Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due ...

CVE-2017-5149

An issue was discovered in St. Jude Medical Merlin@home, versions prior to Version 8.2.2 RF models: EX1150; Inductive models: EX1100; and Inductive models: EX1100 with MerlinOnDemand capability. The identities of the endpoints for the communication channel between the transmitter and St. Jude...

CVE-2016-2787

The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node, which allows remote non-whitelisted hosts to prevent runs from triggering via unspecified vectors...

CVE-2016-2787

CVE-2016-2787 affects Puppet Enterprise 2015.x (specifically 2015.3.x before 2015.3.3). The vulnerability arises from improper validation of broker node certificates in the Puppet Communications Protocol, enabling remote non-whitelisted hosts to prevent Puppet runs via unspecified vectors. The li...

CVE-2016-2787

Removed by vendor...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2017-01513)

Cisco IOS is a popular Internet operating system.Cisco Unified Communications Manager is a call-processing component of the Cisco IP telephony solution. A cross-site scripting vulnerability exists in Cisco Unified Communications Manager that stems from a failure to adequately validate user input...

Puppet Enterprise Denial of Service Vulnerability

Puppet is a set of configuration management tools based on a client/server architecture that can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Enterprise is an enterprise edition. A security vulnerability exists in the Puppet Communications...

CVE-2016-9686

Removed by vendor...

St. Jude Patches Additional Cardiac Device

St. Jude Medical has patched a vulnerability in another Merlin@home Transmitter medical device vulnerable to a man-in-the-middle attack. The medical device maker issued an update on Monday for its Merlin@home Transmitter “inductive” models, expanding the number of devices impacted by a...

ICSA-17-038-01_Sielco Sistemi Winlog SCADA Software

CVSS v3 7.2 Vendor: Sielco Sistemi Equipment: Winlog SCADA Software Vulnerability: Uncontrolled Search Path Element AFFECTED PRODUCTS The following Sielco Sistemi products are affected: Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to...

CVE-2017-3802

A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. More Information: CSCvc20679. Known Affected Releases: 12.00.99000.9. Known Fixed Release...

CVE-2017-3798

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. More Information: CSCvb97237. Known Affected Releases:...

Cross site scripting

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. More Information: CSCvb97237. Known Affected Releases:...

CVE-2017-3802

A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. More Information: CSCvc20679. Known Affected Releases: 12.00.99000.9. Known Fixed Release...

Cross site scripting

A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. More Information: CSCvc20679. Known Affected Releases: 12.00.99000.9. Known Fixed Release...

CVE-2017-3798

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. More Information: CSCvb97237. Known Affected Releases:...

CVE-2017-3798

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. More Information: CSCvb97237. Known Affected Releases:...

CVE-2017-3802

The CVE-2017-3802 entry describes a cross-site scripting (XSS) vulnerability in Cisco Unified Communications Manager (CUCM) web interface. An unauthenticated, remote attacker could exploit this to execute arbitrary script code in a user’s browser. Affected release: 12.0(0.99000.9). Fixed releases...

CVE-2017-3802

A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. More Information: CSCvc20679. Known Affected Releases: 12.00.99000.9. Known Fixed Release...

CVE-2017-3798

Cisco Unified Communications Manager is affected by CVE-2017-3798: a cross-site scripting (XSS) filter bypass in the web-based management interface that could allow an unauthenticated, remote attacker to run XSS in a user’s browser. Root cause: failure to properly invoke the XSS filter subsystems...