CVE-2010-2981: Undefined Security Weakness

Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service device crash by pinging a virtual interface, aka Bug ID CSCte55370...

CVE-2010-2975: Exposure of Sensitive Information to an Unauthorized Actor

Cisco Unified Wireless Network UWN Solution 7.x through 7.0.98.0 does not properly handle multiple SSH sessions, which allows physically proximate attackers to read a password, related to an "arrow key failure," aka Bug ID CSCtg51544...

CVE-2010-2979: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of service buffer leak and device crash via ARP requests that trigger an ARP storm, aka Bug ID CSCte43508...

CVE-2010-2976: Undefined Security Weakness

The controller in Cisco Unified Wireless Network UWN Solution 7.x through 7.0.98.0 has 1 a default SNMP read-only community of public, 2 a default SNMP read-write community of private, and a value of "default" for the 3 SNMP v3 username, 4 SNMP v3 authentication password, and 5 SNMP v3 privacy...

CVE-2010-2980: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of service pbuf exhaustion and device crash via fragmented traffic, aka Bug ID CSCtd26794...

CVE-2010-2290: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cgi-bin/cgix/help in McAfee Unified Threat Management UTM Firewall formerly SnapGear firmware 3.0.0 through 4.0.6 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2010-1570

The computer telephony integration CTI server component in Cisco Unified Contact Center Express UCCX 7.0 before 7.01SR4 and 7.02, 6.0 before 6.01SR1, and 5.0 before 5.02SR3 allows remote attackers to cause a denial of service CTI server and Node Manager failure via a malformed CTI message...

CVE-2010-1571

Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express UCCX 7.0 before 7.01SR4 and 7.02, unspecified 6.0 versions, and 5.0 before 5.02SR3 allows remote attackers to read arbitrary files via a crafted bootstrap message to TCP port 6295...

Design/Logic Flaw

The computer telephony integration CTI server component in Cisco Unified Contact Center Express UCCX 7.0 before 7.01SR4 and 7.02, 6.0 before 6.01SR1, and 5.0 before 5.02SR3 allows remote attackers to cause a denial of service CTI server and Node Manager failure via a malformed CTI message...

CVE-2010-1570: Undefined Security Weakness

The computer telephony integration CTI server component in Cisco Unified Contact Center Express UCCX 7.0 before 7.01SR4 and 7.02, 6.0 before 6.01SR1, and 5.0 before 5.02SR3 allows remote attackers to cause a denial of service CTI server and Node Manager failure via a malformed CTI message...

CVE-2010-1571: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express UCCX 7.0 before 7.01SR4 and 7.02, unspecified 6.0 versions, and 5.0 before 5.02SR3 allows remote attackers to read arbitrary files via a crafted bootstrap message to TCP port 6295...

Vulnerabilities in Cisco Unified Contact Center Express

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Microsoft Windows COM Object Validation Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Excel, PowerPoint, Publisher, Visio, Wordpad, or Word file. Successful exploits would allow the attacker to execute arbitrary code in the...

McAfee Unified Threat Management Firewall 4.0.6 - 'page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40708/info McAfee Unified Threat Management UTM Firewall formerly SnapGear is prone to a cross-site scripting vulnerability because the device's web interface fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

CVE-2010-0874

Unspecified vulnerability in the Communications - Oracle Communications Unified Inventory Management component in Oracle Industry Product Suite 7.1 allows remote attackers to affect integrity via unknown vectors...

CVE-2010-0874

Unspecified vulnerability in the Communications - Oracle Communications Unified Inventory Management component in Oracle Industry Product Suite 7.1 allows remote attackers to affect integrity via unknown vectors...

CVE-2010-0874

Technical details for CVE-2010-0874 are not publicly available in the provided documents. Monitor for updates.

CVE-2010-0874: Undefined Security Weakness

Unspecified vulnerability in the Communications - Oracle Communications Unified Inventory Management component in Oracle Industry Product Suite 7.1 allows remote attackers to affect integrity via unknown vectors...

Design/Logic Flaw

Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express CME or Cisco Unified Survivable Remote Site Telephony SRST is enabled, allows remote attackers to cause a denial of service device reload via a malformed Skinny Client Control Protocol SCCP message, aka Bug ID...

Cisco Security Advisory: Cisco Unified Communications Manager Express Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Express Denial of Service Vulnerabilities Advisory ID: cisco-sa-20100324-cucme Revision 1.0 For Public Release 2010 March 24 1600 UTC GMT...