EUVD-2013-6510

Malware in sbrugna...

EUVD-2014-3362

Malware in sbrugna...

EUVD-2014-3364

Malware in sbrugna...

EUVD-2014-3310

Malware in sbrugna...

EUVD-2013-1179

Malware in sbrugna...

EUVD-2015-4213

Malware in sbrugna...

EUVD-2014-3365

Malware in sbrugna...

EUVD-2014-3363

Malware in sbrugna...

EUVD-2014-0725

Malware in sbrugna...

CVE-2013-1139

The nsAPI interface in Cisco Cloud Portal 9.1 SP1 and SP2, and 9.3 through 9.3.2, does not properly check privileges, which allows remote authenticated users to obtain sensitive information via a crafted URL, aka Bug ID CSCud81134...

CVE-2015-4190: Undefined Security Weakness

Cisco Cloud Portal in Cisco Prime Service Catalog 9.4.1vortex on Cloud Portal appliances allows man-in-the-middle attackers to modify data via unspecified vectors, aka Bug ID CSCuh19683...

Cisco Cloud Portal Default SSH HOST Key Man-in-the-Middle Attack Vulnerability

Cisco Cloud Portal is a cloud portal for data center services. Cisco Cloud Portal has a security vulnerability due to the system using a default host key for SSH communication. A remote attacker could modify the target system data through a man-in-the-middle attack...

PT-2015-6449

Name of the Vulnerable Software and Affected Versions Cisco Cloud Portal in Cisco Prime Service Catalog version 9.4.1 vortex Description The issue allows man-in-the-middle attackers to modify data via unspecified vectors. Recommendations For Cisco Cloud Portal in Cisco Prime Service Catalog versi...

CVE-2014-3352

CVE-2014-3352 affects Cisco Intelligent Automation for Cloud (Cisco Cloud Portal) 2008.3_SP9 and earlier. The root cause is improper handling of certain NULL sessions, leading to an information disclosure via crafted packets (the so-called iFrame vulnerability, Bug CSCuh84801). An unauthenticated...

PT-2014-5244

Name of the Vulnerable Software and Affected Versions Cisco Intelligent Automation for Cloud aka Cisco Cloud Portal versions 2008.3 SP9 and earlier Description The issue allows remote attackers to obtain sensitive information via crafted packets, related to an "iFrame vulnerability"...

CVE-2014-3352: Improper Input Validation

Cisco Intelligent Automation for Cloud aka Cisco Cloud Portal 2008.3SP9 and earlier does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive information via crafted packets, related to an "iFrame vulnerability," aka Bug ID...

CVE-2014-3351

Cisco Intelligent Automation for Cloud aka Cisco Cloud Portal does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive information via crafted packets, aka Bug IDs CSCuh87398 and CSCuh87380...

CVE-2014-3349

Cisco Intelligent Automation for Cloud aka Cisco Cloud Portal does not validate file types during the handling of file submission, which allows remote authenticated users to upload arbitrary files via a crafted request, aka Bug ID CSCuh87410...

CVE-2014-3349

Cisco Intelligent Automation for Cloud aka Cisco Cloud Portal does not validate file types during the handling of file submission, which allows remote authenticated users to upload arbitrary files via a crafted request, aka Bug ID CSCuh87410...

CVE-2014-3351

Cisco Intelligent Automation for Cloud aka Cisco Cloud Portal does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive information via crafted packets, aka Bug IDs CSCuh87398 and CSCuh87380...