Lucene search
+L

2985 matches found

Zero Day Initiative
Zero Day Initiative
added 2019/02/11 12:0 a.m.17 views

Cisco WebEx Recorder and Player asplayback Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Cisco WebEx Recorder and Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

4.3CVSS1.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2019/02/11 12:0 a.m.11 views

Cisco WebEx Recorder and Player asplayback Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of WebEx Recorder and Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

4.3CVSS1.1AI score
SaveExploits0
NVD
NVD
added 2019/02/07 9:29 p.m.32 views

CVE-2019-1680

A vulnerability in Cisco Webex Business Suite could allow an unauthenticated, remote attacker to inject arbitrary text into a user's browser. The vulnerability is due to improper validation of input. An attacker could exploit this vulnerability by convincing a targeted user to view a malicious UR...

4.3CVSS4.8AI score0.01412EPSS
SaveExploits0References2
OSV
OSV
added 2019/02/07 9:29 p.m.7 views

CVE-2019-1680

A vulnerability in Cisco Webex Business Suite could allow an unauthenticated, remote attacker to inject arbitrary text into a user's browser. The vulnerability is due to improper validation of input. An attacker could exploit this vulnerability by convincing a targeted user to view a malicious UR...

4.3CVSS5.9AI score0.01412EPSS
SaveExploits0References2
Prion
Prion
added 2019/02/07 9:29 p.m.22 views

Input validation

A vulnerability in Cisco Webex Business Suite could allow an unauthenticated, remote attacker to inject arbitrary text into a user's browser. The vulnerability is due to improper validation of input. An attacker could exploit this vulnerability by convincing a targeted user to view a malicious UR...

4.3CVSS4.9AI score0.01412EPSS
SaveExploits0References2Affected Software2
Vulnrichment
Vulnrichment
added 2019/02/07 9:0 p.m.9 views

CVE-2019-1680 Cisco Webex Business Suite Content Injection Vulnerability

A vulnerability in Cisco Webex Business Suite could allow an unauthenticated, remote attacker to inject arbitrary text into a user's browser. The vulnerability is due to improper validation of input. An attacker could exploit this vulnerability by convincing a targeted user to view a malicious UR...

4.3CVSS7.1AI score0.01412EPSS
SaveExploits0References2
CVE
CVE
added 2019/02/07 9:0 p.m.54 views

CVE-2019-1680

The CVE-2019-1680 issue affects Cisco Webex Business Suite pre-3.0.9 where improper input validation allows an unauthenticated, remote attacker to inject arbitrary text into a user’s browser via a malicious URL, enabling content injection and potential spoofing. Connected sources corroborate the ...

4.3CVSS4.8AI score0.01412EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2019/02/07 9:0 p.m.34 views

CVE-2019-1680 Cisco Webex Business Suite Content Injection Vulnerability

A vulnerability in Cisco Webex Business Suite could allow an unauthenticated, remote attacker to inject arbitrary text into a user's browser. The vulnerability is due to improper validation of input. An attacker could exploit this vulnerability by convincing a targeted user to view a malicious UR...

4.3CVSS4.9AI score0.01412EPSS
SaveExploits0References2
OSV
OSV
added 2019/02/07 7:29 p.m.8 views

CVE-2019-1677

A vulnerability in Cisco Webex Meetings for Android could allow an unauthenticated, local attacker to perform a cross-site scripting attack against the application. The vulnerability is due to insufficient validation of the application input parameters. An attacker could exploit this vulnerabilit...

4.6CVSS6AI score0.00392EPSS
SaveExploits0References2
Prion
Prion
added 2019/02/07 7:29 p.m.21 views

Cross site scripting

A vulnerability in Cisco Webex Meetings for Android could allow an unauthenticated, local attacker to perform a cross-site scripting attack against the application. The vulnerability is due to insufficient validation of the application input parameters. An attacker could exploit this vulnerabilit...

1.9CVSS4.6AI score0.00392EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2019/02/07 7:29 p.m.26 views

CVE-2019-1677

A vulnerability in Cisco Webex Meetings for Android could allow an unauthenticated, local attacker to perform a cross-site scripting attack against the application. The vulnerability is due to insufficient validation of the application input parameters. An attacker could exploit this vulnerabilit...

5CVSS4.7AI score0.00392EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2019/02/07 7:0 p.m.10 views

CVE-2019-1677 Cisco Webex Meetings for Android Cross-Site Scripting Vulnerability

A vulnerability in Cisco Webex Meetings for Android could allow an unauthenticated, local attacker to perform a cross-site scripting attack against the application. The vulnerability is due to insufficient validation of the application input parameters. An attacker could exploit this vulnerabilit...

5CVSS6.1AI score0.00392EPSS
SaveExploits0References2
CVE
CVE
added 2019/02/07 7:0 p.m.60 views

CVE-2019-1677

Summary: CVE-2019-1677 is a cross-site scripting vulnerability in Cisco Webex Meetings for Android. An unauthenticated, local attacker could exploit insufficient validation of input parameters by sending a crafted intent, allowing script execution in the Webex app context. Affected versions: prio...

5CVSS4.7AI score0.00392EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/02/07 7:0 p.m.30 views

CVE-2019-1677 Cisco Webex Meetings for Android Cross-Site Scripting Vulnerability

A vulnerability in Cisco Webex Meetings for Android could allow an unauthenticated, local attacker to perform a cross-site scripting attack against the application. The vulnerability is due to insufficient validation of the application input parameters. An attacker could exploit this vulnerabilit...

5CVSS4.6AI score0.00392EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2019/02/07 12:0 a.m.7 views

PT-2019-2945 · Cisco · Cisco Webex Network Recording Player +1

Name of the Vulnerable Software and Affected Versions: Cisco Webex Network Recording Player versions affected versions not specified Cisco Webex Player versions affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited by sending a...

9.3CVSS8.1AI score0.01508EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2019/02/07 12:0 a.m.13 views

PT-2019-2947 · Cisco +1 · Cisco Webex Network Recording Player +2

Name of the Vulnerable Software and Affected Versions: Cisco Webex Network Recording Player for Microsoft Windows affected versions not specified Cisco Webex Player for Microsoft Windows affected versions not specified Description: The issue is related to improper validation of Advanced Recording...

9.3CVSS7.9AI score0.01452EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/02/07 12:0 a.m.9 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted ARF or...

7.8CVSS7.9AI score0.0148EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/02/07 12:0 a.m.7 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted ARF or...

7.8CVSS7.9AI score0.0148EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/02/07 12:0 a.m.7 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted ARF or...

7.8CVSS7.9AI score0.01431EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/02/07 12:0 a.m.12 views

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted ARF or WR...

7.8CVSS7.9AI score0.0148EPSS
SaveExploits0References3Affected Software3
Rows per page
Query Builder