Lucene search
+L

2985 matches found

Cvelist
Cvelist
added 2020/07/16 5:21 p.m.30 views

CVE-2020-3345 Cisco Webex Meetings and Cisco Webex Meetings Server HTML Injection Vulnerability

A vulnerability in certain web pages of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to modify a web page in the context of a browser. The vulnerability is due to improper checks on parameter values within affected pages. An attacker could...

4.3CVSS4.6AI score0.01212EPSS
SaveExploits0References1
CVE
CVE
added 2020/07/16 5:21 p.m.536 views

CVE-2020-3345

Cisco Webex Meetings and Webex Meetings Server are affected by CVE-2020-3345, an HTML injection vulnerability rooted in improper parameter validation on web pages. An unauthenticated, remote attacker can entice a user to follow a crafted link that injects HTML into an affected parameter, enabling...

4.3CVSS4.5AI score0.01212EPSS
SaveExploits0References1Affected Software2
Cisco
Cisco
added 2020/07/15 4:0 p.m.46 views

Cisco Webex Meetings and Cisco Webex Meetings Server HTML Injection Vulnerability

A vulnerability in certain web pages of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to modify a web page in the context of a browser. The vulnerability is due to improper checks on parameter values within affected pages. An attacker could...

4.3CVSS1.1AI score0.01212EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/07/03 12:0 a.m.15 views

The vulnerability of the software update service for Cisco Webex Meetings Desktop App allows a perpetrator to execute arbitrary code.

The vulnerability of the software update service for the Cisco Webex Meetings Desktop App is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.6CVSS7.6AI score0.04117EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/03 12:0 a.m.10 views

The vulnerability of the software update service for Cisco Webex Meetings Desktop App allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the software update service for the Cisco Webex Meetings Desktop App is related to authentication deficiencies. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

8.1CVSS7.7AI score0.02364EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/03 12:0 a.m.8 views

The vulnerability of the Cisco Webex Meetings Desktop App’s software lies in the lack of protection for sensitive data, allowing attackers to disclose confidential information.

The vulnerability of the Cisco Webex Meetings Desktop App software relates to the lack of protection for sensitive data. Exploiting this vulnerability could allow an attacker to disclose confidential information...

5.5CVSS6.2AI score0.00351EPSS
SaveExploits0References3Affected Software1
ThreatPost
ThreatPost
added 2020/07/01 9:2 p.m.822 views

Cisco Warns of High-Severity Bug in Small Business Switch Lineup

Cisco Systems is warning of a high-severity flaw affecting more than a half-dozen of its small business switches. The flaw could allow remote, unauthenticated attackers to access the switches’ management interfaces with administrative privileges. Specifically affected are Series Smart Switches,...

10CVSS0.24563EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2020/07/01 12:0 a.m.32 views

Cisco Webex Meetings Desktop App for Windows Shared Memory Information Disclosure (cisco-sa-webex-client-NBmqM9vt)

According to its self-reported version, Cisco Webex Meetings Desktop App for Windows is affected by an information disclosure vulnerability due to unsafe usage of shared memory. An authenticated, local attacker can exploit this, by running an application on the local system tha tis designed to re...

5.5CVSS6.1AI score0.00351EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2020/07/01 12:0 a.m.57 views

Cisco Webex Meetings Desktop App URL Filtering Arbitrary Program Execution (cisco-sa-webex-client-url-fcmpdfVY)

According to its self-reported version, Cisco Webex Meetings Desktop App is affected by a vulnerability due to improper validation of input that is supplied to application URLs. An unauthenticated, remote attacker can exploit this, by persuading a user to follow a malicious URL, in order to execu...

7.6CVSS7.6AI score0.04117EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/06/30 12:0 a.m.8 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from insufficient validation of input data. This allows a malicious actor to trigger a service failure.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

3.3CVSS5.4AI score0.014EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/06/30 12:0 a.m.13 views

The vulnerability of the software update service for Cisco Webex Meetings Desktop App on Mac operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the software update service for the Cisco Webex Meetings Desktop App on Mac operating systems is related to authentication errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially created website...

9.3CVSS8.1AI score0.03797EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/30 12:0 a.m.9 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from insufficient validation of input data. This allows a malicious actor to trigger a service failure.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

4.9CVSS5.4AI score0.00658EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/06/30 12:0 a.m.10 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from insufficient validation of input data. This allows a malicious actor to trigger a service failure.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

3.3CVSS5.4AI score0.00658EPSS
SaveExploits0References3Affected Software2
Tenable Nessus
Tenable Nessus
added 2020/06/19 12:0 a.m.16 views

Cisco Webex Meetings Desktop App Installed (Mac OS X)

Binary data macosxciscowebexmeetingsdesktopappinstalled.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/06/19 12:0 a.m.31 views

Cisco Webex Meetings Desktop App for Mac Update Feature Code Execution (cisco-sa-webex-client-mac-X7vp65BL)

According to its self-reported version, Cisco Webex Meetings Desktop App for Mac is affected by a remote code execution vulnerability due to improper validation of cryptographic protections on files that are downloaded by the application as part of a software update. An unauthenticated, remote...

9.3CVSS8.6AI score0.03797EPSS
SaveExploits0References3
HackRead
HackRead
added 2020/06/18 9:16 p.m.32 views

WebEx vulnerability lets hackers impersonate & download meetings

By Sudais Asif WebEx is a video conferencing tool powered by CISCO. This is a post from HackRead.com Read the original post: WebEx vulnerability lets hackers impersonate & download meetings...

2.9AI score
SaveExploits0
ThreatPost
ThreatPost
added 2020/06/18 4:18 p.m.206 views

Cisco Webex, Router Bugs Allow Code Execution

Cisco is warning of three high-severity flaws in its popular Webex web conferencing app, including one that could allow an unauthenticated attacker to remotely execute code on impacted systems. Beyond Webex, the networking giant on Wednesday also patched a slew of bugs across several products,...

9.3CVSS0.9AI score0.05757EPSS
SaveExploits1References17
NVD
NVD
added 2020/06/18 3:15 a.m.19 views

CVE-2020-3361

A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to gain unauthorized access to a vulnerable Webex site. The vulnerability is due to improper handling of authentication tokens by a vulnerable Webex site. An attacker could...

9.8CVSS0.02364EPSS
SaveExploits0References1
OSV
OSV
added 2020/06/18 3:15 a.m.7 views

CVE-2020-3361

A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to gain unauthorized access to a vulnerable Webex site. The vulnerability is due to improper handling of authentication tokens by a vulnerable Webex site. An attacker could...

9.8CVSS5.8AI score0.02364EPSS
SaveExploits0References1
NVD
NVD
added 2020/06/18 3:15 a.m.21 views

CVE-2020-3347

A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. The vulnerability is due to unsafe usage of shared memory that is used by the affected software. An attacker with permissions...

5.5CVSS0.00351EPSS
SaveExploits0References1
Rows per page
Query Builder