Cisco IP Interoperability and Collaboration System Command-Line Interface Privilege Escalation Vulnerability

A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System IPICS could allow an authenticated, local attacker to elevate the privilege level associated with their session. The vulnerability is due to insufficient input validation. An attacker could...

Cisco IP Interoperability and Collaboration System Universal Media Services Unauthorized Access Vulnerability

A vulnerability in the interdevice communications interface of the Cisco IP Interoperability and Collaboration System IPICS Universal Media Services UMS could allow an unauthenticated, remote attacker to modify configuration parameters of the UMS and cause the system to become unavailable. The...

Cisco Patches Critical Vulnerability in Facility Events Response System

Cisco Systems issued a security bulletin Wednesday for a critical vulnerability found in its IP Interoperability and Collaboration System IPICS. The feature is a key part of a mechanism used by Cisco to facilitate emergency responses for “facility events.” The vulnerability CVE-2016-6397, accordi...

Cisco IP Interoperability and Collaboration System Cross-Site Scripting Vulnerability

The Cisco IP Interoperability and Collaboration System is a set of solutions that provide voice interoperability across different systems based on IP standards. A cross-site scripting vulnerability exists in Cisco IP Interoperability and Collaboration System Universal Media Services, which can be...

Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability

Cisco Hosted Collaboration Mediation Fulfillment is a suite of software for centralized management of Cisco HCS solutions. A cross-site request forgery vulnerability exists in Cisco Hosted Collaboration Mediation Fulfillment that could allow a remote attacker to construct a malicious URI, trick a...

Cisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability

Cisco Prime Collaboration Provisioning is a Web-based, next-generation communications services solution from Cisco. The solution provides IP communication services capabilities for IP telephony, voicemail, and unified communications environments. Cisco Prime Collaboration Provisioning suffers fro...

Cisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability

Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. The vulnerability is due to insufficient inpu...

Cisco IP Interoperability and Collaboration System Command-Line Interface Privilege Escalation Vulnerability

A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System IPICS could allow an authenticated, local attacker to elevate the privilege level associated with their session. The vulnerability is due to insufficient input validation. An attacker could...

MS16-121: Description of the security update for Word 2016: October 11, 2016

None None...

[SECURITY] Fedora 24 Update: moin-1.9.8-1.fc24

MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...

MS16-107: Description of the security update for Office 2016: September 13, 2016

None None...

CVE-2016-6371

Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment HCM-F 10.63 and earlier allows remote attackers to write to arbitrary files via a crafted URL, aka Bug ID CSCuz64717...

CVE-2016-6370

Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment HCM-F 10.63 and earlier allows remote authenticated users to read arbitrary files via a crafted pathname in an HTTP request, aka Bug ID CSCuz27255...

CVE-2016-6370: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment HCM-F 10.63 and earlier allows remote authenticated users to read arbitrary files via a crafted pathname in an HTTP request, aka Bug ID CSCuz27255...

CVE-2016-6371: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment HCM-F 10.63 and earlier allows remote attackers to write to arbitrary files via a crafted URL, aka Bug ID CSCuz64717...

Cisco Prime Collaboration Provisioning 9.0.x / 11.0.x < 11.1 Local Privilege Escalation (cisco-sa-20160209-pcp)

According to its self-reported version number, the remote Cisco Prime Collaboration Provisioning server is 9.0.x or 11.0.x prior to 11.1. It is, therefore, affected by a local privilege escalation vulnerability in its command line interface due to improper sanitization of user-supplied input. A...

Cisco Hosted Collaboration Mediation Fulfillment Directory Traversal Vulnerability

Cisco Hosted Collaboration Mediation Fulfillment HCM-F is a set of software for centralized management of Cisco HCS solutions from Cisco USA. The software provides configuration, management and monitoring of Cisco HCM-F services and other functions. A directory traversal vulnerability exists in...

Cisco Hosted Collaboration Mediation Fulfillment Directory Traversal Vulnerability (CNVD-2016-07110)

Cisco Hosted Collaboration Solution HCS is a cloud service that provides communication and collaboration solutions. A security vulnerability exists in the web interface of Cisco Hosted Collaboration Mediation Fulfillment. Due to the program not properly validating the HTTP URL format. An...

Cisco Hosted Collaboration Mediation Fulfillment Authenticated Directory Traversal Vulnerability

A vulnerability in the web interface of Cisco Hosted Collaboration Mediation Fulfillment could allow an authenticated, remote attacker to access arbitrary files on the system. This vulnerability allows the attacker to perform directory traversal. The vulnerability is due to a lack of proper input...

Cisco Hosted Collaboration Mediation Fulfillment Directory Traversal File System Vulnerability

A vulnerability in the web interface of Cisco Hosted Collaboration Mediation Fulfillment application could allow an unauthenticated, remote attacker to write arbitrary files to any file system location that the application server has permissions to access. The vulnerability is due to lack of prop...