04.12.2015 Vendor response: 05.12.2015 Date of Public Advisory: 11.04.2017 Reference: SAP Security Note 2308535 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION Class: XSS...
Cross-Site Scripting vulnerability in EMC M&R (Watch4net) Alerting Frontend
------------------------------------------------------------------------ Cross-Site Scripting vulnerability in EMC M&R Watch4net Alerting Frontend ------------------------------------------------------------------------ Han Sahin, November 2014...
Cross-Site Scripting vulnerability in EMC M&R (Watch4net) Centralized Management Console
------------------------------------------------------------------------ Cross-Site Scripting vulnerability in EMC M&R Watch4net Centralized Management Console ------------------------------------------------------------------------ Han Sahin, November 2014...
Citrix NetScaler VPX help pages are vulnerable to Cross-Site Scripting
------------------------------------------------------------------------ Citrix NetScaler VPX help pages are vulnerable to Cross-Site Scripting ------------------------------------------------------------------------ Han Sahin, August 2014...