Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the server in Cisco Unified MeetingPlace 7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCuc65411 and CSCue18706...

CVE-2013-1128

CVE-2013-1128 affects Cisco Unified MeetingPlace Server prior to version 7.1(2.2000). The issue is a set of cross-site request forgery (CSRF) vulnerabilities caused by insufficient sanitization of user-supplied input, allowing an unauthenticated, remote attacker to hijack the authentication of vi...

CVE-2013-1123

Cisco Unified MeetingPlace Server 7.0 is affected by CVE-2013-1123, a cross-site scripting (XSS) vulnerability caused by insufficient sanitization of user-supplied input. An unauthenticated, remote attacker could entice a user to follow a malicious link that submits crafted requests, allowing exe...

CVE-2013-1128

Multiple cross-site request forgery CSRF vulnerabilities in the server in Cisco Unified MeetingPlace before 7.12.2000 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuc64903. NOTE: some of these details are obtained from third party...

Cisco Unified MeetingPlace Server Cross-Site Scripting Vulnerability

Cisco Unified MeetingPlace Server contains a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to insufficient sanitization of user-supplied input processed by the Cisco Unified MeetingPlace software. An...

CVE-2013-1113

Cross-site scripting XSS vulnerability in Cisco Unified Communications Domain Manager allows remote attackers to inject arbitrary web script or HTML via a crafted parameter value, aka Bug ID CSCue21042...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Unified Communications Domain Manager allows remote attackers to inject arbitrary web script or HTML via a crafted parameter value, aka Bug ID CSCue21042...

CVE-2013-1113

Cross-site scripting XSS vulnerability in Cisco Unified Communications Domain Manager allows remote attackers to inject arbitrary web script or HTML via a crafted parameter value, aka Bug ID CSCue21042...

CVE-2013-1113

CVE-2013-1113 affects Cisco’s Unified Communications Domain Manager with a Cross-site scripting (XSS) vulnerability. A remote attacker can inject arbitrary web script or HTML through a crafted parameter value, referenced as Bug ID CSCue21042 . The connected documents confirm the affected product ...

CVE-2012-5445

The kernel in Cisco Native Unix CNU on Cisco Unified IP Phone 7900 series devices aka TNP phones with software before 9.3.1-ES10 does not properly validate unspecified system calls, which allows attackers to execute arbitrary code or cause a denial of service memory overwrite via a crafted binary...

CVE-2012-5445

The kernel in Cisco Native Unix CNU on Cisco Unified IP Phone 7900 series devices aka TNP phones with software before 9.3.1-ES10 does not properly validate unspecified system calls, which allows attackers to execute arbitrary code or cause a denial of service memory overwrite via a crafted binary...

CVE-2012-5445

CVE-2012-5445 affects Cisco Unified IP Phone 7900 series (Cisco Native Unix kernel) prior to 9.3.1-ES10. The vulnerability arises from improper validation of unspecified kernel system calls in the TNP phones, enabling either arbitrary code execution or a memory overwrite-based denial of service w...

Cisco VoIP phone vulnerability allow eavesdropping remotely

Cui, a fifth year grad student from the Columbia University Intrusion Detection Systems Lab and co-founder of Red Balloon Security, has demonstrated an attack on common Cisco-branded Voice over IP VoIP phones that could easily eavesdrop on private conversations remotely. The vulnerability Cui...

Buffer overflow

Buffer overflow in Cisco Unified MeetingPlace Web Conferencing before 7.1MR1 Patch 1, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 allows remote attackers to cause a denial of service daemon hang via unspecified parameters in a POST request, aka Bug ID CSCua66341...

Cisco Unified Presence / Jabber Extensible Communications Platform DoS

Crash on stream header parsing...

OPC UA General Settings

OPC Unified Architecture is a common OLE for process control OPC...

MS Forefront Unified Access Gateway Remote Code Execution Vulnerabilities (2544641)

This host is missing an important security update according to Microsoft Bulletin MS11-079. OpenVAS Vulnerability Test $Id: secpodms11-079.nasl 5958 2017-04-17 09:02:19Z teissa $ MS Forefront Unified Access Gateway Remote Code Execution Vulnerabilities 2544641 Authors: Madhuri D Copyright:...

Microsoft Forefront Unified Access Gateway Remote Code Execution Vulnerabilities (2544641)

This host is missing an important security update according to Microsoft Bulletin MS11-079. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cisco Unified Communications Manager DoS

Crash on SIP parsing...

CVE-2012-3949

The SIP implementation in Cisco Unified Communications Manager CUCM 6.x and 7.x before 7.15bsu5, 8.x before 8.51su4, and 8.6 before 8.62asu1; Cisco IOS 12.2 through 12.4 and 15.0 through 15.2; and Cisco IOS XE 3.3.xSG before 3.3.1SG, 3.4.xS, and 3.5.xS allows remote attackers to cause a denial of...