Unspecified Elevation of Privilege Vulnerability in Cisco Unified Communications Manager

Cisco Unified Communications Manager is a call processing component of a Cisco IP telephony solution. An elevation of privilege vulnerability exists in Cisco Unified Communications Manager that allows a local attacker to inject malicious parameters and execute with root privileges, due to the...

CVE-2015-0715

SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCut33447 and CSCut33608...

Sql injection

SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager 11.00.98000.225 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug IDs CSCut33447 and CSCut33608...

CVE-2015-0715

Cisco CUCM 11.0(0.98000.225) is impacted by CVE-2015-0715, a SQL injection in the administrative web interface. An authenticated, remote attacker can exploit improper input validation to inject or modify SQL queries, potentially exposing or manipulating data via vectors not fully specified in the...

Cisco Unified Communications Manage SQL Injection Vulnerability

Cisco Unified Communications Manager is the call processing component of the IP Telephony solution from Cisco. A SQL injection vulnerability exists in Cisco Unified Communications Manager due to the program failing to properly filter user-supplied input. This allows an authenticated, remote...

Code injection

The Framework Daemon in AlienVault Unified Security Management before 4.15 allows remote attackers to execute arbitrary Python code via a crafted plugin configuration file .cfg...

AlienVault Unified Security Management Remote Code Execution Vulnerability

AlienVault Unified Security Management is a security management platform that provides security monitoring, security event management and reporting, and a threat awareness system. A remote code execution vulnerability exists in the AlienVault Framework backend process of AlienVault USM that allow...

Cisco Unified Computing System Integrated Management Controller XSRF (CSCuq45477)

A vulnerability in the web framework of the Cisco Unified Computing System Integrated Management Controller can allow an unauthenticated, remote attacker to perform a cross-site request forgery attack. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid83183;...

The vulnerability of the microprogramming software of the Cisco Unified Communications Manager allows a remote attacker to bypass the device protection mechanisms.

The configauth function generates an authentication key when no authentication key is provided; this key can be discovered through brute-force methods...

The vulnerability of the microprogramming software of the Cisco Unified Communications Manager allows a remote attacker to execute arbitrary code.

Overfilling the buffer in the dynamic memory of the nsshostnamedigitsdots function in the glibc library allows a remote attacker to execute arbitrary code by using the gethostbyname and gethostbyname2 functions...

CVE-2015-0705

Cross-site request forgery CSRF vulnerability in the SOAP API endpoints of the web-services directory in Cisco Unified MeetingPlace 8.61.9 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts, aka Bug ID CSCus97494...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the SOAP API endpoints of the web-services directory in Cisco Unified MeetingPlace 8.61.9 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts, aka Bug ID CSCus97494...

CVE-2015-0704

Multiple cross-site request forgery CSRF vulnerabilities in API features in Cisco Unified MeetingPlace 8.61.9 allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus95884...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in API features in Cisco Unified MeetingPlace 8.61.9 allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus95884...

CVE-2015-0705

CVE-2015-0705 is a CSRF vulnerability in the SOAP API endpoints of the Cisco Unified MeetingPlace web-services directory, version 8.6(1.9). An attacker could hijack administrator authentication to create new admin accounts (Bug ID CSCus97494). Public details in the provided documents confirm the ...

CVE-2015-0704

CVE-2015-0704 affects Cisco Unified MeetingPlace Server (8.6(1.9)) with CSRF vulnerabilities in API features that allow remote attackers to hijack user authentication. The root cause is insufficient CSRF protections in multiple-state-changing URL API functionalities. Impact, as documented, is use...

CVE-2015-0705

Cross-site request forgery CSRF vulnerability in the SOAP API endpoints of the web-services directory in Cisco Unified MeetingPlace 8.61.9 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts, aka Bug ID CSCus97494...

Cisco Unified MeetingPlace Web Services Directory SOAP API Endpoints Cross-Site Request Forgery Vulnerability

A vulnerability in the SOAP application programming interface API endpoints of the web services directory of Cisco Unified MeetingPlace could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack. The vulnerability is due to insufficient CSRF protections in...

Unrestricted file upload

Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.61.9 allows remote authenticated users to execute arbitrary code by using the languageShortName parameter to upload a file that provides shell access, aka Bug ID CSCus95712...

CVE-2015-0702

Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.61.9 allows remote authenticated users to execute arbitrary code by using the languageShortName parameter to upload a file that provides shell access, aka Bug ID CSCus95712...