Cisco TelePresence Collaboration Endpoint xAPI Unauthorized Access

The vulnerability of the xAPI microprogramming software component of the Cisco TelePresence Collaboration Endpoint device relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to...

Securing Containers in Google Cloud Artifact Registry with Qualys

Container software supply chain is an area of concern for security teams in large and small enterprises because developers often make use of container images from a variety of public repositories. A single insecure container image can be instantiated several times and lead to a wide, diffused...

Zimbra Collaboration Server 9.x < 9.0.0 P2 XSS

According to its self-reported version number, Zimbra Collaboration Server is 9.x prior to 9.0.0 Patch 2. It is, therefore, affected by a cross-site scripting XSS vulnerability in the web client. An unauthenticated, remote attacker can exploit this, by convincing a user to click a specially craft...

Zimbra Collaboration Server < 8.8.15 P11 / 9.x < 9.0.0 P4 XSS

According to its self-reported version number, Zimbra Collaboration Server is below 8.8.15 Patch 11, or 9.x prior to 9.0.0 Patch 4. It is, therefore, affected by a cross-site scripting XSS vulnerability in the Webmail component. An unauthenticated, remote attacker can exploit this, by convincing ...

Zimbra Collaboration Server < 8.8.15 P10 / 9.x < 9.0.0 P3 Unrestricted Upload

According to its self-reported version number, Zimbra Collaboration Server is below 8.8.15 Patch 10, or 9.x prior to 9.0.0 Patch 3. It is, therefore, affected by an unrestricted upload vulnerability in the '/service/upload' servlet. An authenticated, remote attacker can exploit this, by uploading...

Cisco TelePresence Collaboration Endpoint Software Information Disclosure (cisco-sa-tele-info-DrEGLpDQ)

According to its self-reported version, Cisco TelePresence Collaboration Endpoint Software is affected by a vulnerability in the video endpoint API xAPI. An authenticated, remote attacker can exploit this, by accessing information that should not be accessible to users with low privileges, in ord...

CVE-2020-26086 Cisco TelePresence Collaboration Endpoint Software Information Disclosure Vulnerability

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software could allow an authenticated, remote attacker to gain access to sensitive information on an affected device. The vulnerability is due to improper storage of sensitive information on an affected...

CVE-2020-26086: Exposure of Resource to Wrong Sphere

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software could allow an authenticated, remote attacker to gain access to sensitive information on an affected device. The vulnerability is due to improper storage of sensitive information on an affected...

Cisco TelePresence Collaboration Endpoint Access Control Error Vulnerability

Cisco TelePresence Collaboration Endpoint CE is a collaboration endpoint software used in Cisco videoconferencing solutions from Cisco. An access control error vulnerability exists in the video endpoint API xAPI in Cisco TelePresence Collaboration Endpoint CE that could allow an authenticated,...

Cisco TelePresence Collaboration Endpoint Software Information Disclosure Vulnerability

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software could allow an authenticated, remote attacker to gain access to sensitive information on an affected device. The vulnerability is due to improper storage of sensitive information on an affected...

PT-2020-4624

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Collaboration Endpoint CE Software affected versions not specified Description A vulnerability in the video endpoint API xAPI could allow an authenticated, remote attacker to gain access to sensitive information on an affect...

RLSA-2020:4712 Moderate: subversion:1.10 security update

Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Security Fixes: subversion: remotely triggerable DoS vulnerability in svnserve...

Scammers Abuse Google Drive to Send Malicious Links

Scammers are leveraging a legitimate Google Drive collaboration feature to trick users into clicking on malicious links. According to reports,, the recent attack stems from Google Drive’s legitimate collaboration feature, which allows users to create push notifications or emails that invite peopl...

Onboarding During A Pandemic: Can It Really Work? New Joiner, Lily Nguyen, Shares Her Experience.

I recently joined the Sales Development APAC team, looking after the Vietnam, Thailand and Hong Kong markets. I'd already had a great impression of Akamai's culture from my interview rounds. But how would the onboarding work? I'd been looking forward to meeting new colleagues in an office...

It’s Cybersecurity Awareness Month and there is still a lot to do

October is National Cyber Security Awareness Month NCSAM. And there is still a lot to do! For the last 17 years, the National Cybersecurity Awareness Month NCSAM campaign, driven by the Department of Homeland Security, has raised awareness about the importance of cyber security across the Nation...

Unilever CISO on balancing business risks with cybersecurity

Imagine showing up to work every day knowing that your job requires protecting 160,000 employees creating more than 450 products around the world—tea, ice cream, personal care, laundry and dish soaps—across a customer base of more than two and a half billion people every day. Unilever Chief...

Unilever CISO on balancing business risks with cybersecurity

Imagine showing up to work every day knowing that your job requires protecting 160,000 employees creating more than 450 products around the world—tea, ice cream, personal care, laundry and dish soaps—across a customer base of more than two and a half billion people every day. Unilever Chief...

SQL Injection Vulnerability in Ruicheng Collaboration Office System

Hangzhou Risen lnformation Technology Co., Ltd. was founded in July 2006, the administrative headquarter is located in Hangzhou, Zhejiang Province, the company's vertical integration of the software industry chain, the focus of the industry's intelligent overall solutions to provide positioning,...

Microsoft Teams Phishing Attack Targets Office 365 Users

Researchers are warning of a phishing campaign that pretends to be an automated message from Microsoft Teams. In reality, the attack aims to steal Office 365 recipients’ login credentials. Teams is Microsoft’s popular collaboration tool, which has particularly risen in popularity among remote...

Command Execution Vulnerability in BIMe Data Collaboration Platform UE***.Net Component

Dongchen Gongyuan ProBIM was founded in 2014 as a software provider specializing in BIM cloud services. A command execution vulnerability exists in the UE.Net component of the BIMe data collaboration platform, which can be exploited by an attacker to gain control of the server...