CVE-2015-4229

The web framework in Cisco Unified Communications Domain Manager 8.14ER1 allows remote attackers to obtain sensitive information by visiting a bvsmweb URL, aka Bug ID CSCuq22589...

CVE-2015-4229

Cisco Unified Communications Domain Manager 8.1(4)ER1 contains an information-disclosure vulnerability in the web framework (bvsmweb directory) that allows unauthenticated remote attackers to obtain sensitive information due to insufficient access controls (Bug ID CSCuq22589). Multiple sources (C...

Cisco Unified Communications Domain Manager Information Disclosure Vulnerability

A vulnerability in the web framework of Cisco Unified Communications Domain Manager Application Software could allow an unauthenticated, remote attacker to access content in the bvsmweb directory. The vulnerability is due to insufficient access controls. An attacker could exploit this vulnerabili...

Cisco TelePresence MCU Root Privilege Execution

The vulnerability of the web-based framework of the microprogramming software for Cisco TelePresence MCU control devices is related to deficiencies in access control for files. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code with privileg...

Cisco TelePresence Server Privilege Escalation

The vulnerability of the web-based framework of the microprogramming software for Cisco TelePresence Server lies in the lack of access control for files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with privileges of a root user...

Cisco TelePresence IP Gateway Privilege Escalation

The vulnerability of the web-based framework of the microprogramming software for Cisco TelePresence IP Gateways is related to deficiencies in access control for files. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code with privileges of th...

Cisco TelePresence IP VCR Root Privilege Execution

The vulnerability of the web-based framework of the microprogramming software for Cisco TelePresence IP VCR lies in the lack of access control for files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with privileges of the root user remotely...

Cisco TelePresence Supervisor MSE 8050 Privilege Escalation

The vulnerability of the web-based framework of the microprogramming software for the Cisco TelePresence Supervisor MSE 8050 relates to deficiencies in access control for files. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code with...

Cisco TelePresence ISDN Gateway Code Execution

The vulnerability of the web-based framework of the microprogramming software for the Cisco TelePresence ISDN Gateway 3241 relates to deficiencies in access control for files. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code with privilege...

Cisco TelePresence Serial Gateway Privilege Escalation

The vulnerability of the web-based framework of the microprogramming software for Cisco TelePresence Serial Gateway relates to deficiencies in access control for files. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code with privileges of th...

PT-2015-6454

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA versions 8.5.0-497 Description A cross-site scripting XSS issue exists in the web framework, allowing remote attackers to inject arbitrary web script or HTML via an unspecified HTTP header. Recommendations For...

[SECURITY] Fedora 20 Update: python-django14-1.4.20-1.fc20

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

[SECURITY] Fedora 22 Update: python-django-1.8.2-1.fc22

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

CVE-2015-0757

The web framework in Cisco Identity Services Engine ISE 1.21.901 and 1.30.722 does not properly implement session handlers, which allows remote attackers to obtain sensitive information by reading web pages, as demonstrated by MnT reports, aka Bug ID CSCuq23140...

Design/Logic Flaw

The web framework in Cisco Identity Services Engine ISE 1.21.901 and 1.30.722 does not properly implement session handlers, which allows remote attackers to obtain sensitive information by reading web pages, as demonstrated by MnT reports, aka Bug ID CSCuq23140...

CVE-2015-0757

The CVE concerns Cisco Identity Services Engine (ISE) web framework versions 1.2(1.901) and 1.3(0.722), where improper session handler implementation allows an unauthenticated, remote attacker to read web pages and obtain sensitive information (e.g., MnT reports). This is a genuine information-di...

CVE-2015-0757: Exposure of Sensitive Information to an Unauthorized Actor

The web framework in Cisco Identity Services Engine ISE 1.21.901 and 1.30.722 does not properly implement session handlers, which allows remote attackers to obtain sensitive information by reading web pages, as demonstrated by MnT reports, aka Bug ID CSCuq23140...

PT-2015-3179

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine versions 1.21.901 through 1.30.722 Description The issue is related to the web framework in Cisco Identity Services Engine, which does not properly implement session handlers. This allows remote attackers to obta...

Cisco Identity Services Engine Information Disclosure Vulnerability

A vulnerability in the web framework of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to access information on a targeted device that is normally available only to authenticated users. The vulnerability is due to improper implementation of session handlers set...

[SECURITY] Fedora 22 Update: php-ZendFramework2-2.3.8-1.fc22

Zend Framework 2 is an open source framework for developing web applications and services using PHP 5.3+. Zend Framework 2 uses 100% object-oriented code and utilizes most of the new features of PHP 5.3, namely namespaces, late static binding, lambda functions and closures. Zend Framework 2 evolv...