Calendar Express Search.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22578/info Calendar Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

Microsoft Outlook 97/98/2000/4/5 Address Book Spoofing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2823/info Outlook Express is the standard e-mail client that is shipped with Microsoft Windows 9x/ME/NT. The address book in Outlook Express is normally configured to make entries for all addresses that are replied to by...

Microsoft Outlook Express 5.5/6.0 S/MIME Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5944/info Microsoft Outlook Express contains an unchecked buffer in the code that generates warning messages when certain error conditions associated with digital signatures are encountered. Execution of arbitrary code in...

NCH Software Express Burn Plus 4.68 (.EBP) Project File Buffer Overflow

No description provided by source. ?!/usr/local/bin/perl NCH Software Express Burn Plus 4.68 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.68 Summary: Express Burn is a program that allows you to create and copy...

Sun Java System Messenger Express 6.1-13-15 - 'sid' Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28649/info Sun Java System Messenger Express is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...

Microsoft Outlook Express 4.x/5.x/6.0 Attachment Processing File Extension Obfuscation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13837/info Microsoft Outlook Express is prone to an attachment file extension obfuscation vulnerability that may present a risk under certain configurations. The issue manifests due to Microsoft Outlook Express behavior...

UBUNTU-CVE-2014-3471

Use-after-free vulnerability in hw/pci/pcie.c in QEMU aka Quick Emulator allows local guest OS users to cause a denial of service QEMU instance crash via hotplug and hotunplug operations of Virtio block devices...

CVE-2014-4305

Multiple SQL injection vulnerabilities in NICE Recording eXpress aka Cybertech eXpress 6.5.7 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-4308

Multiple cross-site scripting XSS vulnerabilities in NICE Recording eXpress aka Cybertech eXpress before 6.5.5 allow remote attackers to inject arbitrary web script or HTML via the 1 USRLNM parameter to myaccount/mysettings.edit.validate.asp or the frame parameter to 2...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in NICE Recording eXpress aka Cybertech eXpress before 6.5.5 allow remote attackers to inject arbitrary web script or HTML via the 1 USRLNM parameter to myaccount/mysettings.edit.validate.asp or the frame parameter to 2...

Sql injection

Multiple SQL injection vulnerabilities in NICE Recording eXpress aka Cybertech eXpress 6.5.7 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-4305

NICE Recording eXpress (aka Cybertech eXpress) 6.5.7 and earlier contains multiple SQL injection vulnerabilities. The issues allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Root cause is SQL injection in the affected application paths; explicit affected component...

CVE-2014-4308

NICE Recording eXpress (Cybertech eXpress) is affected prior to version 6.5.5 by multiple XSS vulnerabilities. The issues arise from input in the USRLNM parameter (myaccount/mysettings.edit.validate.asp) and several _ifr/ iframe.picker.* endpoints (statchannels, channelgroups, extensions, license...

CVE-2014-4308

Multiple cross-site scripting XSS vulnerabilities in NICE Recording eXpress aka Cybertech eXpress before 6.5.5 allow remote attackers to inject arbitrary web script or HTML via the 1 USRLNM parameter to myaccount/mysettings.edit.validate.asp or the frame parameter to 2...

CVE-2014-4305

Multiple SQL injection vulnerabilities in NICE Recording eXpress aka Cybertech eXpress 6.5.7 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

SEC Consult SA-20140528-0 :: Root Backdoor & Unauthenticated access to voice recordings in NICE Recording eXpress

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory 20140528-0 ======================================================================= title: Root Backdoor & Unauthenticated access to voice recordings product: NICE Recording eXpress voice recording soluti...

NICE Recording eXpress multiple security vulnerabilities

Multiple security vulnerability, including privileged backdoor access...

CVE-2014-2180

The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a crafted HTTP request, aka Bug ID CSCun74133...

CVE-2014-2180

The Cisco advisory for CVE-2014-2180 describes a vulnerability in the Document Management component of Cisco Unified Contact Center Express where insufficient parameter validation allows an authenticated, remote attacker to upload files to arbitrary filesystem locations via a crafted HTTP request...

Internet Explorer Outlook Express Address Book ActiveX Denial of Service - Ver2 (CVE-2005-4840)

A denial-of-service vulnerability has been reported in Microsoft Outlook Express Book Control. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...