CVE-2016-1319

Cisco Unified Communications Manager aka CallManager 9.12.10000.28, 10.52.10000.5, 10.52.12901.1, and 11.01.10000.10; Unified Communications Manager IM & Presence Service 10.52; Unified Contact Center Express 11.01; and Unity Connection 10.52 store a cleartext encryption key, which allows local...

CVE-2016-1317: Exposure of Sensitive Information to an Unauthorized Actor

Cisco Unified Communications Manager 11.50.98000.480 allows remote authenticated users to obtain sensitive database table-name and entity-name information via a direct request to an unspecified URL, aka Bug ID CSCuy11098...

PT-2016-1193

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 11.50.98000.480 Description The issue is related to a lack of protection for internal data in the system. It allows a remote attacker to obtain sensitive information about database table names and...

CVE-2016-1319: Exposure of Sensitive Information to an Unauthorized Actor

Cisco Unified Communications Manager aka CallManager 9.12.10000.28, 10.52.10000.5, 10.52.12901.1, and 11.01.10000.10; Unified Communications Manager IM & Presence Service 10.52; Unified Contact Center Express 11.01; and Unity Connection 10.52 store a cleartext encryption key, which allows local...

PT-2016-1263

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions 9.12.10000.28 through 11.01.10000.10 Unified Communications Manager IM & Presence Service version 10.52 Unified Contact Center Express version 11.01 Unity Connection version 10.52 Description The...

Cisco Video Communications Server Information Disclosure Vulnerability

Cisco Video Communications Server VCS, when utilized as part of a Jabber Guest deployment, contains an information disclosure vulnerability that could allow and unauthenticated, remote attacker to gain access to potentially sensitive information. The vulnerability exists due to a failure to...

Cisco Unified Communications Manager Information Disclosure Vulnerability

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of database tables. An attacker could exploit this vulnerability by browsing to a specific URL. An...

The vulnerability of Oracle Communications Applications’ network management and organization software allows attackers to compromise the integrity, availability, and confidentiality of information.

The vulnerability of the Oracle Communications Applications’ network management and organization software component is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, availability, and confidentiality of information by making...

CVE-2016-1308

SQL injection vulnerability in Cisco Unified Communications Manager 10.52.13900.9 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCux99227...

CVE-2016-1308

SQL injection vulnerability in Cisco Unified Communications Manager 10.52.13900.9 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCux99227...

Sql injection

SQL injection vulnerability in Cisco Unified Communications Manager 10.52.13900.9 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCux99227...

CVE-2016-1308

SQL injection vulnerability in Cisco Unified Communications Manager 10.52.13900.9 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCux99227...

CVE-2016-1308

Cisco Unified Communications Manager (UCM) 10.5 (10.5(2.13900.9)) is affected by a SQL injection vulnerability that arises from lack of input validation in the SQL database interface, allowing an authenticated, remote attacker to execute arbitrary SQL commands via a crafted URL. Public sources ti...

CVE-2016-1308: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Cisco Unified Communications Manager 10.52.13900.9 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCux99227...

PT-2016-1195

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 10.52.13900.9 Description The issue is related to a lack of protection for the SQL query structure in the system, allowing for the execution of arbitrary SQL commands via a specially crafted URL. Th...

[SECURITY] Fedora 23 Update: prosody-0.9.10-1.fc23

Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...

[SECURITY] Fedora 22 Update: prosody-0.9.10-1.fc22

Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...

Cisco Unified Communications Manager SQL Injection Vulnerability

A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote attacker to impact the confidentiality of the system by executing arbitrary SQL queries. The vulnerability is due to a lack of input validation on user-supplied input in SQL...

[SECURITY] Fedora 23 Update: openssl-1.0.2f-1.fc23

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

Police Using Planes Equipped with Dirtbox to Spy on your Cell Phones

The Anaheim Police Department of California — Home of Disneyland — admitted that they used special Cell Phone surveillance technology, known as DirtBox, mounted on aircraft to track millions of mobile users activities. More than 400 pages of new documents PDF published Wednesday revealed that Loc...