Lucene search
K

2970 matches found

Cvelist
Cvelist
added 2021/02/17 4:55 p.m.27 views

CVE-2021-1372 Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows Shared Memory Information Disclosure Vulnerability

A vulnerability in Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. This vulnerability is due to the unsafe usage of shared memory by the affected software. An...

5.5CVSS5.6AI score0.0041EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2021/02/17 4:55 p.m.10 views

CVE-2021-1372 Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows Shared Memory Information Disclosure Vulnerability

A vulnerability in Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. This vulnerability is due to the unsafe usage of shared memory by the affected software. An...

5.5CVSS6.4AI score0.0041EPSS
Exploits0References1
Cisco
Cisco
added 2021/02/17 4:0 p.m.64 views

Cisco Webex Meetings Cross-Site Scripting Vulnerability

A vulnerability in the web-based interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based interface of the affected service. The vulnerability is due to insufficient validation of user-supplied...

6.1CVSS6AI score0.00784EPSS
Exploits0References1
Cisco
Cisco
added 2021/02/17 4:0 p.m.58 views

Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows Shared Memory Information Disclosure Vulnerability

A vulnerability in Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. This vulnerability is due to the unsafe usage of shared memory by the affected software. An...

5.5CVSS0.6AI score0.0041EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/02/17 12:0 a.m.6 views

PT-2021-2151 · Cisco · Cisco Webex Meetings

Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings versions affected versions not specified Description: A vulnerability in the web-based interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against...

6.1CVSS6AI score0.00784EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/02/17 12:0 a.m.4 views

思科 Cisco Webex Meetings 跨站脚本漏洞

Cisco Webex Meetings provides affordable enterprise virtual meeting solutions. A cross-site scripting vulnerability exists in the web interface of Cisco Webex Meetings. The vulnerability stems from insufficient validation of user-supplied input in the web interface of the affected service. An...

6.1CVSS6.5AI score0.00784EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/02/17 12:0 a.m.4 views

Cisco Webex Meetings Desktop App Information Disclosure Vulnerability

The Cisco Webex Meetings Desktop App is a video conferencing control application for use in desktop environments from Cisco. An information disclosure vulnerability exists in the Cisco Webex Meetings Desktop App and Webex Productivity Tools, which arises from errors such as configuration during...

5.5CVSS6.1AI score0.0041EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:0 a.m.3 views

The vulnerability of the user interface of Cisco Webex Meetings Server and Cisco Webex Meetings software allows a perpetrator to insert hyperlinks into electronic invitations.

The vulnerability of the software user interfaces for Cisco Webex Meetings Server and Cisco Webex Meetings is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to insert hyperlinks into electronic invitations...

4.1CVSS5.5AI score0.0103EPSS
Exploits0References2Affected Software1
The Hacker News
The Hacker News
added 2021/02/13 4:39 a.m.93 views

Yandex Employee Caught Selling Access to Users' Email Inboxes

Russian Dutch-domiciled search engine, ride-hailing and email service provider Yandex on Friday disclosed a data breach that compromised 4,887 email accounts of its users. The company blamed the incident on an unnamed employee who had been providing unauthorized access to the users' mailboxes for...

0.1AI score
Exploits0
OSV
OSV
added 2021/02/04 5:15 p.m.3 views

CVE-2021-1221

A vulnerability in the user interface of Cisco Webex Meetings and Cisco Webex Meetings Server Software could allow an authenticated, remote attacker to inject a hyperlink into a meeting invitation email. The vulnerability is due to insufficient input validation. An attacker could exploit this...

4.1CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2021/02/04 5:15 p.m.12 views

CVE-2021-1221

A vulnerability in the user interface of Cisco Webex Meetings and Cisco Webex Meetings Server Software could allow an authenticated, remote attacker to inject a hyperlink into a meeting invitation email. The vulnerability is due to insufficient input validation. An attacker could exploit this...

