CVE-2015-7445

CVE-2015-7445 affects IBM Multi-Enterprise Integration Gateway (versions 1.0–1.0.0.1) and B2B Advanced Communications (1.x prior to 1.0.0.4). When guest access is enabled, remote authenticated users can read error responses to disclose sensitive information. Public sources also document disclosur...

PT-2016-3782

Name of the Vulnerable Software and Affected Versions IBM Multi-Enterprise Integration Gateway versions 1.0 through 1.0.0.1 B2B Advanced Communications versions 1.x before 1.0.0.4 Description The issue allows remote authenticated users to obtain sensitive information by reading error messages in...

CVE-2015-7445: Exposure of Sensitive Information to an Unauthorized Actor

IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses...

IBM B2B Advanced Communications Information Disclosure Vulnerability

IBM B2B Advanced Communication is a communication gateway product from IBM USA. An information disclosure vulnerability exists in IBM B2B Advanced Communications versions 1.0.0.2 and 1.0.0.3. An attacker can exploit the vulnerability to obtain sensitive information in error response messages with...

CenoCipher - Easy-To-Use, End-To-End Encrypted Communications Tool

CenoCipher is a free, open-source, easy-to-use tool for exchanging secure encrypted communications over the internet. It uses strong cryptography to convert messages and files into encrypted cipher-data, which can then be sent to the recipient via regular email or any other channel available, suc...

Pacom RTU/1000 CCU/EMCS Encryption Weak Password Vulnerability

The Pacom 1000 CCU and RTU are both products of the Swedish company Pacom. The former is a set of network security panels for controlling, monitoring and maintaining remote sites and the latter is a set of security panels for controlling access control alarm systems. A security vulnerability exis...

India temporarily Bans Facebook's Free Internet Service

Facebook's Free Internet access to India has hit a hurdle: The Telecom Regulatory Authority of India TRAI has ordered the mobile carrier to temporary suspend the Facebook's Free Basics Internet program. Facebook's Free Basics is an app that allows users to access certain Internet websites,...

Adcon Telemetry A840 Telemetry Gateway Information Disclosure Vulnerability

The Adcon Telemetry A840 Telemetry Gateway is the A840 series of gateway products from Adcon Telemetry, Germany. The Adcon Telemetry A840 Telemetry Gateway does not use SSL to encrypt network layer communications, allowing remote attackers to exploit vulnerabilities to obtain information in...

Cisco Unified Communications Manager Denial of Service Vulnerability (CNVD-2015-08374)

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A security vulnerability exists in the Identi...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2015-08391)

Cisco Unified Communications Manager is the call processing component of the IP Telephony solution from Cisco. A cross-site scripting vulnerability exists in Cisco Unified Communications Manager 8.0 through 8.6. It allows remote attackers to bypass XSS protection mechanisms via crafted parameters...

Design/Logic Flaw

The WebApplications Identity Management subsystem in Cisco Unified Communications Manager 10.50.98000.88 allows remote attackers to cause a denial of service subsystem outage via invalid session tokens, aka Bug ID CSCul83786...

CVE-2015-6425

The WebApplications Identity Management subsystem in Cisco Unified Communications Manager 10.50.98000.88 allows remote attackers to cause a denial of service subsystem outage via invalid session tokens, aka Bug ID CSCul83786...

CVE-2015-6425

CVE-2015-6425 affects Cisco Unified Communications Manager 10.5(0.98000.88) Web Applications Identity Management. A remote attacker can trigger a denial-of-service by sending invalid session tokens to the Identity Management subsystem (Bug ID CSCul83786). Cisco’s advisory (CISCO-SA-20151215-UCMIM...

CVE-2015-6425

The WebApplications Identity Management subsystem in Cisco Unified Communications Manager 10.50.98000.88 allows remote attackers to cause a denial of service subsystem outage via invalid session tokens, aka Bug ID CSCul83786...

PT-2015-7246

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager version 10.50.98000.88 Description The issue allows remote attackers to cause a denial of service, resulting in a subsystem outage, by utilizing invalid session tokens. Recommendations For Cisco Unified...

CVE-2015-6425: Undefined Security Weakness

The WebApplications Identity Management subsystem in Cisco Unified Communications Manager 10.50.98000.88 allows remote attackers to cause a denial of service subsystem outage via invalid session tokens, aka Bug ID CSCul83786...

Cisco Unified Communications Manager Web Applications Identity Management Subsystem Denial of Service Vulnerability

A vulnerability in the Identity Management subsystem used by the WebApplications of Cisco Unified Communications Manager Cisco UCM software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to invalid session requests. An attacker...

CVE-2015-4206

Cisco Unified Communications Manager UCM 8.0 through 8.6 allows remote attackers to bypass an XSS protection mechanism via a crafted parameter, aka Bug ID CSCuu15266...

CVE-2015-4206

Cisco Unified Communications Manager UCM 8.0 through 8.6 allows remote attackers to bypass an XSS protection mechanism via a crafted parameter, aka Bug ID CSCuu15266...

CVE-2015-4206: Improper Neutralization of Input During Web Page Generation

Cisco Unified Communications Manager UCM 8.0 through 8.6 allows remote attackers to bypass an XSS protection mechanism via a crafted parameter, aka Bug ID CSCuu15266...