CVE-2014-2116

Cisco Emergency Responder ER 8.6 and earlier allows remote attackers to inject web pages and modify dynamic content via unspecified parameters, aka Bug ID CSCun37882...

CVE-2014-2115

Multiple cross-site request forgery CSRF vulnerabilities in CERUserServlet pages in Cisco Emergency Responder ER 8.6 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun24250...

CVE-2014-2117

Multiple open redirect vulnerabilities in Cisco Emergency Responder ER 8.6 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters, aka Bug ID CSCun37909...

CVE-2014-2114

Cross-site scripting XSS vulnerability in UserServlet in Cisco Emergency Responder ER 8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun24384...

Cross site scripting

Cross-site scripting XSS vulnerability in UserServlet in Cisco Emergency Responder ER 8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun24384...

Code injection

Cisco Emergency Responder ER 8.6 and earlier allows remote attackers to inject web pages and modify dynamic content via unspecified parameters, aka Bug ID CSCun37882...

Open redirect

Multiple open redirect vulnerabilities in Cisco Emergency Responder ER 8.6 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters, aka Bug ID CSCun37909...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in CERUserServlet pages in Cisco Emergency Responder ER 8.6 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun24250...

CVE-2014-2115

Multiple cross-site request forgery CSRF vulnerabilities in CERUserServlet pages in Cisco Emergency Responder ER 8.6 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun24250...

CVE-2014-2117

CVE-2014-2117 affects Cisco Emergency Responder (ER) 8.6 and earlier. The issue arises from insufficient input validation in the ER web interface, enabling open redirects to arbitrary sites via crafted parameters. This could allow remote, unauthenticated attackers to funnel users to phishing page...

CVE-2014-2114

CVE-2014-2114 concerns a cross-site scripting (XSS) vulnerability in the Cisco Emergency Responder (ER) software, specifically the UserServlet, affecting 8.6 and earlier. The issue stems from insufficient input validation on a parameter, allowing an unauthenticated, remote attacker to inject arbi...

CVE-2014-2115

CVE-2014-2115 affects Cisco Emergency Responder (ER) CERUserServlet pages in ER 8.6 and earlier. The root cause is insufficient CSRF protections, enabling unauthenticated, remote attackers to abuse an authenticated user’s session to perform unauthorized actions. Impact is session hijacking via CS...

CVE-2014-2114

Cross-site scripting XSS vulnerability in UserServlet in Cisco Emergency Responder ER 8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun24384...

CVE-2014-2116

Cisco Emergency Responder (ER) 8.6 and earlier is affected by CVE-2014-2116 due to insufficient input validation in the web interface. An unauthenticated, remote attacker could inject web pages and modify dynamic content by exploiting parameters in the web UI (Web page injection). This is documen...

CVE-2014-2117

Multiple open redirect vulnerabilities in Cisco Emergency Responder ER 8.6 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters, aka Bug ID CSCun37909...

Cisco Emergency Responder Dynamic Content Modification Vulnerability

A vulnerability in the web interface of Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct web page injection attack against a user browser of the Cisco Emergency Responder. The vulnerability is due to insufficient input validation of several parameters. An...

Cisco Emergency Responder Cross-Site Request Forgery Vulnerability

A vulnerability in the CERUserServlet pages of the Cisco Emergency Responder Cisco ER could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack against the Cisco ER web interface. The vulnerability is due to insufficient CSRF protections on the Cisco ER w...

Cisco Emergency Responder Cross-Site Scripting Vulnerability

A vulnerability in the Cisco Emergency Responder Cisco ER UserServlet of Cisco ER Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the Cisco ER web interface. The vulnerability is due to insufficient input validation of a...

Cisco Emergency Responder Open Redirect Vulnerability

A vulnerability in the web interface of Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a web page open redirection attack against a user browser of the Cisco Emergency Responder. The vulnerability is due to insufficient input validation of several parameters...

Comcast Transparency Report

Another day, another transparency report from a company trying to put some distance between itself and the United States’ broad surveillance apparatus. Today’s report comes from Comcast, the largest Internet service provider in the U.S., who “takes customer privacy very seriously, and holds it in...