9324 matches found
Improper access control
The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager CDM 9.0.1 and earlier does not properly implement access control, which allows remote authenticated users to obtain sensitive number-translation information by leveraging Location Administrator...
Improper access control
The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager CDM 9.0.1 and earlier does not properly implement access control, which allows remote authenticated users to obtain sensitive user and group information by leveraging Location Administrator privileg...
CVE-2014-3279
The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager CDM 9.0.1 and earlier does not properly implement access control, which allows remote attackers to enumerate account names via a crafted URL, aka Bug IDs CSCun39631 and CSCun39643...
CVE-2014-3277
The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager CDM 9.0.1 and earlier does not properly implement access control, which allows remote authenticated users to obtain sensitive user and group information by leveraging Location Administrator privileg...
CVE-2014-3282
The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager CDM 9.0.1 and earlier does not properly implement access control, which allows remote authenticated users to obtain sensitive number-translation information by leveraging Location Administrator...
PT-2014-5178
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Domain Manager CDM versions 9.0.1 and earlier Description The Administration GUI in the web framework does not properly implement access control. This allows remote authenticated users to obtain sensitive...
PT-2014-5175
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Domain Manager CDM versions 9.0.1 and earlier Description The issue is related to improper access control implementation in the Administration GUI of the web framework in Cisco Unified Communications Domain Manager...
CVE-2014-3279: Undefined Security Weakness
The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager CDM 9.0.1 and earlier does not properly implement access control, which allows remote attackers to enumerate account names via a crafted URL, aka Bug IDs CSCun39631 and CSCun39643...
PT-2014-5173
Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Domain Manager CDM versions 9.0.1 and earlier Description The Administration GUI in the web framework does not properly implement access control. This allows remote authenticated users to obtain sensitive user and...
CVE-2014-3277: Improper Authentication
The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager CDM 9.0.1 and earlier does not properly implement access control, which allows remote authenticated users to obtain sensitive user and group information by leveraging Location Administrator privileg...
CVE-2014-3282: Undefined Security Weakness
The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager CDM 9.0.1 and earlier does not properly implement access control, which allows remote authenticated users to obtain sensitive number-translation information by leveraging Location Administrator...
CVE-2014-3872: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in the administration login page in D-Link DAP-1350 Rev. A1 with firmware 1.14 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password...
Code injection
SAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User Administration SAP CUA tables via unspecified vectors...
CVE-2014-3787
SAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User Administration SAP CUA tables via unspecified vectors...
FBI Arrests 100 Hackers linked to Blackshades Malware
On Friday, we reported about the large-scale operation of International raids launched by the FBI and other law enforcement officials in countries around the world to arrest the targeted customers of a popular Remote Administration Tool RAT called ‘Blackshades,’ which is designed to take over the...
CVE-2014-3787: Exposure of Sensitive Information to an Unauthorized Actor
SAP NetWeaver 7.20 and earlier allows remote attackers to read arbitrary SAP Central User Administration SAP CUA tables via unspecified vectors...
FBI raids BlackShades RAT Malware Customers in Europe and Australia
When it comes to crime, whether it’s an online or offline, FBI doesn't spare anyone. According to the French media reports and various announcements on underground forums by hacking groups, the FBI has started a large-scale operation of International raids with the help of local law enforcement...
CVE-2013-3514
Multiple directory traversal vulnerabilities in OpenX before 2.8.10 revision 82710 allow remote administrators to read arbitrary files via a .. dot dot in the group parameter to 1 plugin-preferences.php or 2 plugin-settings.php in www/admin, a different vulnerability than CVE-2013-7376. NOTE: thi...
Immunity Canvas: MS14_025
Name| ms14025 ---|--- CVE| CVE-2014-1812 Exploit Pack| CANVAS Description| ms14025 Notes| CVE Name: CVE-2014-1812 VENDOR: Microsoft Commandline: runmodule ms14-025 References: https://technet.microsoft.com/library/security/ms14-025 CVE Url:...
