Cisco IOS and IOS XE and Cisco Unified Communications Manager Software Session Initiation Protocol Memory Leak Vulnerability

A vulnerability in the Session Initiation Protocol SIP gateway implementation in Cisco IOS, IOS XE, and Cisco Unified Communications Manager Software could allow an unauthenticated, remote attacker to cause a memory leak and eventual reload of an affected device. The vulnerability is due to...

MiCollab 7.0 - SQL Injection

MiCollab 7.0 - SQL Injection ================ Exploit Title: SQL Injection Vulnerability in MiCollab v7.0 Date: 3-22-2016 Vendor Homepage: http://www.mitel.com Vendor: Mitel Software: MiCollab End User Portal Version: v7.0 Advisory:...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in multiple products. Exploitation of these vulnerabilities could allow a remote attacker to create a denial-of-service condition. US-CERT encourages users and administrators to review the following Cisco Security Advisories and apply...

The vulnerability of the Cisco Unified Communications Manager system, a software solution for instant messaging, Unified Communications Manager IM and Presence Service, and Unified Contact Center Express, a software solution for automating operator operations, as well as the integrated Cisco Unity Connection messaging system, allows a violator to obtain confidential information.

The vulnerabilities of the Cisco Unified Communications Manager, a software solution for instant messaging, Unified Communications Manager IM and Presence Service, and Unified Contact Center Express, a software solution for automating operator operations, as well as the integrated Cisco Unity...

Cisco Unified Communications Domain Manager Cross-Site Scripting Vulnerability (CNVD-2016-01465)

Cisco Unified Communications Domain Manager CUCDM is the United States Cisco Cisco company developed a dedicated unified communications solutions in the call processing components. The component has scalable, distributable, highly available enterprise voice-over-IP call processing capabilities. A...

CVE-2015-0718

Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System UCS platforms allows remote attackers to cause a denial of service TCP stack reload by sending crafted TCP packets to a device that has a TIMEWAIT TCP session, aka Bug ID CSCub70579...

CVE-2016-1354

Cross-site scripting XSS vulnerability in Cisco Unified Communications Domain Manager UCDM 8.x before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCud41176...

CVE-2016-1354

Cross-site scripting XSS vulnerability in Cisco Unified Communications Domain Manager UCDM 8.x before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka Bug ID CSCud41176...

CVE-2016-1354

CVE-2016-1354 affects Cisco Unified Communications Domain Manager (UCDM/UCDM) versions 8.x before 8.1.1. The vulnerability is a cross-site scripting (XSS) flaw in the web framework triggered by crafted markup data, due to insufficient input validation. Multiple sources (NVD, CVE listings, CNVD, C...

Cisco Finesse Desktop and Unified Contact Center Express Privilege Gain Vulnerability

Cisco Finesse Desktop and Unified Contact Center Express Unified CCX are both products of Cisco, Inc.Cisco Finesse Desktop is a suite of software for next-generation agent and desktop management in customer collaboration solutions; Unified CCX is a customer relationship management component of a...

Cisco Unified Communications Domain Manager Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Unified Communications Domain Manager UCDM Software could allow an unauthenticated, remote attacker to perform a cross-site scripting XSS attack. The vulnerability is due to insufficient input validation of user-submitted content. An attacker could...

The vulnerability of the Cisco Unified Communications Manager system allows a perpetrator to execute arbitrary SQL commands.

The vulnerability of the Cisco Unified Communications Manager IP telephony management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using a specially crafted URL...

The vulnerability of the Cisco Unified Communications Manager system allows a perpetrator to access information related to table names and database entities.

The vulnerability of the Cisco Unified Communications Manager IP-telephony management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to information about table names and database...

Sophos UTM Nessus Web UI Cross-Site Scripting Vulnerability

Sophos UTM is a unified threat management appliance. which provides gateway security and endpoint security. The appliance provides gateway security protection and endpoint security protection.Nessus Web UI is one of the components used to access the Nessus Vulnerability Scanner based on a web...

Sophos Unified Thread Management (UTM) Detection (HTTP)

HTTP based detection of Sophos Unified Thread Management UTM. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Cisco Unified Communications Manager IM and Presence Service EST API Denial of Service Vulnerability

Cisco Unified Communications Manager IM and Presence Service is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Cisco Unified Communications Manager Information Disclosure Vulnerability (cisco-sa-201600208-ucm)

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive data. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Cisco Unified Communications Manager IM and Presence Detect

This script performs ssh based detection of Cisco Unified Communications Manager IM and Presence SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Cisco Unified Communications Manager (CUCM) Detection (SSH Login)

SSH login-based detection of Cisco Unified Communications Manager CUCM, formerly Call Manager Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-late...

Cisco Unified Communications Manager SQLi Vulnerability (cisco-sa-20160203-ucm)

A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from ...