Cisco Unified Communications Domain Manager Cross-Site Request Forgery Vulnerability

A vulnerability in the web framework code of Cisco Unified Communication Domain Manager version 10 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against the user of the web interface. The vulnerability is due to insufficient CSRF protections. ...

Cisco Identity Services Engine Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Identity Services Engine could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface on the affected system. The vulnerability is due to insufficient input validation on several web...

[SECURITY] Fedora 20 Update: python-django-1.6.10-1.fc20

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

[SECURITY] Fedora 20 Update: python-django14-1.4.18-1.fc20

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

[SECURITY] Fedora 21 Update: python-django-1.6.10-1.fc21

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

Django 'django.util.http.is_safe_url()' cross-site scripting vulnerability

Django is an open source web application framework written in Python . A cross-site scripting vulnerability exists in Django 'django.util.http.issafeurl' because it fails to properly filter user-supplied input. An attacker could exploit this issue to execute arbitrary script code in the browser o...

Django 'ModelMultipleChoiceField' Denial of Service Vulnerability

Django is an open source web application framework written in Python . A denial of service vulnerability exists in Django 'ModelMultipleChoiceField', which could be exploited by a remote attacker to initiate a denial of service and refuse service to legitimate users...

Cisco AsyncOS ISQ XSS Vulnerability

A vulnerability in the web framework of Cisco AsyncOS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface on the affected system. The vulnerability is due to insufficient input validation of several parameters in the...

Code injection

The web framework in Cisco WebEx Meetings Server produces different returned messages for URL requests depending on whether a username exists, which allows remote attackers to enumerate user accounts via a series of requests, aka Bug ID CSCuj40247...

PT-2015-3997

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings Server affected versions not specified Description The issue concerns the web framework in Cisco WebEx Meetings Server, which returns different messages for URL requests based on whether a username exists. This allows remo...

CVE-2014-8028

Cisco Secure ACS (Access Control Server) is affected by multiple cross-site scripting (XSS) vulnerabilities in its web framework. The issue stems from insufficient input validation of several parameters passed to the web server, allowing remote attackers to craft links that persuade users to exec...

PT-2015-3990

Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control System ACS affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the web framework of Cisco Secure Access Control System ACS. These vulnerabilities allow...

CVE-2014-8028: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the web framework in Cisco Secure Access Control System ACS allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq79019...

Cisco Unified Communications Domain Manager XSS Vulnerability

A vulnerability in the web framework of the Cisco Unified Communications Domain Manager application could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface on an affected system. The vulnerability is due to imprope...

CVE-2014-3364

Multiple cross-site scripting XSS vulnerabilities in the web framework in Cisco Prime Security Manager aka PRSM 9.2.1-2 and earlier allow remote attackers to inject arbitrary web script or HTML via a 1 Access Policies or 2 Device Summary Dashboard parameter, aka Bug ID CSCuq80661...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the web framework in Cisco Prime Security Manager aka PRSM 9.2.1-2 and earlier allow remote attackers to inject arbitrary web script or HTML via a 1 Access Policies or 2 Device Summary Dashboard parameter, aka Bug ID CSCuq80661...

CVE-2014-3364

Cisco Prime Security Manager (PRSM) web framework contains XSS vulnerabilities (CVE-2014-3364) in versions 9.2.1-2 and earlier. The underlying issue is insufficient input validation on parameters in the Access Policies and Device Summary Dashboard pages, enabling remote attackers to inject arbitr...

Cisco Prime Security Manager Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Prime Security Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface on the affected system. The vulnerability is due to insufficient input validation of several...

Cisco Unified Communications Domain Manager Blind Command Injection Vulnerability

A vulnerability in the web framework of Cisco Unified Communications Domain Manager Application Software version 8 could allow an authenticated, remote attacker to inject commands that can be executed by the underlying operating system with the privileges of the web server process. The...

CVE-2014-8010: Improper Input Validation

The web framework in Cisco Unified Communications Domain Manager 8 allows remote authenticated administrators to execute arbitrary OS commands via crafted values, aka Bug ID CSCuq50205...