CVE-2012-1328: Improper Control of Generation of Code

Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle downloads of configuration information to an RT phone, which allows local users to gain privileges via unspecified injected data, aka Bug ID CSCts32237...

PT-2012-1785

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4 and 15.0 through 15.2 Cisco Unified Communications Manager CUCM version 7.x Description A memory leak issue allows remote attackers to cause a denial of service by consuming memory via a crafted response to a SIP...

CVE-2012-0376: Undefined Security Weakness

The voice-sipstack component in Cisco Unified Communications Manager CUCM 8.5 allows remote attackers to cause a denial of service core dump via vectors involving SIP messages that arrive after an upgrade, aka Bug ID CSCtj87367...

Code injection

Cisco Unified Contact Center Express aka CCX 8.0 and 8.5 allows remote attackers to cause a denial of service via network traffic, as demonstrated by an SEC-BE-STABLE test case, aka Bug ID CSCth33834...

Code injection

The sccp-protocol component in Cisco IP Communicator CIPC 7.0 through 8.6 does not limit the rate of SCCP messages to Cisco Unified Communications Manager CUCM, which allows remote attackers to cause a denial of service via vectors that trigger 1 on hook and 2 off hook messages, as demonstrated b...

Sql injection

SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtx08939...

CVE-2012-0337

CVE-2012-0337 affects Cisco Unified MeetingPlace Web Conferencing (7.1) where the web component is vulnerable to a SQL injection via crafted input. The root cause is insufficient validation of user-supplied input to the web interface (notably an HTTP POST path per Cisco advisory), enabling an att...

CVE-2011-2583

Cisco Unified Contact Center Express aka CCX 8.0 and 8.5 allows remote attackers to cause a denial of service via network traffic, as demonstrated by an SEC-BE-STABLE test case, aka Bug ID CSCth33834...

CVE-2011-2583: Improper Input Validation

Cisco Unified Contact Center Express aka CCX 8.0 and 8.5 allows remote attackers to cause a denial of service via network traffic, as demonstrated by an SEC-BE-STABLE test case, aka Bug ID CSCth33834...

CVE-2012-0337: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the web component in Cisco Unified MeetingPlace 7.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtx08939...

PT-2012-1564

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express aka CCX versions 8.0 through 8.5 Description The issue allows remote attackers to cause a denial of service via network traffic. Recommendations For versions 8.0 through 8.5, update to a version that contai...

PT-2012-2510

Name of the Vulnerable Software and Affected Versions Cisco Unified MeetingPlace version 7.1 Description A SQL injection issue in the web component allows remote authenticated users to execute arbitrary SQL commands. Recommendations For Cisco Unified MeetingPlace version 7.1, update to a version...

MS12-026: Vulnerabilities in Forefront Unified Access Gateway (UAG) Could Allow Information Disclosure (2663860) (uncredentialed check)

Binary data forefrontuagms12-026.nbin...

Microsoft Forefront Unified Access Gateway (UAG) Detection

Detects the installed version of Microsoft Forefront Unified Access Gateway. The script logs in via smb, searches for Microsoft Forefront Unified Access Gateway in the registry and gets the version from registry. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted...

Microsoft Forefront Unified Access Gateway信息泄露漏洞(MS12-026)

BUGTRAQ ID: 52909 CVE ID: CVE-2012-0147 Forefront Unified Access Gateway（UAG）是一款远程访问和协作软件。 Microsoft Forefront Unified Access Gateway UAG中存在漏洞，未验证用户可访问UAG服务器的默认网站，获取敏感信息。 0 Microsoft Forefront UAG 2010 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS12-026）以及相应补丁: MS12-026：Vulnerabilities in...

MS Forefront Unified Access Gateway Information Disclosure Vulnerability (2663860)

This host is missing an important security update according to Microsoft Bulletin MS12-026. OpenVAS Vulnerability Test $Id: secpodms12-026.nasl 6018 2017-04-24 09:02:24Z teissa $ MS Forefront Unified Access Gateway Information Disclosure Vulnerability 2663860 Authors: Madhuri D Copyright: Copyrig...

Microsoft Forefront Unified Access Gateway URI公开重定向漏洞(MS12-026)

BUGTRAQ ID: 52903 CVE ID: CVE-2012-0146 Forefront Unified Access Gateway（UAG）是一款远程访问和协作软件。 Microsoft Forefront Unified Access Gateway UAG中存在可导致信息泄露的欺骗漏洞， 攻击者重定向UAG服务器的网络流量，发送恶意链接并诱使用户单击，利用此漏洞获取敏感信息。 0 Microsoft Forefront UAG 2010 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS12-026）以及相应补丁:...

Microsoft Forefront Unified Access Gateway Information Disclosure Vulnerability (2663860)

This host is missing an important security update according to Microsoft Bulletin MS12-026. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS12-026: Vulnerabilities in Forefront Unified Access Gateway (UAG) Could Allow Information Disclosure (2663860)

The version of Forefront Unified Access Gateway UAG running on the remote host has multiple vulnerabilities : - A spoofing vulnerability that could allow an attacker to redirect a victim to a malicious website. An attacker would have to trick the victim into clicking a specially crafted link in...

CVE-2012-0147

Microsoft Forefront Unified Access Gateway UAG 2010 SP1 and SP1 Update 1 does not properly configure the default web site, which allows remote attackers to obtain sensitive information via a crafted HTTPS request, aka "Unfiltered Access to UAG Default Website Vulnerability."...