CVE-2018-0458

CVE-2018-0458 affects Cisco Prime Collaboration Assurance (PCA) web-based management interface. The vulnerability stems from insufficient validation of user-supplied input, enabling unauthenticated, remote attackers to conduct a cross-site scripting (XSS) attack by tricking a user into clicking a...

CVE-2018-15389 Cisco Prime Collaboration Provisioning Intermittent Hard-Coded Password Vulnerability

A vulnerability in the install function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to access the administrative web interface using a default hard-coded username and password that are used during install. The vulnerability is due to a hard-coded...

CVE-2018-15401

The CVE-2018-15401 entry concerns Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) with a vulnerability in its web-based management interface due to insufficient CSRF protections. A remote, unauthenticated attacker could coerce a logged-in user to perform arbitrary actions on the affected...

CVE-2018-15389 Cisco Prime Collaboration Provisioning Intermittent Hard-Coded Password Vulnerability

A vulnerability in the install function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to access the administrative web interface using a default hard-coded username and password that are used during install. The vulnerability is due to a hard-coded...

PT-2018-13013

Name of the Vulnerable Software and Affected Versions Cisco Hosted Collaboration Mediation Fulfillment affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF...

CVE-2018-0458: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

PT-2018-8841

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance affected versions not specified Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

CVE-2018-15389: Use of Hard-coded Credentials

A vulnerability in the install function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to access the administrative web interface using a default hard-coded username and password that are used during install. The vulnerability is due to a hard-coded...

CVE-2018-15401: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficie...

CVE-2018-17872

Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Insecure Permissions...

Information disclosure

Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Incorrect Access Control...

CVE-2018-17872

Verba Collaboration Compliance and Quality Management Platform (Product by Verint/Verba) before version 9.2.1.5545 has Insecure Permissions (Improper Access Control). Public advisories and CVE entries indicate affected versions include

CVE-2018-17871

The CVE-2018-17871 entry describes an Improper Access Control (CWE-284) in Verba Collaboration Compliance and Quality Management Platform. Affected versions are before 9.2.1.5545 (tested

PT-2018-14238

Name of the Vulnerable Software and Affected Versions Verba Collaboration Compliance and Quality Management Platform versions prior to 9.2.1.5545 Description The issue is related to Incorrect Access Control, which may allow unauthorized access to certain features or data. Recommendations For...

CVE-2018-17872: Incorrect Permission Assignment for Critical Resource

Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Insecure Permissions...

CVE-2018-17871: Insufficiently Protected Credentials

Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Incorrect Access Control...

PT-2018-14239

Name of the Vulnerable Software and Affected Versions Verba Collaboration Compliance and Quality Management Platform versions prior to 9.2.1.5545 Description The issue is related to insecure permissions in the Verba Collaboration Compliance and Quality Management Platform. Recommendations For...

Cisco Prime Collaboration Provisioning Intermittent Hard-Coded Password Vulnerability

A vulnerability in the install function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to access the administrative web interface using a default hard-coded username and password that are used during install. The vulnerability is due to a hard-coded...

Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficie...

Terahertz Millimeter-Wave Scanners

Interesting article on terahertz millimeter-wave scanners and their uses to detect terrorist bombers. The heart of the device is a block of electronics about the size of a 1990s tower personal computer. It comes housed in a musician's black case, akin to the one Spinal Tap might use on tour. At t...