Lucene search
K

2970 matches found

BDU FSTEC
BDU FSTEC
added 2020/10/14 12:0 a.m.2 views

The vulnerability of the user interface of Cisco Webex Meetings Server and Cisco Webex Meetings software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the software user interfaces for Cisco Webex Meetings Server and Cisco Webex Meetings is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

4.1CVSS5.5AI score0.01019EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2020/10/09 12:0 a.m.5 views

Cisco Webex Teams Windows Client DLL Hijacking Vulnerability

Cisco Webex Teams is a comprehensive communications application designed to provide you with all the necessary tools and the right environment to enhance team collaboration. A DLL hijacking vulnerability exists in the loading mechanism of specific DLLs in Cisco Webex Teams Windows clients...

8.4CVSS7.8AI score0.00568EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2020/10/09 12:0 a.m.36 views

Cisco Webex Teams for Windows DLL Hijacking (cisco-sa-webex-teams-dll-drsnH5AN)

According to its self-reported version, Cisco Webex Teams is affected by a DLL hijacking vulnerability. An authenticated, local attacker can exploit this, by crafting a malicious DLL file and placing it in a specific location, to execute arbitrary code on the target machine with the privileges of...

8.4CVSS8.3AI score0.00568EPSS
Exploits0References3
ThreatPost
ThreatPost
added 2020/10/08 5:30 p.m.65 views

Cisco Fixes High-Severity Webex, Security Camera Flaws

Cisco has issued patches for high-severity vulnerabilities plaguing its popular Webex video-conferencing system, its video surveillance IP cameras and its Identity Services Engine network administration product. Overall, Cisco on Wednesday issued the three high-severity flaws along with 11...

8.3CVSS1AI score0.0087EPSS
Exploits0References9
OSV
OSV
added 2020/10/08 5:15 a.m.0 views

CVE-2020-3535

A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker needs valid credentials on the Windows system. The vulnerability is due to...

8.4CVSS7.5AI score0.00568EPSS
Exploits0References1
NVD
NVD
added 2020/10/08 5:15 a.m.22 views

CVE-2020-3535

A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker needs valid credentials on the Windows system. The vulnerability is due to...

8.4CVSS0.00568EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2020/10/08 4:20 a.m.12 views

CVE-2020-3535 Cisco Webex Teams Client for Windows DLL Hijacking Vulnerability

A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker needs valid credentials on the Windows system. The vulnerability is due to...

7.8CVSS7.4AI score0.00568EPSS
Exploits0References1
CVE
CVE
added 2020/10/08 4:20 a.m.1452 views

CVE-2020-3535

CVE-2020-3535 – Cisco Webex Teams for Windows DLL Hijacking . A local, authenticated attacker can place a malicious DLL in a specific location; when Webex Teams launches, the DLL is loaded and code executes with the privileges of another user. The vulnerability stems from incorrect runtime handli...

8.4CVSS8.1AI score0.00568EPSS
Exploits0References1Affected Software1
NCSC
NCSC
added 2020/10/08 12:0 a.m.5 views

Vulnerability fixed in Cisco Webex Teams for Windows

Cisco has fixed a vulnerability in the Windows client of Cisco Webex Teams. The vulnerability allows a local, authenticated malicious person to execute arbitrary code execute under privileges of other local users. This requires a malicious DLL file must be placed in a specific location of the fil...

8.4CVSS7.2AI score0.00568EPSS
Exploits0
Cisco
Cisco
added 2020/10/07 4:0 p.m.27 views

Cisco Webex Teams Client for Windows DLL Hijacking Vulnerability

A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker needs valid credentials on the Windows system. The vulnerability is due to...

7.8CVSS8.1AI score0.00568EPSS
Exploits0References1
OSV
OSV
added 2020/09/23 1:15 a.m.2 views

CVE-2020-3116

A vulnerability in the way Cisco Webex applications process Universal Communications Format UCF files could allow an attacker to cause a denial of service DoS condition. The vulnerability is due to insufficient validation of UCF media files. An attacker could exploit this vulnerability by sending...

5.5CVSS6.1AI score0.00664EPSS
Exploits0References1
NVD
NVD
added 2020/09/23 1:15 a.m.23 views

CVE-2020-3116

A vulnerability in the way Cisco Webex applications process Universal Communications Format UCF files could allow an attacker to cause a denial of service DoS condition. The vulnerability is due to insufficient validation of UCF media files. An attacker could exploit this vulnerability by sending...

5.5CVSS0.00664EPSS
Exploits0References1
OSV
OSV
added 2020/09/23 1:15 a.m.3 views

CVE-2019-15283

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex...

7.8CVSS7.4AI score0.01715EPSS
Exploits0References1
OSV
OSV
added 2020/09/23 1:15 a.m.2 views

CVE-2019-15285

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex...

7.8CVSS7.4AI score0.01715EPSS
Exploits0References1
OSV
OSV
added 2020/09/23 1:15 a.m.3 views

CVE-2019-15287

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex...

7.8CVSS6.1AI score0.01715EPSS
Exploits0References1
NVD
NVD
added 2020/09/23 1:15 a.m.22 views

CVE-2019-15285

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex...

9.3CVSS0.01715EPSS
Exploits0References1
NVD
NVD
added 2020/09/23 1:15 a.m.14 views

CVE-2019-15287

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex...

9.3CVSS0.01715EPSS
Exploits0References1
NVD
NVD
added 2020/09/23 1:15 a.m.23 views

CVE-2019-15283

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex...

9.3CVSS0.01715EPSS
Exploits0References1
Prion
Prion
added 2020/09/23 1:15 a.m.16 views

Input validation

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex...

9.3CVSS7.7AI score0.01715EPSS
Exploits0References1Affected Software3
Prion
Prion
added 2020/09/23 1:15 a.m.18 views

Input validation

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities exist due to insufficient validation of certain elements with a Webex...

9.3CVSS7.7AI score0.01715EPSS
Exploits0References1Affected Software3
Rows per page
Query Builder