6272 matches found
Null pointer dereference
Pointer corruption in the Unified Shader Compiler in IntelR Graphics Drivers before 10.18.14.5074 aka 15.36.x.5074 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2019-11111
Summary: CVE-2019-11111 is a pointer corruption vulnerability in the Unified Shader Compiler of Intel Graphics Drivers prior to 10.18.14.5074 (≈15.36.x.5074) that may allow an authenticated local attacker to escalate privileges. Affected component: Intel Graphics Drivers (Unified Shader Compiler,...
MS10-089: Vulnerabilities in Forefront Unified Access Gateway and Microsoft Intelligent Application Gateway could cause elevation of privilege
Resolves vulnerabilities in Forefront Unified Access Gateway UAG that could allow elevation of privilege if a user visits an affected Web site using a specially crafted URL.INTRODUCTIONMicrosoft has released security bulletin MS10-089. To view the complete security bulletin, visit the following...
Cisco Unified Communications Manager XSS (cisco-sa-20191002-cuc-xss)
According to its self-reported version, Cisco Unified Communications Manager is affected by a cross-site scripting XSS vulnerability. This is due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this by convincing a user to click a specially crafted U...
Cisco Unified Communications Manager Security Bypass Vulnerability (cisco-sa-20191002-ucm-secbypass)
According to its self-reported version, Cisco Unified Communications Manager is affected by a vulnerability that allows an unauthenticated, remote attacker to bypass security restrictions. This is due to improper handling of malformed HTTP methods. An attacker can exploit this vulnerability by...
Cisco Unified Communications Manager SQLi (cisco-sa-20191002-cuc-inject)
According to its self-reported version, Cisco Unified Communications Manager is affected by an SQL injection vulnerability. This is due to improper validation of user-supplied input. An authenticated, remote attacker can exploit this by sending crafted requests with malicious SQL statements to...
Cisco Unified Communications Manager Cross-Site Scripting (XSS) Vulnerability
According to its self-reported version, Cisco Unified Communications Manager is affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to click ...
Cisco Unified Intelligence Center (CUIC) Appliance Detection (SSH)
Binary data ciscovosscuicinstalled.nbin...
Cisco Unified Intelligence Center Remote File Injection Vulnerability
A vulnerability in the dashboard gadget rendering of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to obtain or manipulate sensitive information between a user's browser and Cisco Unified Intelligence Center. The vulnerability is due to the lack of gadget...
Cisco Unified Intelligence Center (CUIC) Software Unauthenticated User Account Creation Vulnerability
The jspringsecurityswitchuser function in Cisco Unified Intelligence Center CUIC 8.5.4 through 9.11, as used in Unified Contact Center Express 10.01 through 11.01, allows remote attackers to create user accounts by visiting an unspecified web page, aka Bug IDs CSCuy75027 and CSCuy81653. C Tenable...
Cisco Unified Intelligence Center (CUIC) Software Cross-Site Scripting Vulnerability
Cross-site scripting XSS vulnerability in Cisco Unified Intelligence Center CUIC 8.5.4 through 9.11, as used in Unified Contact Center Express 10.01 through 11.01, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCuy75020 and CSCuy81652. C Tenable...
Cisco Unified Communications Manager Cross-Site Scripting (XSS) Vulnerability
According to its self-reported version, Cisco Unified Communications Manager is affected by a cross-site scripting XSS vulnerability due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to click ...
Cisco Unified Intelligence Center (CUIC) Software Cross-Site Request Forgery Vulnerability
Cross-site request forgery CSRF vulnerability in Cisco Unified Intelligence Center CUIC, as used in Unified Contact Center Express allows remote attackers to hijack the authentication of arbitrary users. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid129819;...
Cisco Unified Communications Manager WEB Interface SQL Injection Vulnerability
Cisco Unified Communications Manager is a unified communications solution. A SQL injection vulnerability exists in the Cisco Unified Communications Manager WEB interface, which could be exploited by remote attackers to submit a specially crafted SQL request to manipulate a database, obtain...
Cisco Unified Communications Manager WEB Interface XXE Attack Vulnerability
Cisco Unified Communications Manager is a unified communications solution. An XXE attack vulnerability exists in the Cisco Unified Communications Manager WEB interface, which allows remote attackers to exploit the vulnerability by submitting a specially crafted XML request, which can be used to...
Siemens SIMATIC IT UADM Password Storage Vulnerability
Siemens SIMATIC IT Unified Architecture Discrete Manufacturing UADM is a Manufacturing Execution System MES solution from Siemens, Germany. A password storage vulnerability exists in Siemens SIMATIC IT UADM, which can be exploited by an authenticated, remote attacker to recover passwords on port...
Cisco Unified Communications Manager WEB Interface Cross-Site Scripting Vulnerability (CNVD-2019-36447)
Cisco Unified Communications Manager is a unified communications solution. A cross-site scripting vulnerability exists in the Cisco Unified Communications Manager WEB interface, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used t...
Cisco Unified Communications Manager WEB Interface Security Bypass Vulnerability
Cisco Unified Communications Manager is a unified communications solution. A security bypass vulnerability exists in the way the Cisco Unified Communications Manager WEB interface handles malformed HTTP, which could be exploited by remote attackers to submit a special request that could bypass...
The vulnerability of the Unified Contact Center Express software solution lies in insufficient validation of input data. This allows a perpetrator to carry out an attack on the target system from the server side and perform unauthorized actions.
The vulnerability of the Cisco Unified Contact Center Express automation software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out an attack on the target system from the server side, enabling unauthorized actions by sending...
