CVE-2015-0751

Cisco IP Phone 7861, when firmware from Cisco Unified Communications Manager 10.31 is used, allows remote attackers to cause a denial of service via crafted packets, aka Bug ID CSCus81800...

Unified-Layer Unrestricted File Upload 0day Exploit

Upload files with any extensions you want in sites that are hosted on unified layer and its childs like bluehost, hostmonster, justhost, ... and also these sites themeselves This is private exploit. You can buy it at https://0day.today...

Multiple Vulnerabilities in Cisco Unified Communications Manager

Cisco Unified Communications Manager is a call processing component of a Cisco IP telephony solution. A cross-site scripting and cross-site request forgery vulnerability exists in Cisco Unified Communications Manager. An unauthenticated, remote attacker could use this vulnerability to execute...

Arcserve Unified Data Protection Management Service EdgeServiceImpl getBackupPolicy Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose information on vulnerable installations of Arcserve Unified Data Protection. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getBackupPolicy method of the EdgeServiceImpl web service. By sendi...

Arcserve Unified Data Protection Management Service exportServlet Directory Traversal Information Disclosure and Denial of Service Vulnerability

This vulnerability allows remote attackers to disclose and delete files on vulnerable installations of Arcserve Unified Data Protection. Authentication is not required to exploit this vulnerability. The specific flaw exists within the exportServlet servlet. The issue lies in the failure to saniti...

Arcserve Unified Data Protection Management Service EdgeServiceImpl getBackupPolicies Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose information on vulnerable installations of Arcserve Unified Data Protection. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getBackupPolicies method of the EdgeServiceImpl web service. By...

Arcserve Unified Data Protection Management Service reportFileServlet Directory Traversal Information Disclosure and Denial of Service Vulnerability

This vulnerability allows remote attackers to disclose and delete files on vulnerable installations of Arcserve Unified Data Protection. Authentication is not required to exploit this vulnerability. The specific flaw exists within the reportFileServlet. The issue lies in the failure to sanitize t...

Cisco Unified Communications Manager Multiple Vulnerabilities

Multiple vulnerabilities in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS, cross-site request forgery XSRF, and phishing attacks on the affected software. The vulnerabilities are due to improper input validation of certain...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco Unified Intelligence Center 10.61 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826...

Cisco Unified Customer Voice Portal Cross-Site Request Forgery Vulnerability

Cisco Unified Customer Voice Portal CVP provides voice and video self-service. A cross-site request forgery vulnerability exists in Cisco Unified Customer Voice Portal, where the program fails to properly validate user input, allowing a remote attacker to construct a malicious URI, trick the user...

Cisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability

Cisco Unified Intelligence Center is the United States Cisco Cisco company's set of Web-based reporting platform. The platform provides a comprehensive display of report-related business data and call center data and other functions. A cross-site request forgery vulnerability exists in Cisco...

PT-2015-4855 · Cisco · Cisco Unified Intelligence Center

Name of the Vulnerable Software and Affected Versions: Cisco Unified Intelligence Center version 10.61 Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. Recommendations: For Cisco Unified Intelligence Center version 10.61...

CVE-2015-0740

Cross-site request forgery CSRF vulnerability in Cisco Unified Intelligence Center 10.61 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826...

CVE-2015-0740

CVE-2015-0740 is a CSRF vulnerability in Cisco Unified Intelligence Center 10.6(1) (Bug ID CSCus28826). The issue arises from insufficient validation of user input on the web interface, enabling an unauthenticated, remote attacker to hijack the authentication of arbitrary users. Impact is describ...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco Unified Customer Voice Portal CVP 10.51 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut93970...

CVE-2015-0717

Cisco Unified Communications Manager 10.01.10000.12 allows local users to gain privileges via a command string in an unspecified parameter, aka Bug ID CSCut19546...

CVE-2015-0717

Cisco Unified Communications Manager 10.0(1.10000.12) contains a local privilege-escalation vulnerability (CVE-2015-0717) where an authenticated, local attacker can gain root privileges by injecting shell commands via an unsafely handled parameter. Root cause: failure to sanitize user input, enab...

CVE-2015-0717

Cisco Unified Communications Manager 10.01.10000.12 allows local users to gain privileges via a command string in an unspecified parameter, aka Bug ID CSCut19546...

Cisco Unified Communications Manager SQL Injection (CSCut33447 / CSCut33608)

According to its self-reported version, the remote Cisco Unified Communications Manager CUCM device is affected by multiple SQL injection vulnerabilities due to improper validation of user-supplied input. An authenticated, remote attacker can exploit these issues to inject or modify SQL queries,...

Cisco Unity Connection CUCReports Web Interface Cross-Site Request Forgery Vulnerability

Cisco Unified Communications Manager is a call processing component of a Unified Communications system. A cross-site request forgery vulnerability exists in the web management interface of Cisco Unified Communications Manager, which allows remote attackers to construct malicious URIs, trick users...