CVE-2011-3315: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Cisco Unified Communications Manager CUCM 5.x and 6.x before 6.15SU2, 7.x before 7.15bSU2, and 8.x before 8.03, and Cisco Unified Contact Center Express aka Unified CCX or UCCX and Cisco Unified IP Interactive Voice Response Unified IP-IVR before 6.01SR1ES8,...

PT-2011-4385

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager CUCM versions 5.x through 6.x before 6.15SU2 Cisco Unified Communications Manager CUCM versions 7.x before 7.15bSU2 Cisco Unified Communications Manager CUCM versions 8.x before 8.03 Cisco Unified Contact...

Cisco Unified Communications Manager Directory Traversal Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco - file Directory Traversal

Cisco - file Directory Traversal source: https://www.securityfocus.com/bid/50372/info Multiple Cisco products are prone to a directory-traversal vulnerability. Exploiting this issue will allow an attacker to read arbitrary files from locations outside of the application's current directory. This...

CVE-2011-3559

Unspecified vulnerability in Oracle Communications Server 2.0; GlassFish Enterprise Server 2.1.1, 3.0.1, and 3.1.1; and Sun Java System App Server 8.1 and 8.2 allows remote attackers to affect availability via unknown vectors related to Web Container...

CVE-2011-3507

Unspecified vulnerability in the Oracle Communications Unified component in Oracle Sun Products Suite 7.0 allows remote authenticated users to affect integrity via unknown vectors related to Messaging Server...

CVE-2011-2327

Unspecified vulnerability in the Oracle Communications Unified component in Oracle Sun Products Suite 7.0 allows local users to affect confidentiality via unknown vectors related to Delegated Administrator...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Communications Unified component in Oracle Sun Products Suite 7.0 allows remote authenticated users to affect integrity via unknown vectors related to Messaging Server...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Communications Unified component in Oracle Sun Products Suite 7.0 allows local users to affect confidentiality via unknown vectors related to Delegated Administrator...

Design/Logic Flaw

Unspecified vulnerability in Oracle Communications Server 2.0; GlassFish Enterprise Server 2.1.1, 3.0.1, and 3.1.1; and Sun Java System App Server 8.1 and 8.2 allows remote attackers to affect availability via unknown vectors related to Web Container...

CVE-2011-3559

CVE-2011-3559 : Open vulnerability affecting Oracle GlassFish Server/Web Container components. Multiple Nessus/OpenVAS entries describe an unspecified DoS vulnerability in GlassFish/Web Container that could affect availability, with affected versions including GlassFish 2.1.1 (up to 2.1.1.14), 3....

CVE-2011-3507

CVE-2011-3507 is an unspecified vulnerability in the Oracle Communications Unified component of Oracle Sun Products Suite 7.0. The connected Nessus entries show Solaris 10 patches (137204-31/33/34/35/36/37/38) for the Messaging Server (64-bit) 7.0.5.x line, indicating the issue was addressed by c...

CVE-2011-3507

Unspecified vulnerability in the Oracle Communications Unified component in Oracle Sun Products Suite 7.0 allows remote authenticated users to affect integrity via unknown vectors related to Messaging Server...

CVE-2011-3559

Unspecified vulnerability in Oracle Communications Server 2.0; GlassFish Enterprise Server 2.1.1, 3.0.1, and 3.1.1; and Sun Java System App Server 8.1 and 8.2 allows remote attackers to affect availability via unknown vectors related to Web Container...

CVE-2011-2327

CVE-2011-2327 affects the Oracle Communications Unified component in Oracle Sun Products Suite 7.0. The vulnerability could allow local users to affect confidentiality via unknown vectors related to Delegated Administrator. The NVD entry lists a low base CVSS v2 score (2.1, Local access, Partial ...

CVE-2011-2327

Unspecified vulnerability in the Oracle Communications Unified component in Oracle Sun Products Suite 7.0 allows local users to affect confidentiality via unknown vectors related to Delegated Administrator...

Report: Obama Administration Considered Libyan Cyber-Offensive

The Obama Administration reportedly debated kicking off its latest war-effort in Libya with a cyber-offensive targeting the Qaddafi regime’s air-defense infrastructure, according to a report from the New York Times. The details of the Obama Administration’s plan remain classified, but the Times...

Informant Says Hacks, Threats Followed Release Of Occupy Wall Street E-Mail

Thomas Ryan, the independent security consultant who released a trove of e-mail communications from the Occupy Wall Street protesters, said he has been the target of numerous hacks and has received death threats after revealing information on the protestors plans to authorities. In a conversation...

CVE-2011-2327: Undefined Security Weakness

Unspecified vulnerability in the Oracle Communications Unified component in Oracle Sun Products Suite 7.0 allows local users to affect confidentiality via unknown vectors related to Delegated Administrator...

PT-2011-4487

Name of the Vulnerable Software and Affected Versions Oracle Communications Unified component in Oracle Sun Products Suite version 7.0 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to Messaging Server...