CVE-2014-3332

Cisco Unified Communications Manager (CM) 8.6(.2) and earlier contains an incorrect CLI restrictions setting that may allow an authenticated, remote attacker to establish undetected concurrent logins. The issue stems from improper sanitization of authenticated users, per Cisco’s advisory for CVE-...

CVE-2014-3332

Cisco Unified Communications Manager CM 8.6.2 and earlier has an incorrect CLI restrictions setting, which allows remote authenticated users to establish undetected concurrent logins via unspecified vectors, aka Bug ID CSCup98029...

Voipswitch 6 Local File Disclosure Vulnerability

Voipswitch versions 6 and below suffer fro a local file inclusion vulnerability. Voipswitch = 6 , LFD Exploit Author : 0x4148 Voipswitch’s Unified Communication enables providers to offer a hosted business communication solution. Enterprises, instead of maintaining costly on-premises PBXes, can n...

Cisco Unified Communications Manager Concurrent Login Vulnerability

A vulnerability in the CLI restrictions setting of Cisco Unified Communications Manager could allow an authenticated, remote attacker to remain undetected as an authenticated user. The vulnerability is due to improper sanitization of authenticated users. Cisco has confirmed the vulnerability in a...

Voipswitch 6 Local File Disclosure

Voipswitch = 6 , LFD Exploit Author : 0x4148 Voipswitch’s Unified Communication enables providers to offer a hosted business communication solution. Enterprises, instead of maintaining costly on-premises PBXes, can now enroll to a service in the cloud – Unified Communication as a Service UCaaS...

Cisco Unified Communications Domain Manager multiple security vulnerabilities

Default ssh-key, privilege escalation, SSRF...

Information disclosure

The Unified Task List UTL Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to obtain potentially sensitive information about environment variables and JAR versions via unspecified vectors...

CVE-2014-3056

CVE-2014-3056: Affected product is IBM WebSphere Portal Unified Task List (UTL) Portlet on WebSphere Portal 7.x and 8.x up to 8.0.0.1 CF12. The issue is information disclosure exposing environment variables and certain JAR versions via unspecified vectors. This is an information disclosure vulner...

Cisco Unified Presence Server Sync Agent Vulnerability

A vulnerability in the Intercluster Sync Agent Service on Cisco Unified Presence Server could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. The vulnerability is due to a SYN flood. An attacker could exploit this vulnerability by exceeding the tcp max...

CVE-2014-3328

The Intercluster Sync Agent Service in Cisco Unified Presence Server allows remote attackers to cause a denial of service via a TCP SYN flood, aka Bug ID CSCun34125...

Design/Logic Flaw

The Intercluster Sync Agent Service in Cisco Unified Presence Server allows remote attackers to cause a denial of service via a TCP SYN flood, aka Bug ID CSCun34125...

CVE-2014-3328

The Intercluster Sync Agent Service in Cisco Unified Presence Server allows remote attackers to cause a denial of service via a TCP SYN flood, aka Bug ID CSCun34125...

CVE-2014-3328

CVE-2014-3328 affects Cisco Unified Presence Server’s Intercluster Sync Agent Service. A remote attacker can trigger a denial-of-service by sending大量 TCP SYN traffic, exploiting a SYN flood condition (Bug CSCun34125). Cisco’s advisory notes that software updates are not available to fix this vuln...

CVE-2014-3325

Multiple cross-site scripting XSS vulnerabilities in Cisco Unified Customer Voice Portal CVP allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug IDs CSCuh61711, CSCuh61720, CSCuh61723, CSCuh61726, CSCuh61727, CSCuh61731, and CSCuh61733...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco Unified Customer Voice Portal CVP allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug IDs CSCuh61711, CSCuh61720, CSCuh61723, CSCuh61726, CSCuh61727, CSCuh61731, and CSCuh61733...

CVE-2014-3325

Multiple cross-site scripting XSS vulnerabilities in Cisco Unified Customer Voice Portal CVP allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug IDs CSCuh61711, CSCuh61720, CSCuh61723, CSCuh61726, CSCuh61727, CSCuh61731, and CSCuh61733...

CVE-2014-3325

CVE-2014-3325 concerns multiple cross-site scripting (XSS) vulnerabilities in the Cisco Unified Customer Voice Portal (CVP) web interface. The root cause is insufficient input validation of a parameter used by web pages, enabling remote attackers to inject arbitrary script/HTML via crafted input....

CVE-2014-3043

IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.3 allows remote authenticated users to gain privileges by leveraging access to the service account...

CVE-2014-3043

IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.3 allows remote authenticated users to gain privileges by leveraging access to the service account...

CVE-2014-3043

The CVE-2014-3043 issue affects IBM Storwize V7000 Unified, with affected code releases 1.3.x and 1.4.x up to 1.4.3.2. The vulnerability allows remote authenticated users to obtain unauthorized privileges by abusing the IBM service account. IBM security bulletins confirm a fix is available in ver...