CVE-2014-2198

Cisco Unified Communications Domain Manager CDM in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to obtain access to the support and root accounts by extracting this key from a binary file found in a different installation o...

CVE-2014-3278

Technical details about CVE-2014-3278 are not publicly provided in the supplied connected documents; no specific affected product, version, impact, or fix is described. Monitor for updates.

CVE-2014-3281

CVE-2014-3281 affects Cisco’s VOSS web framework in the Unified Communications Domain Manager (CDM). The issue is an improper access control vulnerability that could allow remote attackers to view potentially sensitive user information by accessing an unspecified BVSMWeb page (Bug IDs CSCun46071/...

CVE-2014-3281

The web framework in VOSS in Cisco Unified Communications Domain Manager CDM does not properly implement access control, which allows remote attackers to obtain potentially sensitive user information by visiting an unspecified BVSMWeb web page, aka Bug IDs CSCun46071 and CSCun46101...

Improper access control

The web framework in VOSS in Cisco Unified Communications Domain Manager CDM 9.0.1 and earlier does not properly implement access control, which allows remote authenticated users to obtain potentially sensitive user information by visiting an unspecified Administration GUI web page, aka Bug IDs...

Improper access control

The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager CDM 9.0.1 and earlier does not properly implement access control, which allows remote attackers to enumerate account names via a crafted URL, aka Bug IDs CSCun39631 and CSCun39643...

CVE-2014-3283

CVE-2014-3283 describes an open redirect vulnerability in the Self‑Care Client Portal web framework of Cisco VOSS CDM (Cisco Unified Communications Domain Manager) 9.0(.1) and earlier. A crafted URL can redirect users to arbitrary sites, enabling phishing. The documents confirm the affected produ...

CVE-2014-3283

Open redirect vulnerability in Self-Care Client Portal applications in the web framework in VOSS in Cisco Unified Communications Domain Manager CDM 9.0.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka Bug ID...

CVE-2014-3279

The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager CDM 9.0.1 and earlier does not properly implement access control, which allows remote attackers to enumerate account names via a crafted URL, aka Bug IDs CSCun39631 and CSCun39643...

CVE-2014-3282

CVE-2014-3282 affects the Cisco Unified Communications Domain Manager (CDM) with VOSS, specifically the Administration GUI in the web framework of CDM 9.0(.1) and earlier. The root cause is an improper access-control implementation in the Admin GUI, allowing remote authenticated users with Locati...

Chrome OS Stable Channel Update

The Stable channel has been updated to 26.0.1410.57 Platform version: 3701.81.0 for all Chrome OS devices. This build contains a number of bug fixes and security improvements. Machines will be receiving updates over the next several days. Release highlights: Pepper Flash updated to 11.6.602.180...

Cross site scripting

Cross-site scripting XSS vulnerability in Search.php in DiMeMa CONTENTdm CDM allows remote attackers to inject arbitrary web script or HTML via a search, probably related to the CISOBOX1 parameter to results.php in CDM 4.2...

CVE-2007-4245

Cross-site scripting XSS vulnerability in Search.php in DiMeMa CONTENTdm CDM allows remote attackers to inject arbitrary web script or HTML via a search, probably related to the CISOBOX1 parameter to results.php in CDM 4.2...

CVE-2007-4245

DiMeMa CONTENTdm (CDM) 4.2 is affected by an XSS in Search.php, allowing remote attackers to inject arbitrary scripts via a search, likely tied to the CISOBOX1 parameter in results.php. The vulnerability concerns the search functionality within CDM and is documented across multiple sources as a C...