5350 matches found
PT-2013-4661
Name of the Vulnerable Software and Affected Versions Oracle Supply Chain Products Suite version 9.3.1 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to Manufacturing/Mfg Parts in the Oracle Agile...
CVE-2013-3825: Exposure of Sensitive Information to an Unauthorized Actor
Unspecified vulnerability in the Oracle Agile Product Collaboration component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Folders & Files Attachment...
CVE-2013-3824: Undefined Security Weakness
Unspecified vulnerability in the Oracle Agile Collaboration Framework component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Manufacturing/Mfg Parts...
Microsoft handed over encrypted messages key and Skype calls access to NSA
New top secret documents provided by Edward Snowden exposed that Microsoft worked hand-in-hand with the United States government and handed the NSA access to encrypted messages and built a series of backdoors into Outlook.com, Skype, and SkyDrive to ease difficulties in accessing online...
PT-2013-4356
Name of the Vulnerable Software and Affected Versions Cisco Desktop Collaboration Experience DX650 affected versions not specified Description The issue is related to a buffer overflow in an unspecified Android API, which allows attackers to execute arbitrary code. This is due to incorrect memory...
CVE-2013-3399: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in an unspecified Android API on the Cisco Desktop Collaboration Experience DX650 allows attackers to execute arbitrary code via vectors that leverage incorrect memory allocation, aka Bug IDs CSCuf93957, CSCug22352, and CSCug22462...
Cisco Desktop Collaboration Experience DX600 Series Potential Code Injection Vulnerability
A vulnerability in an underlying Android Application Programming Interface API utilized by the Cisco Desktop Collaboration Experience DX600 series endpoint could allow an authenticated, local attacker to inject code into the system. The vulnerability is due to insufficient validation of specific...
Command injection
The web framework in Cisco Prime Central for Hosted Collaboration Solution HCS Assurance provides different responses to requests for arbitrary pathnames depending on whether the pathname exists, which allows remote attackers to enumerate directories and files via a series of crafted requests, ak...
CVE-2013-3398
CVE-2013-3398 affects Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance. The web framework responds differently to requests for arbitrary pathnames, enabling unauthenticated remote attackers to enumerate directories and files. Root cause: insufficient security hardening of HTT...
CVE-2013-3398: Exposure of Sensitive Information to an Unauthorized Actor
The web framework in Cisco Prime Central for Hosted Collaboration Solution HCS Assurance provides different responses to requests for arbitrary pathnames depending on whether the pathname exists, which allows remote attackers to enumerate directories and files via a series of crafted requests, ak...
[Dradis Pro v1.7] Framework to enable effective information sharing
Dradis Pro is framework to enable effective information sharing, specially during security assessments. Dradis is a self-contained web application that provides a centralised repository of information to keep track of what has been done so far, and what is still ahead. Changelog v1.7 This is the...
Cisco Prime Central for Hosted Collaboration Solution Cross-Site Scripting Vulnerability
A vulnerability in the portal page of Cisco Prime Central for Hosted Collaboration Solution could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. The vulnerability is due to a failure to properly...
CVE-2013-3375
Cross-site scripting XSS vulnerability in the portal page in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCue23798...
Cross site scripting
Cross-site scripting XSS vulnerability in the portal page in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCue23798...
CVE-2013-3375
Cross-site scripting XSS vulnerability in the portal page in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCue23798...
CVE-2013-3375
Cisco Prime Central for Hosted Collaboration Solution contains an XSS vulnerability in its portal page (CVE-2013-3375). The issue arises from a failure to properly sanitize user-supplied input, allowing an unauthenticated, remote attacker to deliver a crafted link that injects arbitrary web scrip...
PT-2013-4333
Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution affected versions not specified Description A cross-site scripting XSS issue exists in the portal page, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2013-3375: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the portal page in Cisco Prime Central for Hosted Collaboration Solution allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCue23798...
Cisco Hosted Collaboration Mediation Excessive CPU Utilization Vulnerability
A vulnerability in the network stack of Cisco Hosted Collaboration Mediation could allow an unauthenticated, remote attacker to cause excessive CPU utilization on the affected system. The vulnerability is due to insufficient optimization of resources when the affected system is flooded with...