5351 matches found
CVE-2017-6648
A vulnerability in the Session Initiation Protocol SIP of the Cisco TelePresence Codec TC and Collaboration Endpoint CE Software could allow an unauthenticated, remote attacker to cause a TelePresence endpoint to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerabili...
CVE-2017-6648
CVE-2017-6648 affects Cisco TelePresence Codec (TC) and Collaboration Endpoint (CE) software. An unauthenticated remote attacker can exploit a lack of flow-control in SIP to flood the device with SIP INVITE packets, causing the TelePresence endpoint to reload and suffer a DoS. Affected platforms ...
Cisco TelePresence Endpoint Denial of Service Vulnerability
Cisco TelePresence is a Cisco TelePresence solution. A security vulnerability in the session initialization protocol of the Cisco TelePresence Codec TC and Collaboration Endpoint CE software can be exploited by an attacker to cause an unintended reload of an affected endpoint, resulting in a deni...
CVE-2017-6648: Undefined Security Weakness
A vulnerability in the Session Initiation Protocol SIP of the Cisco TelePresence Codec TC and Collaboration Endpoint CE Software could allow an unauthenticated, remote attacker to cause a TelePresence endpoint to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerabili...
PT-2017-2259
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Codec Software versions prior to 7.3.8 Cisco Collaboration Endpoint CE Software versions prior to 8.3.0 Description The issue is related to errors in resource management within the Session Initiation Protocol SIP of the...
Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability
A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. SPDX-FileCopyrightText: 2017 Greenbone AG Some text...
Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability
A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...
Support Process for Thin Client Related Issues
Thin Client Devices and related Operating Systems represent an important partnership between hardware manufacturers and Citrix in the Virtualization and Remote Workspace. When a Thin Client is part of a customer's deployment Citrix Support will troubleshoot to furthest the extent of our ability t...
Zimbra Collaboration Suite (ZCS) Directory Traversal Vulnerability
Zimbra Collaboration Suite ZCS is a collaboration software suite that includes an email server and web client. A directory traversal vulnerability exists in Zimbra Collaboration Suite ZCS, which could be exploited by an attacker to compromise the confidentiality, availability, or integrity of the...
Cisco Prime Collaboration Provisioning Multiple Directory Traversal Vulnerabilities (May 2017)
cisco prime collaboration provisioning is prone to multiple directory traversal vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...
Unspecified Elevation of Privilege Vulnerability in Zimbra Collaboration Suite
Zimbra Collaboration Suite ZCS is an open source collaboration suite from the US company Zimbra, which includes WebMail, Calendar, Address Book and more. An unspecified elevation of privilege vulnerability exists in Zimbra Collaboration Suite. An attacker can exploit this vulnerability to gain...
Unspecified HTML Injection Vulnerability in Zimbra Collaboration Suite
Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. An unspecified HTML injection vulnerability exists in Zimbra Collaboration Suite. An attacker could exploit the...
CVE-2017-7288
Cross-site scripting XSS vulnerability in Zimbra Collaboration Suite ZCS before 8.7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-6813
A service provided by Zimbra Collaboration Suite ZCS before 8.7.6 fails to require needed privileges before performing a few requested operations...
CVE-2017-6821
Directory traversal vulnerability in Zimbra Collaboration Suite aka ZCS before 8.7.6 allows attackers to have unspecified impact via unknown vectors...
CVE-2017-6813
A service provided by Zimbra Collaboration Suite ZCS before 8.7.6 fails to require needed privileges before performing a few requested operations...
CVE-2017-6821
Directory traversal vulnerability in Zimbra Collaboration Suite aka ZCS before 8.7.6 allows attackers to have unspecified impact via unknown vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Zimbra Collaboration Suite ZCS before 8.7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...