4405 matches found
Cisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability
Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. SPDX-FileCopyrightText: 2016 Greenbone AG Som...
Cisco Patches Critical Vulnerability in Facility Events Response System
Cisco Systems issued a security bulletin Wednesday for a critical vulnerability found in its IP Interoperability and Collaboration System IPICS. The feature is a key part of a mechanism used by Cisco to facilitate emergency responses for “facility events.” The vulnerability CVE-2016-6397, accordi...
Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability
Cisco Hosted Collaboration Mediation Fulfillment is a suite of software for centralized management of Cisco HCS solutions. A cross-site request forgery vulnerability exists in Cisco Hosted Collaboration Mediation Fulfillment that could allow a remote attacker to construct a malicious URI, trick a...
Cisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability
Cisco Prime Collaboration Provisioning is a Web-based, next-generation communications services solution from Cisco. The solution provides IP communication services capabilities for IP telephony, voicemail, and unified communications environments. Cisco Prime Collaboration Provisioning suffers fro...
Cisco IP Interoperability and Collaboration System Cross-Site Scripting Vulnerability
The Cisco IP Interoperability and Collaboration System is a set of solutions that provide voice interoperability across different systems based on IP standards. A cross-site scripting vulnerability exists in Cisco IP Interoperability and Collaboration System Universal Media Services, which can be...
Cisco IP Interoperability and Collaboration System Command-Line Interface Privilege Escalation Vulnerability
A vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration System IPICS could allow an authenticated, local attacker to elevate the privilege level associated with their session. The vulnerability is due to insufficient input validation. An attacker could...
Cisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability
Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. The vulnerability is due to insufficient inpu...
MS16-121: Description of the security update for Word 2016: October 11, 2016
None None...
[SECURITY] Fedora 24 Update: moin-1.9.8-1.fc24
MoinMoin is an advanced, easy to use and extensible WikiEngine with a large community of users. Said in a few words, it is about collaboration on easily editable web pages...
MS16-107: Description of the security update for Office 2016: September 13, 2016
None None...
CVE-2016-6371
Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment HCM-F 10.63 and earlier allows remote attackers to write to arbitrary files via a crafted URL, aka Bug ID CSCuz64717...
CVE-2016-6370
Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment HCM-F 10.63 and earlier allows remote authenticated users to read arbitrary files via a crafted pathname in an HTTP request, aka Bug ID CSCuz27255...
Cisco Prime Collaboration Provisioning 9.0.x / 11.0.x < 11.1 Local Privilege Escalation (cisco-sa-20160209-pcp)
According to its self-reported version number, the remote Cisco Prime Collaboration Provisioning server is 9.0.x or 11.0.x prior to 11.1. It is, therefore, affected by a local privilege escalation vulnerability in its command line interface due to improper sanitization of user-supplied input. A...
Cisco Hosted Collaboration Mediation Fulfillment Directory Traversal Vulnerability (CNVD-2016-07110)
Cisco Hosted Collaboration Solution HCS is a cloud service that provides communication and collaboration solutions. A security vulnerability exists in the web interface of Cisco Hosted Collaboration Mediation Fulfillment. Due to the program not properly validating the HTTP URL format. An...
Cisco Hosted Collaboration Mediation Fulfillment Directory Traversal Vulnerability
Cisco Hosted Collaboration Mediation Fulfillment HCM-F is a set of software for centralized management of Cisco HCS solutions from Cisco USA. The software provides configuration, management and monitoring of Cisco HCM-F services and other functions. A directory traversal vulnerability exists in...
Cisco Hosted Collaboration Mediation Fulfillment Authenticated Directory Traversal Vulnerability
A vulnerability in the web interface of Cisco Hosted Collaboration Mediation Fulfillment could allow an authenticated, remote attacker to access arbitrary files on the system. This vulnerability allows the attacker to perform directory traversal. The vulnerability is due to a lack of proper input...
Cisco Hosted Collaboration Mediation Fulfillment Directory Traversal File System Vulnerability
A vulnerability in the web interface of Cisco Hosted Collaboration Mediation Fulfillment application could allow an unauthenticated, remote attacker to write arbitrary files to any file system location that the application server has permissions to access. The vulnerability is due to lack of prop...
Multiple Cross-Site Scripting Vulnerabilities in Zimbra Collaboration
Zimbra can provide open source email server software and shared calendars. Multiple cross-site scripting vulnerabilities exist in versions of Zimbra Collaboration prior to 8.7.0. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...