CVE-2015-4292

Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(2) contains a cross-site scripting (XSS) vulnerability in its management interface caused by insufficient input filtering of user-submitted values. Exploitation would allow a remote attacker to inject arbitrary web script or HTML...

Cisco Unified Communications Manager Prime Collaboration Deployment Information Disclosure Vulnerability

A vulnerability in the Prime Collaboration Deployment of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protections of data at rest. An attacker could exploit this vulnerability by browsing to a...

Cisco Prime Central Hosted Collaboration Solution Cross-Site Scripting Vulnerability

A vulnerability in the HTTP web-based management interface of the Cisco Prime Central for Hosted Collaboration Solution PC4HCS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. The vulnerability...

Burp Suite Professional v1.6.23 - The Leading Toolkit for Web Application Security Testing

Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application's attack surface, through to finding and exploiting security...

CVE-2015-1980

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors...

Cisco Prime Collaboration Assurance Web Interface Denial of Service Vulnerability

Cisco Prime Collaboration provides IT staff with a single unified management console for the vast majority of Cisco collaboration products. A security vulnerability in the Cisco Prime Collaboration Assurance Web interface allows remote users to submit special requests to destabilize the WEB...

CVE-2015-4280

Cisco Prime Collaboration Assurance 10.0 allows remote attackers to cause a denial of service HTTP service outage via a crafted HTTP request, aka Bug ID CSCum38844...

Design/Logic Flaw

Cisco Prime Collaboration Assurance 10.0 allows remote attackers to cause a denial of service HTTP service outage via a crafted HTTP request, aka Bug ID CSCum38844...

CVE-2015-4280

Cisco Prime Collaboration Assurance 10.0 is affected by CVE-2015-4280. The vulnerability arises from improper handling of crafted HTTP requests to the web interface, allowing a remote, unauthenticated attacker to cause the web UI to become unresponsive (DoS). Impact is described as partial availa...

CVE-2015-4280

Cisco Prime Collaboration Assurance 10.0 allows remote attackers to cause a denial of service HTTP service outage via a crafted HTTP request, aka Bug ID CSCum38844...

Cisco Prime Collaboration Assurance Web Interface Denial of Service Vulnerability

A vulnerability in the web interface of Cisco Prime Collaboration Assurance could allow a remote, unauthenticated attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of a crafted HTTP request. An unauthenticated, remote attacker could exploit this...

Cisco Hosted Collaboration Solution Cross-Site Scripting Vulnerability

Cisco Hosted Collaboration Solution HCS is a suite of hosted collaboration solutions from the U.S. company Cisco Cisco. The solution includes Cisco TelePresence, Customer Collaboration Contact Center and Unified Communications products to support customers in the public cloud, private cloud and...

SO Planning 1.32 - Multiple Vulnerabilities

SO Planning 1.32 - Multiple Vulnerabilities SOPlanning - Simple Online Planning Tool multiple vulnerabilities CVEs: CVE-2014-8673, CVE-2014-8674, CVE-2014-8675, CVE-2014-8676, CVE-2014-8677 Vendor: http://www.soplanning.org/ Product: SOPlanning - Simple Online Planning Version affected: 1.32 and...

CVE-2015-4260

CVE-2015-4260 affects Cisco Hosted Collaboration Solution 10.6(1) with an XSS flaw exploitable via a crafted URL parameter. Root cause: insufficient validation of user-supplied URL values leading to arbitrary script execution in the attacker’s target session. Affected product/function: Cisco HCS ...

CVE-2015-4260

Cross-site scripting XSS vulnerability in Cisco Hosted Collaboration Solution 10.61 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCuu14862...

Cisco Hosted Collaboration Solution Cross-Site Scripting Vulnerability

A vulnerability in Cisco Hosted Collaboration Solution could allow an unauthenticated, remote attacker to perform cross-site scripting XSS attacks. The vulnerability is due to insufficient validation of a user-supplied value. An attacker could exploit this vulnerability by convincing a user to...

SQL Injection Vulnerability in MediaTek's Collaboration Office Management Platform

The Lianda Power collaborative office management platform is an office system developed by ASP.NET, and the customer involves a number of units such as pharmaceuticals, schools, and administrative units. An SQL injection vulnerability exists in the sTypeName parameter on the...

CVE-2015-4188

SQL injection vulnerability in the Manager interface in Cisco Prime Collaboration 10.51 allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug IDs CSCuu29910, CSCuu29928, and CSCuu59104...

Sql injection

SQL injection vulnerability in the Manager interface in Cisco Prime Collaboration 10.51 allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug IDs CSCuu29910, CSCuu29928, and CSCuu59104...

CVE-2015-4188

SQL injection vulnerability in the Manager interface in Cisco Prime Collaboration 10.51 allows remote attackers to execute arbitrary SQL commands via a crafted URL, aka Bug IDs CSCuu29910, CSCuu29928, and CSCuu59104...