PT-2017-10740

Name of the Vulnerable Software and Affected Versions GlassFish Server Open Source Edition version 3.0.1 Description The issue allows an unauthenticated attacker to obtain the plain text password of an administrative user, granting access to the web-based administration interface. Recommendations...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. In a web-based...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. In a web-based...

Microsoft Office Memory Corruption Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, th...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. In a web-based...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. In a web-based...

Microsoft Browser Spoofing Vulnerability

A spoofing vulnerability exists when Microsoft browsers do not properly parse HTTP content. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a...

Microsoft Office Memory Corruption Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, th...

Information disclosure

A vulnerability in the web-based GUI of Cisco Wide Area Application Services WAAS Central Manager could allow an unauthenticated, remote attacker to retrieve completed reports from an affected system, aka Information Disclosure. This vulnerability affects the following products if they are runnin...

CVE-2017-6730

A vulnerability in the web-based GUI of Cisco Wide Area Application Services WAAS Central Manager could allow an unauthenticated, remote attacker to retrieve completed reports from an affected system, aka Information Disclosure. This vulnerability affects the following products if they are runnin...

CVE-2017-6730

CVE-2017-6730 affects Cisco WAAS Central Manager web GUI. A processing error in RBAC allows an unauthenticated, remote attacker to download completed reports from an affected system, causing information disclosure. Affected products configured with Central Manager include Cisco WAAS/ vWAAS applia...

CVE-2017-6733

CVE-2017-6733 affects Cisco Identity Services Engine (ISE) web portal. The issue is a stored cross-site scripting (XSS) vulnerability in the web-based application interface that could be exploited by an unauthenticated, remote attacker to target users of the web interface. Affected releases liste...

CVE-2017-6734: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected device, related to the Guest Portal. More Information:...

CVE-2017-6733: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based application interface of the Cisco Identity Services Engine ISE portal could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the web interface of an affected system. More Information: CSCvd87482. Know...

PT-2017-17281

Name of the Vulnerable Software and Affected Versions Cisco Wide Area Application Services WAAS versions 4.47 through 6.23 Cisco Wide Area Application Services WAAS version 6.21 Description A vulnerability in the web-based GUI of Cisco Wide Area Application Services WAAS Central Manager could all...

PT-2017-17285

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE Software versions 1.30.909 through 2.10.800 Description A cross-site scripting XSS issue exists in the web-based management interface of the software, specifically related to the Guest Portal. This could allo...