Cisco Unified Communications Manager CDR Management Vulnerability

A vulnerability in Call Detail Records CDR Management of Cisco Unified Communications Manager Cisco Unified CM could allow an authenticated, remote attacker to acquire sensitive information. The vulnerability is due to extraneous information included in the web page. An attacker could exploit thi...

CVE-2014-2185

The Call Detail Records CDR Management component in Cisco Unified Communications Manager Unified CM allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCun74374...

CVE-2014-2184

The IP Manager Assistant IPMA component in Cisco Unified Communications Manager Unified CM allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCun74352...

Command injection

The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a crafted HTTP request, aka Bug ID CSCun74133...

Hardcoded credentials

The Call Detail Records CDR Management component in Cisco Unified Communications Manager Unified CM allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCun74374...

Code injection

The IP Manager Assistant IPMA component in Cisco Unified Communications Manager Unified CM allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCun74352...

CVE-2014-2185

Cisco Unified Communications Manager (Unified CM) CDR Management is affected by CVE-2014-2185. The vulnerability stems from extraneous information included in the web page, allowing an authenticated, remote attacker to read sensitive fields in an HTML document. Impact is sensitive information dis...

CVE-2014-2180

The Cisco advisory for CVE-2014-2180 describes a vulnerability in the Document Management component of Cisco Unified Contact Center Express where insufficient parameter validation allows an authenticated, remote attacker to upload files to arbitrary filesystem locations via a crafted HTTP request...

CVE-2014-2185

The Call Detail Records CDR Management component in Cisco Unified Communications Manager Unified CM allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCun74374...

CVE-2014-2184

The IP Manager Assistant IPMA component in Cisco Unified Communications Manager Unified CM allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCun74352...

CVE-2014-2184

The CVE-2014-2184 issue concerns the Cisco IP Manager Assistant (IPMA) within Cisco Unified Communications Manager. The root cause is improper validation of user input, enabling an unauthenticated, remote attacker to access sensitive information via crafted URLs. Affected context: IPMA component ...

Design/Logic Flaw

Cisco IOS Unified Border Element CUBE in Cisco IOS before 15.32T allows remote authenticated users to cause a denial of service input queue wedge via a crafted series of RTCP packets, aka Bug ID CSCuc42518...

Design/Logic Flaw

The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before Hotfix 31, Web Security 7.7.3 before Hotfix 31, Web Security Gateway 7.7.3 before Hotfix 31, and Web Security Gateway Anywhere 7.7.3 before Hotfix 31 allows remote authenticated users to...

CVE-2014-0347

The CVE-2014-0347 vulnerability affects Websense Triton Unified Security Center 7.7.3 (and related Websense suites) prior to Hotfix 31. In the Settings module, the Log Database and User Directories areas fail to sanitize input, allowing an authenticated user to change an input field from type="pa...

CVE-2014-0347

The Settings module in Websense Triton Unified Security Center 7.7.3 before Hotfix 31, Web Filter 7.7.3 before Hotfix 31, Web Security 7.7.3 before Hotfix 31, Web Security Gateway 7.7.3 before Hotfix 31, and Web Security Gateway Anywhere 7.7.3 before Hotfix 31 allows remote authenticated users to...

BlackBerry, Cisco Products Vulnerable to OpenSSL Bug

Vendors are continuing to check their products for potential effects from the OpenSSL heartbleed vulnerability, and both Cisco and BlackBerry have found that a variety of their products contain a vulnerable version of the software. BlackBerry on Thursday said that several of its software products...

Triton Unified Security Center多个信息泄露漏洞

Bugtraq ID:66687 CVE ID:CVE-2014-0347 Triton Unified Security Center是基于Web浏览器的图形管理的安全应用。 Triton Unified Security Center在实现上存在多个信息泄露漏洞，攻击者可利用这些漏洞查看高级用户存储的凭证。 0 Websense TRITON Unified Security Center 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.websense.com/content/support/library/deployctr/v76/tusccd.asp...

Cisco Unified Communications Manager拒绝服务漏洞

CVE ID:CVE-2013-4449 Cisco Unified Communications Manager是一款Cisco IP电话解决方案中的呼叫处理组件。 Cisco Unified Communications Manager所绑定使用的OpenLDAP存在安全漏洞，允许攻击者通过查询目录和随即从服务器上解绑，使服务程序崩溃，造成拒绝服务攻击。 0 Cisco Unified Communications Manager 目前没有详细解决方案： http://www.cisco.com/security...

HP Unified Functional Testing ExGrid SaveXML Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Unified Functional Testing. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

Websense Triton Unified Security Center 7.7.3 information disclosure vulnerability

Overview Websense Triton Unified Security Center 7.7.3 and possibly earlier versions contains an information disclosure vulnerability which could allow an authenticated attacker to view stored credentials of a possibly higher privileged user. Description CWE-200: Information ExposureWhen logged...