Lucene search
+L

3306 matches found

Cvelist
Cvelist
added 2014/02/20 2:0 a.m.31 views

CVE-2014-0735

Cross-site scripting XSS vulnerability in the IP Manager Assistant IPMA interface in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum46470...

5.6AI score0.01792EPSS
SaveExploits1References4
Cisco
Cisco
added 2014/02/19 8:17 p.m.31 views

Cisco Unified Communications Manager IPMA Reflected Cross-Site Scripting Vulnerability

A vulnerability in the Cisco IP Manager Assistant IPMA interface of Cisco Unified Communications Manager Cisco Unified CM could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface on the affected system. The vulnerability is d...

4.3CVSS5.8AI score0.01792EPSS
SaveExploits1References1
Exploit DB
Exploit DB
added 2014/02/16 12:0 a.m.27 views

Office Assistant Pro 2.2.2 iOS - Local File Inclusion

Document Title: =============== Office Assistant Pro v2.2.2 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1197 Release Date: ============= 2014-02-13 Vulnerability Laboratory ID VL-ID: ==================================...

5.3AI score
SaveExploits0
NVD
NVD
added 2014/02/13 5:24 a.m.19 views

CVE-2014-0723

Cross-site scripting XSS vulnerability in the IP Manager Assistant IPMA interface in Cisco Unified Communications Manager UCM allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum05343...

4.3CVSS5.6AI score0.01161EPSS
SaveExploits0References4
NVD
NVD
added 2014/02/13 5:24 a.m.23 views

CVE-2014-0726

SQL injection vulnerability in the IP Manager Assistant IPMA interface in Cisco Unified Communications Manager UCM 10.01 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05326...

7.5CVSS8.2AI score0.01223EPSS
SaveExploits0References4
Prion
Prion
added 2014/02/13 5:24 a.m.21 views

Sql injection

SQL injection vulnerability in the IP Manager Assistant IPMA interface in Cisco Unified Communications Manager UCM 10.01 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum05326...

7.5CVSS8.9AI score0.01223EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2014/02/13 2:0 a.m.66 views

CVE-2014-0723

Cisco IP Manager Assistant (IPMA) within Cisco Unified Communications Manager (UCM) suffers a cross-site scripting (XSS) vulnerability. The issue stems from insufficient input validation in the IPMA web interface, allowing an unauthenticated, remote attacker to craft a URL that injects arbitrary ...

4.3CVSS5.8AI score0.01161EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2014/02/13 2:0 a.m.55 views

CVE-2014-0726

Cisco Unified Communications Manager IP Manager Assistant (IPMA) suffers a blind SQL injection vulnerability that allows remote, unauthenticated attackers to execute arbitrary SQL via crafted URLs. Affected product/version: UCM 10.0(1) and earlier; root cause is lack of input validation within SQ...

7.5CVSS8.6AI score0.01223EPSS
SaveExploits0References4Affected Software1
Cisco
Cisco
added 2014/02/12 7:58 p.m.24 views

Cisco Unified Communications Manager IPMA Blind SQL Injection Vulnerability

A vulnerability in the Cisco Unified Communications Manager UCM IP Manager Assistant IPMA interface could allow an unauthenticated, remote attacker to impact the integrity of the system by executing arbitrary SQL queries. The vulnerability is due to a lack of input validation on user-supplied...

4.3CVSS7AI score0.01223EPSS
SaveExploits0References1
Cisco
Cisco
added 2014/02/12 5:40 p.m.38 views

Cisco Unified Communications Manager IPMA Cross-Site Scripting Vulnerability

A vulnerability in the Cisco IP Manager Assistant IPMA interface of Cisco Unified Communications Manager UCM could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface on the affected system. The vulnerability is due to...

4.3CVSS5.6AI score0.01161EPSS
SaveExploits0References1
Check Point Advisories
Check Point Advisories
added 2014/02/03 12:0 a.m.10 views

Site-Assistant menu.php pathsversion Parameter PHP Code Execution - Ver2 (CVE-2007-0867)

A remote code execution vulnerability has been reported in Site-assistant. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.7AI score0.02785EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
added 2014/01/07 12:0 a.m.13 views

Site-Assistant menu.php pathsversion Parameter PHP Code Execution - Ver2 (CVE-2007-0867)

A remote code execution vulnerability has been reported in Site-assistant. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS7.7AI score0.02785EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2013/11/29 12:0 a.m.24 views

Greenbone Security Assistant (GSA) Detection (HTTP)

HTTP based detection of the Greenbone Security Assistant GSA. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2013/11/18 12:0 a.m.17 views

Cisco TelePresence VX Clinical Assistant WIL-A Module Reboot Admin Password Removal

Cisco TelePresence VX Clinical Assistant is affected by a password reset vulnerability. The WIL-A module causes the administrative password to be reset to a blank password every time the device is rebooted. This plugin attempts to authenticate to the device using the username 'admin' and a blank...

10CVSS5.5AI score0.02096EPSS
SaveExploits0References2
NVD
NVD
added 2013/11/08 4:47 a.m.18 views

CVE-2013-5558

The WIL-A module in Cisco TelePresence VX Clinical Assistant 1.2 before 1.21 changes the admin password to an empty password upon a reboot, which makes it easier for remote attackers to obtain access via the administrative interface, aka Bug ID CSCuj17238...

10CVSS6.7AI score0.02096EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2013/11/08 4:47 a.m.3 views

CVE-2013-5558

The WIL-A module in Cisco TelePresence VX Clinical Assistant 1.2 before 1.21 changes the admin password to an empty password upon a reboot, which makes it easier for remote attackers to obtain access via the administrative interface, aka Bug ID CSCuj17238...

10CVSS5.6AI score0.02096EPSS
SaveExploits0References2
Prion
Prion
added 2013/11/08 4:47 a.m.11 views

Default credentials

The WIL-A module in Cisco TelePresence VX Clinical Assistant 1.2 before 1.21 changes the admin password to an empty password upon a reboot, which makes it easier for remote attackers to obtain access via the administrative interface, aka Bug ID CSCuj17238...

10CVSS7.2AI score0.02096EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2013/11/08 2:0 a.m.46 views

CVE-2013-5558

CVE-2013-5558 affects Cisco TelePresence VX Clinical Assistant, WIL-A module. The advisory and Red Hat/NVD entries show that before version 1.21 (on 1.2), the admin password is reset to an empty password on every reboot, allowing an unauthenticated remote attacker to log in to the admin interface...

10CVSS6.9AI score0.02096EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2013/11/08 2:0 a.m.21 views

CVE-2013-5558

The WIL-A module in Cisco TelePresence VX Clinical Assistant 1.2 before 1.21 changes the admin password to an empty password upon a reboot, which makes it easier for remote attackers to obtain access via the administrative interface, aka Bug ID CSCuj17238...

6.7AI score0.02096EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2013/09/05 1:36 p.m.10 views

J.A.R.V.I.S : Artificial Intelligence Assistant Operating System for Hackers

A group of Indian Hackers has designed Artificial Intelligence Assistant Operating System called 'J.A.R.V.I.S' , who recognizes them, answer questions, tweet for them and Collect information, scan targets for them. Chiragh Dewan, a 18 year old student who is currently pursuing his BCA has taken t...

6.4AI score
SaveExploits0
Rows per page
Query Builder