PT-2017-8395

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.7.0 Description The issue allows remote attackers to conduct deserialization attacks. Recommendations For versions prior to 8.7.0, update to version 8.7.0 or later to resolve the issue...

PT-2017-8393

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.7.0 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors. Recommendations For versions prior to 8.7.0, update to version 8.7.0 or later ...

PT-2017-8443

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 8.7.0 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors. Recommendations For versions prior to 8.7.0, update to version 8.7.0 or later ...

CVE-2017-2957

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2957

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution...

Design/Logic Flaw

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2957

CVE-2017-2957 is an Adobe Acrobat/Reader use-after-free vulnerability in the JavaScript engine (collaboration functionality) that could lead to arbitrary code execution. Affected products and versions include Acrobat/Reader on Windows and macOS: 15.020.20042 and earlier, 15.006.30244 and earlier,...

CVE-2017-2957

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2957

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2957: Use After Free

Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine, related to collaboration functionality. Successful exploitation could lead to arbitrary code execution...

PT-2017-1162

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions prior to 15.020.20042 Adobe Acrobat Reader versions prior to 15.020.20042 Adobe Acrobat versions prior to 15.006.30244 Adobe Acrobat Reader versions prior to 15.006.30244 Adobe Acrobat versions prior to 11.0.18 Adobe...

Box.com Plugs Account Data Leakage Flaw

Box.com has changed the way it handles publicly shared accounts and folders after a researcher found confidential documents and data belonging to Box.com users via Google, Bing and other search engines. While Box.com maintains this is a case of its customers unintentionally over-sharing, it says ...

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability (cisco-sa-20161207-pca)

Cisco Prime Collaboration Assurance is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-9200

A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface. More Information: CSCut43268. Known Affected Releases: 10.51 10.6...

CVE-2016-9200

A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface. More Information: CSCut43268. Known Affected Releases: 10.51 10.6...

Cross site scripting

A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface. More Information: CSCut43268. Known Affected Releases: 10.51 10.6...

CVE-2016-9200

Cisco Prime Collaboration Assurance is affected by an XSS vulnerability in its web framework code. The issue allows an unauthenticated, remote attacker to inject scripts via web input due to insufficient input validation, potentially impacting users of the web interface. Affected releases include...

PT-2016-7696

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance versions 10.51 through 10.6 Description A vulnerability in the web framework code could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web...

CVE-2016-9200: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface. More Information: CSCut43268. Known Affected Releases: 10.51 10.6...

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability (CNVD-2016-12549)

Cisco Prime Collaboration Assurance is a video and voice services solution. A cross-site scripting vulnerability in Cisco Prime Collaboration Assurance allows remote attackers to exploit the vulnerability to inject malicious script or HTML code that, when viewed with malicious data, can obtain...