EUVD-2018-1024

Malware in sbrugna...

EUVD-2018-1306

Malware in sbrugna...

EUVD-2018-1022

Malware in sbrugna...

The vulnerability of the Cisco Jabber Client Framework for Windows software, related to data processing flaws, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Cisco Jabber Client Framework for Windows software is related to data processing flaws. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2019-12645 Cisco Jabber Client Framework for Mac Code Execution Vulnerability

A vulnerability in Cisco Jabber Client Framework JCF for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device The vulnerability is due to improper file level permissions on an affected devi...

CVE-2019-12645: Improper Input Validation

A vulnerability in Cisco Jabber Client Framework JCF for Mac Software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to execute arbitrary code on an affected device The vulnerability is due to improper file level permissions on an affected devi...

PT-2019-3259

Name of the Vulnerable Software and Affected Versions Cisco Jabber Client Framework for Mac affected versions not specified Description The issue is related to improper file level permissions, allowing an authenticated, local attacker to execute arbitrary code on an affected device. An attacker...

CVE-2018-0483

A vulnerability in Cisco Jabber Client Framework JCF could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected system. The vulnerability is due to insufficient validation of user-supplied input of an affected client. An attacker could...

CVE-2018-0483 Cisco Jabber Client Framework Instant Message Cross-Site Scripting Vulnerability

A vulnerability in Cisco Jabber Client Framework JCF could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected system. The vulnerability is due to insufficient validation of user-supplied input of an affected client. An attacker could...

CVE-2018-0449: Incorrect Permission Assignment for Critical Resource

A vulnerability in the Cisco Jabber Client Framework JCF software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to corrupt arbitrary files on an affected device that has elevated privileges. The vulnerability exists due to insecure directory...

CVE-2018-0483: Improper Neutralization of Input During Web Page Generation

A vulnerability in Cisco Jabber Client Framework JCF could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected system. The vulnerability is due to insufficient validation of user-supplied input of an affected client. An attacker could...

PT-2019-1390

Name of the Vulnerable Software and Affected Versions Cisco Jabber Client Framework affected versions not specified Description A vulnerability exists due to insufficient validation of user-supplied input, allowing an authenticated, remote attacker to conduct a cross-site scripting XSS attack. Th...

PT-2019-1381

Name of the Vulnerable Software and Affected Versions Cisco Jabber Client Framework affected versions not specified Description The issue is related to insecure directory permissions set on a directory created by the Cisco Jabber Client Framework, allowing an authenticated, local attacker to...

CVE-2018-0201

A vulnerability in Cisco Jabber Client Framework JCF could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected device. The vulnerability is due to improper neutralization of input during web page generation. An attacker could exploit...

CVE-2018-0199

A vulnerability in Cisco Jabber Client Framework JCF could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected device. The vulnerability is due to improper neutralization of script in attributes in a web page. An attacker could...

PT-2018-8664

Name of the Vulnerable Software and Affected Versions: Cisco Jabber Client Framework JCF affected versions not specified Description: A security issue in Cisco Jabber Client Framework could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an...

CVE-2018-0199

A vulnerability in Cisco Jabber Client Framework JCF could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected device. The vulnerability is due to improper neutralization of script in attributes in a web page. An attacker could...

CVE-2018-0201

A vulnerability in Cisco Jabber Client Framework JCF could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected device. The vulnerability is due to improper neutralization of input during web page generation. An attacker could exploit...

PT-2018-8666

Name of the Vulnerable Software and Affected Versions: Cisco Jabber Client Framework JCF affected versions not specified Description: A security issue exists due to improper neutralization of input during web page generation, allowing an authenticated, remote attacker to conduct a cross-site...

CVE-2018-0201: Improper Neutralization of Input During Web Page Generation

A vulnerability in Cisco Jabber Client Framework JCF could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected device. The vulnerability is due to improper neutralization of input during web page generation. An attacker could exploit...