The vulnerability of the Web interface of the Cisco Unified Communications Manager allows a perpetrator to gain access to protected information.

The vulnerability of the Cisco Unified Communications Manager web interface relates to insufficient protection for saved passwords during the loading of configuration pages. Exploiting this vulnerability could allow a malicious actor to gain access to protected information remotely...

UBUNTU-CVE-2019-5760

Insufficient checks of pointer validity in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

The vulnerability of the Web interface of the Cisco Unified Communications Manager allows a perpetrator to execute arbitrary code or gain access to protected information.

The vulnerability of the Cisco Unified Communications Manager web interface is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain access to protected information through a specially crafted malicio...

Pangea Communications Internet FAX ATA

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: Pangea Communications Equipment: Internet FAX Analog Telephone Adapter ATA Vulnerability: Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION...

Apple Releases Multiple Security Updates

Apple has released security updates to address vulnerabilities in multiple products, including the recently discovered FaceTime vulnerability. An attacker could exploit some of these vulnerabilities to take control of an affected system. The National Cybersecurity and Communications Integration...

FBI Mapping 'Joanap Malware' Victims to Disrupt the North Korean Botnet

The United States Department of Justice DoJ announced Wednesday its effort to "map and further disrupt" a botnet tied to North Korea that has infected numerous Microsoft Windows computers across the globe over the last decade. Dubbed Joanap, the botnet is believed to be part of "Hidden Cobra"—an...

[SECURITY] Fedora 28 Update: openssh-7.8p1-4.fc28

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

[SECURITY] Fedora 29 Update: openssl-1.1.1a-1.fc29

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

Oracle Communications Applications Communications Diameter Signaling Router Access Control Error Vulnerability

Oracle Communications Applications is a suite of applications for rapidly delivering and monetizing digital life communications from Oracle Corporation.Communications Diameter Signaling Router DSR is one of the Oracle Communications Diameter Signaling Router component. An access control error...

Oracle Solaris Critical Patch Update : jan2019_SRU11_4_3_5_0 (Foreshadow) (Spectre)

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated...

CVE-2019-2399

Vulnerability in the Oracle Communications Diameter Signaling Router DSR component of Oracle Communications Applications subcomponent: Security. The supported version that is affected is prior to 8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Design/Logic Flaw

Vulnerability in the Oracle Communications Diameter Signaling Router DSR component of Oracle Communications Applications subcomponent: Security. The supported version that is affected is prior to 8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2399

Vulnerability in the Oracle Communications Diameter Signaling Router DSR component of Oracle Communications Applications subcomponent: Security. The supported version that is affected is prior to 8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2399

Vulnerability in the Oracle Communications Diameter Signaling Router DSR component of Oracle Communications Applications subcomponent: Security. The supported version that is affected is prior to 8.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2399

The CVE-2019-2399 entry affects Oracle Communications Applications’ Communications Diameter Signaling Router (DSR) security subcomponent. Affected: DSRs prior to version 8.3. Root cause described as an access control issue that permits an unauthenticated, network-based attacker (via HTTP) to read...

[SECURITY] Fedora 29 Update: openssh-7.9p1-3.fc29

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

Security Bulletin: B2B Advanced Communications is Affected by Multiple Vulnerabilities in IBM Java Runtime

Summary There are multiple vulnerabilities in IBM Runtime Environment Java Technology Edition, Version 7 Service Refresh 10 Fix Pack 15 that is used by IBM B2B Advanced Communications. These issues were disclosed as part of the IBM Java SDK updates in January 2018 and April 2018. Vulnerability...

Code injection

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could...

CVE-2018-0474

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could...

CVE-2018-0474

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could...