4.1CVSS0.0103EPSS
Exploits0References1
Prion
Prion
added 2021/02/04 5:15 p.m.24 views

Input validation

A vulnerability in the user interface of Cisco Webex Meetings and Cisco Webex Meetings Server Software could allow an authenticated, remote attacker to inject a hyperlink into a meeting invitation email. The vulnerability is due to insufficient input validation. An attacker could exploit this...

3.5CVSS4.5AI score0.0103EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2021/02/04 4:35 p.m.18 views

CVE-2021-1221 Cisco Webex Meetings and Cisco Webex Meetings Server Software Hyperlink Injection Vulnerability

A vulnerability in the user interface of Cisco Webex Meetings and Cisco Webex Meetings Server Software could allow an authenticated, remote attacker to inject a hyperlink into a meeting invitation email. The vulnerability is due to insufficient input validation. An attacker could exploit this...

4.1CVSS4.8AI score0.0103EPSS
Exploits0References1
CVE
CVE
added 2021/02/04 4:35 p.m.58 views

CVE-2021-1221

The CVE-2021-1221 issue affects Cisco Webex Meetings and Webex Meetings Server UI. It arises from insufficient input validation that lets an authenticated, remote attacker inject a hyperlink into a meeting invitation email by entering a URL into a UI field. A successful exploit could generate an ...

4.1CVSS4.3AI score0.0103EPSS
Exploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2021/02/04 4:35 p.m.7 views

CVE-2021-1221 Cisco Webex Meetings and Cisco Webex Meetings Server Software Hyperlink Injection Vulnerability

A vulnerability in the user interface of Cisco Webex Meetings and Cisco Webex Meetings Server Software could allow an authenticated, remote attacker to inject a hyperlink into a meeting invitation email. The vulnerability is due to insufficient input validation. An attacker could exploit this...

4.1CVSS6.8AI score0.0103EPSS
Exploits0References1
NCSC
NCSC
added 2021/02/04 12:0 a.m.5 views

Vulnerability fixed in Webex Meetings and Meetings Server

A vulnerability has been fixed in Cisco Webex Meetings and Cisco Webex Meetings Server. The vulnerability allows an authenticated remote malicious party to add a rogue URL to the username field within a Webex invitation. Cisco has released updates to fix the vulnerability. More information can be...

4.1CVSS6.6AI score0.0103EPSS
Exploits0
Cisco
Cisco
added 2021/02/03 4:0 p.m.54 views

Cisco Webex Meetings and Cisco Webex Meetings Server Software Hyperlink Injection Vulnerability

A vulnerability in the user interface of Cisco Webex Meetings and Cisco Webex Meetings Server Software could allow an authenticated, remote attacker to inject a hyperlink into a meeting invitation email. The vulnerability is due to insufficient input validation. An attacker could exploit this...

4.1CVSS0.9AI score0.0103EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/02/03 12:0 a.m.3 views

Cisco WebEx Meetings Server Injection Vulnerability

Cisco WebEx Meetings Server CWMS is a multifunctional conferencing solution that includes audio, video, and Web conferencing in the WebEx Meetings Program from Cisco. An injection vulnerability exists in Cisco Webex Meetings Server Software, which originates from a vulnerability that can be...

4.1CVSS5.8AI score0.0103EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2021/02/03 12:0 a.m.3 views

PT-2021-1920 · Cisco · Cisco Webex Meetings Server +1

Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings and Cisco Webex Meetings Server Software affected versions not specified Description: A vulnerability in the user interface could allow an authenticated, remote attacker to inject a hyperlink into a meeting invitation ema...

4.1CVSS4.2AI score0.0103EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.2 views

The vulnerability of the Cisco Webex Teams collaboration software, related to errors in processing images of various symbols, allows a hacker to manipulate the names of files in the messaging interface.

The vulnerability of the Cisco Webex Teams collaboration software is related to errors in processing images of various symbols. Exploiting this vulnerability allows a malicious actor to remotely manipulate the names of files in the messaging interface...

5CVSS6.2AI score0.01352EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder