PT-2019-3813 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the Clientless SSL VPN WebVPN portal could allow an unauthenticated, remote attacker to...

CVE-2019-12715: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition SME could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface of the...

CVE-2019-12716: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based interface of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition SME could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface. The...

PT-2019-3805

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition SME affected versions not specified Description The issue is related to improper restrictions on XML entities in the web-based interface,...

CVE-2019-12686: Improper Neutralization of Special Elements used in an SQL Command

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input validation. An attacker could...

CVE-2019-12707: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based interface of multiple Cisco Unified Communications products could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface of the affected software. The vulnerability is due to insufficient...

CVE-2019-12679: Improper Neutralization of Special Elements used in an SQL Command

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary SQL injections on an affected device. These vulnerabilities exist due to improper input validation. An attacker could...

PT-2019-3795

Name of the Vulnerable Software and Affected Versions Cisco IC3000 Industrial Compute Gateway affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected...

PT-2019-3793

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition affected versions not specified Description The issue is related to improper handling of malformed HTTP methods in the web-based interface...

PT-2019-3812

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions affected versions not specified Cisco Unified Communications Manager SME versions affected versions not specified Unified Communications Manager IM and Presence Service versions affected versions n...

CVE-2019-12714: Uncontrolled Resource Consumption

A vulnerability in the web-based management interface of Cisco IC3000 Industrial Compute Gateway could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability exists because the affected software improperly manages system...

CVE-2019-12712: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of the affected software. The vulnerability is due to insufficient...

CVE-2019-12689: Improper Input Validation

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. The vulnerability is due to insufficient input validation. An...

Coppermine Photo Gallery has a code execution vulnerability

Coppermine Photo Gallery is a Web-based album management system. The system provides user management , album password access restrictions and automatic generation of thumbnails and other functions . A code execution vulnerability exists in Coppermine Photo Gallery. The vulnerability allows...

CVE-2019-12651

Multiple vulnerabilities in the web-based user interface Web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands with elevated privileges on the affected device. For more information about these vulnerabilities, see the Details section of this advisory...

Design/Logic Flaw

Multiple vulnerabilities in the web-based user interface Web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands with elevated privileges on the affected device. For more information about these vulnerabilities, see the Details section of this advisory...

EUVD-2019-4241

Multiple vulnerabilities in the web-based user interface Web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute commands with elevated privileges on the affected device. For more information about these vulnerabilities, see the Details section of this advisory...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

Multiple Schneider Electric Products Formatting String Error Vulnerability

Schneider Electric MEG6501-0001-U.motion KNX server and others are a web-based visualization system from Schneider Electric France. The system is mainly used for KNX-based home and building automation. A formatting string error vulnerability exists in several Schneider Electric products. An...

CVE-2019-1975 Cisco HyperFlex Software Cross-Frame Scripting Vulnerability

A vulnerability in the web-based interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to execute a cross-frame scripting XFS attack on an affected device. This vulnerability is due to insufficient HTML iframe protection. An attacker could exploit this vulnerabilit...