CVE-2017-6659

CVE-2017-6659 concerns Cisco Prime Collaboration Assurance’s web-based management interface. A CSRF vulnerability could allow an unauthenticated, remote attacker to perform arbitrary actions on an affected device due to insufficient CSRF protections. Affected releases are 11.5(0) and 11.6. The is...

Collaborative Storytelling at Rapid7

Great ideas can come from anywhere! At Rapid7, we design and develop wonderful products we hope you think so too!. Everything here starts with stories. Storytelling matters: The ability to tell a compelling story is the defining quality of human nature. Storytelling is just as important in busine...

Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability (CNVD-2017-13764)

Cisco Prime Collaboration Assurance is a set of enterprise collaboration network management solutions from the U.S. company Cisco Cisco. A cross-site request forgery vulnerability exists in Cisco Prime Collaboration Assurance. It allows a remote attacker to hijack the authentication of arbitrary...

CVE-2017-6648

A vulnerability in the Session Initiation Protocol SIP of the Cisco TelePresence Codec TC and Collaboration Endpoint CE Software could allow an unauthenticated, remote attacker to cause a TelePresence endpoint to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerabili...

CVE-2017-6648

CVE-2017-6648 affects Cisco TelePresence Codec (TC) and Collaboration Endpoint (CE) software. An unauthenticated remote attacker can exploit a lack of flow-control in SIP to flood the device with SIP INVITE packets, causing the TelePresence endpoint to reload and suffer a DoS. Affected platforms ...

Cisco TelePresence Endpoint Denial of Service Vulnerability

Cisco TelePresence is a Cisco TelePresence solution. A security vulnerability in the session initialization protocol of the Cisco TelePresence Codec TC and Collaboration Endpoint CE software can be exploited by an attacker to cause an unintended reload of an affected endpoint, resulting in a deni...

Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. SPDX-FileCopyrightText: 2017 Greenbone AG Some text...

Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...

Support Process for Thin Client Related Issues

Thin Client Devices and related Operating Systems represent an important partnership between hardware manufacturers and Citrix in the Virtualization and Remote Workspace. When a Thin Client is part of a customer's deployment Citrix Support will troubleshoot to furthest the extent of our ability t...

Zimbra Collaboration Suite (ZCS) Directory Traversal Vulnerability

Zimbra Collaboration Suite ZCS is a collaboration software suite that includes an email server and web client. A directory traversal vulnerability exists in Zimbra Collaboration Suite ZCS, which could be exploited by an attacker to compromise the confidentiality, availability, or integrity of the...

Cisco Prime Collaboration Provisioning Multiple Directory Traversal Vulnerabilities (May 2017)

cisco prime collaboration provisioning is prone to multiple directory traversal vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Unspecified Elevation of Privilege Vulnerability in Zimbra Collaboration Suite

Zimbra Collaboration Suite ZCS is an open source collaboration suite from the US company Zimbra, which includes WebMail, Calendar, Address Book and more. An unspecified elevation of privilege vulnerability exists in Zimbra Collaboration Suite. An attacker can exploit this vulnerability to gain...

Unspecified HTML Injection Vulnerability in Zimbra Collaboration Suite

Zimbra Collaboration is a suite of email and collaboration solutions from Zimbra USA. The solution offers email, contacts, calendaring, file sharing, social networking, and more. An unspecified HTML injection vulnerability exists in Zimbra Collaboration Suite. An attacker could exploit the...

CVE-2017-6821

Directory traversal vulnerability in Zimbra Collaboration Suite aka ZCS before 8.7.6 allows attackers to have unspecified impact via unknown vectors...

CVE-2017-6813

A service provided by Zimbra Collaboration Suite ZCS before 8.7.6 fails to require needed privileges before performing a few requested operations...

CVE-2017-7288

Cross-site scripting XSS vulnerability in Zimbra Collaboration Suite ZCS before 8.7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-6813

A service provided by Zimbra Collaboration Suite ZCS before 8.7.6 fails to require needed privileges before performing a few requested operations...

CVE-2017-6821

Directory traversal vulnerability in Zimbra Collaboration Suite aka ZCS before 8.7.6 allows attackers to have unspecified impact via unknown vectors...

Directory traversal

Directory traversal vulnerability in Zimbra Collaboration Suite aka ZCS before 8.7.6 allows attackers to have unspecified impact via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Zimbra Collaboration Suite ZCS before 8.7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...