CVE-2019-15972 Cisco Unified Communications Manager SQL Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates SQL values. ...

CVE-2019-15972

CVE-2019-15972 affects Cisco Unified Communications Manager (CUCM) Web Management Interface. The issue stems from improper validation of SQL values, enabling an authenticated, remote attacker to perform SQL injection and modify or retrieve data from the underlying database. Cisco indicates softwa...

CVE-2019-4406

IBM Spectrum Protect Backup-Archive Client 7.1 and 8.1 may be vulnerable to a denial of service attack due to a timing issue between client and server TCP/IP communications. IBM X-Force ID: 162477...

Design/Logic Flaw

IBM Spectrum Protect Backup-Archive Client 7.1 and 8.1 may be vulnerable to a denial of service attack due to a timing issue between client and server TCP/IP communications. IBM X-Force ID: 162477...

CVE-2019-4406

IBM Spectrum Protect Backup-Archive Client 7.1 and 8.1 may be vulnerable to a denial of service attack due to a timing issue between client and server TCP/IP communications. IBM X-Force ID: 162477...

ROS communications-related packages buffer overflow vulnerability

ROS communications-related packages is a package related to ROS Robot Operating System communications. A buffer overflow vulnerability exists in ROS communications-related packages version 1.14.3 and earlier. The vulnerability arises when a networked system or product performs an operation in...

Unauthorized Access Vulnerability in the Employment Management System of Xi'an Zerui Communications Co.

The Employment Management System is an employment system that manages the source data of graduates, establishes a database of employers, and realizes the interoperability of information among students, schools, and employers. An unauthorized access vulnerability exists in the Employment Managemen...

CVE-2019-13566

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. A buffer overflow allows attackers to cause a denial of service and possibly execute arbitrary code via an IP address with a long hostname...

DEBIAN-CVE-2019-13566

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. A buffer overflow allows attackers to cause a denial of service and possibly execute arbitrary code via an IP address with a long hostname...

CVE-2019-13566

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. A buffer overflow allows attackers to cause a denial of service and possibly execute arbitrary code via an IP address with a long hostname...

UBUNTU-CVE-2019-13566

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. A buffer overflow allows attackers to cause a denial of service and possibly execute arbitrary code via an IP address with a long hostname...

Buffer overflow

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. A buffer overflow allows attackers to cause a denial of service and possibly execute arbitrary code via an IP address with a long hostname...

CVE-2019-13566

CVE-2019-13566 affects ROS communications-related packages (ros_comm / ros-melodic-ros-comm) up to version 1.14.3. The issue is a buffer overflow triggered by an IP address with a long hostname, leading to denial of service and potentially arbitrary code execution. No remediation details are prov...

Cisco Unified Communications Domain Manager Cross-Site Scripting Vulnerability (CNVD-2019-45003)

Cisco Unified Communications Domain Manager CUCDM is a Cisco Cisco company dedicated to unified communications solutions in the call processing components. The component has scalable, distributable, and highly available enterprise voice-over-IP call processing capabilities. A cross-site scripting...

Cisco Unified Communications Manager SQL Injection Vulnerability (CNVD-2019-42752)

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A SQL injection vulnerability...

Cisco Unified Communications Domain Manager Persistent Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Domain Manager Unified CDM could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected system. The vulnerability...

Clario: Lack of HTTPS in service communications

Summary: Lack of HTTPS in login page http://translate.kromtech.com/user/login Steps To Reproduce: http://translate.kromtech.com/user/login site, that allows accessing unencrypted of the site without SSL/TLS certificate...

Cisco Unified Communications Domain Manager CVE-2019-15968 HTML Injection Vulnerability

Description Cisco Unified Communications Domain Manager is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing...

Cisco Unified Communications Manager CVE-2019-15972 SQL Injection Vulnerability

Description Cisco Unified Communications Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit...

The vulnerability in the web interface of the Cisco Unified Communications Manager system allows a perpetrator to disclose protected information.

The vulnerability of the Cisco Unified Communications Manager web interface management interface is related to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by sending a specially crafted SQL query...