23 matches found
EUVD-2014-3310
Malware in sbrugna...
EUVD-2015-4213
Malware in sbrugna...
EUVD-2014-0725
Malware in sbrugna...
EUVD-2014-3364
Malware in sbrugna...
EUVD-2014-3365
Malware in sbrugna...
EUVD-2013-1179
Malware in sbrugna...
EUVD-2014-3362
Malware in sbrugna...
EUVD-2013-6510
Malware in sbrugna...
EUVD-2014-3363
Malware in sbrugna...
CVE-2013-1139
The nsAPI interface in Cisco Cloud Portal 9.1 SP1 and SP2, and 9.3 through 9.3.2, does not properly check privileges, which allows remote authenticated users to obtain sensitive information via a crafted URL, aka Bug ID CSCud81134...
Cisco Cloud Portal Default SSH HOST Key Man-in-the-Middle Attack Vulnerability
Cisco Cloud Portal is a cloud portal for data center services. Cisco Cloud Portal has a security vulnerability due to the system using a default host key for SSH communication. A remote attacker could modify the target system data through a man-in-the-middle attack...
CVE-2014-3352
CVE-2014-3352 affects Cisco Intelligent Automation for Cloud (Cisco Cloud Portal) 2008.3_SP9 and earlier. The root cause is improper handling of certain NULL sessions, leading to an information disclosure via crafted packets (the so-called iFrame vulnerability, Bug CSCuh84801). An unauthenticated...
CVE-2014-3349
Cisco Intelligent Automation for Cloud aka Cisco Cloud Portal does not validate file types during the handling of file submission, which allows remote authenticated users to upload arbitrary files via a crafted request, aka Bug ID CSCuh87410...
CVE-2014-3351
Cisco Intelligent Automation for Cloud aka Cisco Cloud Portal does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive information via crafted packets, aka Bug IDs CSCuh87398 and CSCuh87380...
CVE-2014-3351
Cisco Intelligent Automation for Cloud aka Cisco Cloud Portal does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive information via crafted packets, aka Bug IDs CSCuh87398 and CSCuh87380...
CVE-2014-3349
Cisco Intelligent Automation for Cloud aka Cisco Cloud Portal does not validate file types during the handling of file submission, which allows remote authenticated users to upload arbitrary files via a crafted request, aka Bug ID CSCuh87410...
CVE-2014-0694
Intelligent Automation for Cloud IAC in Cisco Cloud Portal 9.4.1 and earlier includes a cryptographic key in binary files, which makes it easier for remote attackers to obtain cleartext data from an arbitrary IAC installation by leveraging knowledge of this key, aka Bug IDs CSCui34764, CSCui34772...
Design/Logic Flaw
Intelligent Automation for Cloud IAC in Cisco Cloud Portal 9.4.1 and earlier includes a cryptographic key in binary files, which makes it easier for remote attackers to obtain cleartext data from an arbitrary IAC installation by leveraging knowledge of this key, aka Bug IDs CSCui34764, CSCui34772...
CVE-2014-0694
Intelligent Automation for Cloud IAC in Cisco Cloud Portal 9.4.1 and earlier includes a cryptographic key in binary files, which makes it easier for remote attackers to obtain cleartext data from an arbitrary IAC installation by leveraging knowledge of this key, aka Bug IDs CSCui34764, CSCui34772...