The vulnerability of the Cisco Unified Communications Manager software allows a malicious actor to intercept sessions.

The vulnerability exists in OpenSSL due to an improper limitation on the processing of ChangeCipherSpec messages. Exploiting this vulnerability allows a malicious actor to induce the use of a null-length master key in the OpenSSL-to-OpenSSL communication, thereby intercepting the session or gaini...

The vulnerability of the Cisco Unified Communications Manager software allows a malicious individual to gain access to confidential information.

The GNU Bash command shell, as of version 4.3 bash43-025 and later, incorrectly handles lines that follow the declaration of a specially crafted function, which is exported as a variable. This allows a malicious actor to read and write arbitrary files, as well as perform other unconfirmed actions...

Cisco UCS Platform Emulator < 3.1(1ePE1) Multiple Vulnerabilities

According to its self-reported version number, the Cisco Unified Computing System UCS Platform Emulator running on the remote host is prior to 3.11ePE1. It is, therefore, affected by the following vulnerabilities : - A command injection vulnerability exists due to improper validation of...

The vulnerabilities of Cisco IOS, Cisco IOS XE, and the Cisco Unified Communications Management system allow a perpetrator to cause service interruptions.

The vulnerability of SIP protocol implementations in Cisco IOS, Cisco IOS XE, and the Cisco Unified Communications Manager system is related to insufficient processing of input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions such as device restarts or...

CVE-2016-1439

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.52 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650...

Cross site scripting

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.52 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650...

CVE-2016-1439

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.52 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650...

CVE-2016-1439

CVE-2016-1439 is a cross-site scripting (XSS) vulnerability in the HTTP web-based management interface of Cisco Unified Contact Center Enterprise (UCCE) up to version 10.5(2). The root cause is insufficient input validation, allowing remote attackers to inject web script/HTML via a crafted URL (B...

Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerability

Cisco Unified Contact Center Enterprise is a set of IP-based contact center components from Cisco. It provides intelligent contact routing, call processing, network-to-desktop computer telephony integration CTI, and multi-channel contact management capabilities over an IP infrastructure. A...

Cisco Unified Contact Center Enterprise Web-Based Management Interface Cross-Site Scripting Vulnerability

A vulnerability in the HTTP web-based management interface of Cisco Unified Contact Center Enterprise Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to...

The vulnerability of the Cisco Unified Computing System Central’s centralized device management system allows a intruder to inject arbitrary Web or HTML code.

The vulnerability of the control interface of the Cisco Unified Computing System Central device exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code by entering special parameters...

Cisco Unified IP Phone 7900 su实用工具权限提升漏洞

No description provided by source...

CVE-2016-1401

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Computing System UCS Central Software 1.41a allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250...

CVE-2016-1401

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Computing System UCS Central Software 1.41a allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250...

Cisco Unified Computing System Central Cross-Site Scripting Vulnerability

Cisco Unified Computing System UCS Central is a suite of software from Cisco that manages the Cisco UCS server domain. The software provides policy-based automation of servers to improve IT efficiency and centralized fault overview of rapid problem solving and other features. A cross-site scripti...

Cisco IOS and IOS XE and Cisco Unified Communications Manager Software Session Initiation Protocol Memory Leak Vulnerability

A vulnerability in the Session Initiation Protocol SIP gateway implementation in Cisco IOS, IOS XE, and Cisco Unified Communications Manager Software could allow an unauthenticated, remote attacker to cause a memory leak and eventual reload of an affected device. The vulnerability is due to...

Cisco IOS Software Intrusion Prevention System Denial of Service Vulnerability (cisco-sa-20120926-ios-ips)

Cisco IOS Software contains a vulnerability in the Intrusion Prevention System IPS feature that could allow an unauthenticated, remote attacker to cause a reload of an affected device if specific Cisco IOS IPS configurations exist. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions...

ChinaSoft Unified Terminal Security Management System Client Arbitrary Uninstallation Vulnerability

ChinaSoft Unified Terminal Security Management System is a comprehensive system management software that can guarantee system security. With the loophole of arbitrary uninstallation of the client of ChinaSoft Unified Terminal Security Management System, ordinary users who do not have administrato...

The vulnerability of the Cisco Unified Computing System Central’s centralized device management system allows a intruder to execute arbitrary operating system commands.

The vulnerability of the Cisco Unified Computing System Central device’s centralized management system exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

Cisco IOS Software H.323 Denial of Service Vulnerability (cisco-sa-20100922-h323)

The H.323 implementation in Cisco IOS Software contains a vulnerability that may be exploited remotely to cause a denial of service DoS condition on a device that is running a vulnerable version of Cisco IOS Software. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be...