CVE-2012-0146

Open redirect vulnerability in Microsoft Forefront Unified Access Gateway UAG 2010 SP1 and SP1 Update 1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka "UAG Blind HTTP Redirect Vulnerability."...

CVE-2012-0147

Microsoft Forefront UAG 2010 SP1 and SP1 Update 1 expose an information-disclosure vulnerability due to improper/default web site configuration, allowing unauthenticated remote access to sensitive web content via crafted HTTPS requests (CVE-2012-0147). Connected sources confirm this is part of th...

CVE-2012-0147

Microsoft Forefront Unified Access Gateway UAG 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafted HTTPS request, aka "Unfiltered Access to UAG Default Website Vulnerability."...

Microsoft Forefront Unified Access Gateway Information Disclosure Vulnerability

Description Microsoft Forefront Unified Access Gateway is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to gain access to sensitive information that may aid in further attacks. Technologies Affected Microsoft Forefront Unified Access Gateway 2010 Microso...

Microsoft Forefront Unified Access Gateway URI Open Redirection Vulnerability

Description Microsoft Forefront Unified Access Gateway is prone to a URI open-redirection vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to spoof a UAG server or redirect legitimate network traffic intended for a UAG server. This may...

Cyberoam Unified Threat Management: OS Command Execution

Hi, Please find below the details of a vulnerability I discovered in Cyberoam UTM device. The Vendor was notified, however I did not receive any response from Vendor despite repeated email reminders. SECURITY ADVISORY: cyberoam-utm-command-executaion Affected Software: Cyberoam CR50ia 10.01.0 bui...

Cisco Unified Communications Manager SQL injection

SQL injection and DoS on SCCP request processing...

Cisco Security Advisory: Cisco Unified Communications Manager Skinny Client Control Protocol Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Unified Communications Manager Skinny Client Control Protocol Vulnerabilities Advisory ID: cisco-sa-20120229-cucm Revision 1.0 For Public Release 2012 February 29 16:00 UTC GMT Summary ======= Cisco Unified Communications Manager devices may...

Sql injection

SQL injection vulnerability in Cisco Unified Communications Manager CUCM with software 6.x and 7.x before 7.15bsu5, 8.0 before 8.03asu3, and 8.5 and 8.6 before 8.62asu1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.62asu1 allows remote attacke...

Code injection

Cisco Unified Communications Manager CUCM with software 6.x and 7.x before 7.15bsu5, 8.0 before 8.03asu3, and 8.5 and 8.6 before 8.62asu1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.62asu1 allow remote attackers to cause a denial of service...

CVE-2011-4486

Cisco Unified Communications Manager CUCM with software 6.x and 7.x before 7.15bsu5, 8.0 before 8.03asu3, and 8.5 and 8.6 before 8.62asu1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.62asu1 allow remote attackers to cause a denial of service...

CVE-2011-4487

SQL injection vulnerability in Cisco Unified Communications Manager CUCM with software 6.x and 7.x before 7.15bsu5, 8.0 before 8.03asu3, and 8.5 and 8.6 before 8.62asu1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.62asu1 allows remote attacke...

CVE-2011-4486

Cisco CUCM/Skinny (SCCP) vulnerabilities (CVE-2011-4486) allow remote, unauthenticated attackers to cause a device reload via crafted SCCP registrations. Affected software versions include CUCM 6.x and 7.x prior to 7.1(5b)su5, CUCM 8.0 prior to 8.0(3a)su3, and CUCM 8.5/8.6 prior to 8.6(2a)su1, pl...

CVE-2011-4487

SQL injection vulnerability in Cisco Unified Communications Manager CUCM with software 6.x and 7.x before 7.15bsu5, 8.0 before 8.03asu3, and 8.5 and 8.6 before 8.62asu1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.62asu1 allows remote attacke...

CVE-2011-4486

Cisco Unified Communications Manager CUCM with software 6.x and 7.x before 7.15bsu5, 8.0 before 8.03asu3, and 8.5 and 8.6 before 8.62asu1 and Cisco Business Edition 3000 with software before 8.6.3 and 5000 and 6000 with software before 8.62asu1 allow remote attackers to cause a denial of service...

CVE-2011-4487

CVE-2011-4487 affects Cisco Unified Communications Manager (CUCM) and Cisco BE6000/BE5000/BE3000 with various 6.x–8.x releases. The issue is a SQL injection in the SCCP registration handling, allowing remote, unauthenticated attackers to execute arbitrary SQL commands against the CUCM database, p...

Cisco Unified Communications Manager Skinny Client Control Protocol Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Releases Multiple Security Advisories

Cisco has released six security advisories to address vulnerabilities affecting the following products: Cius Wifi devices running Cius Software Version 9.21 SR1 and prior Cisco Unified Communications Manager Software versions 6.x, 7.x, and 8.x Cisco Business Edition 3000, 5000, and 6000 Cisco Uni...

Multiple Cisco Products brstart sm_read_string_length Remote Code Execution

Binary data ciscousmlmsbof.nbin...

Syneto Unified Threat Management 1.3.31.4.2 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

Syneto Unified Threat Management 1.3.31.4.2 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/51597/info Syneto Unified Threat Management is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properl...