EUVD-2016-7328

Malware in sbrugna...

EUVD-2016-2405

Malware in sbrugna...

Cisco Fog Director for IOx Arbitrary File Write Vulnerability

Cisco Fog Director for IOx is an automated management platform for centralized management of multiple applications running at the network edge based on IOx an end-to-end application support system that provides application hosting capabilities from Cisco. The platform controls application setting...

CVE-2016-6405

Cisco Fog Director 1.00 for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka Bug ID CSCuz89368...

CVE-2016-6405

Cisco Fog Director 1.00 for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka Bug ID CSCuz89368...

Design/Logic Flaw

Cisco Fog Director 1.00 for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka Bug ID CSCuz89368...

CVE-2016-6405

Cisco Fog Director for IOx (version 1.0(0)) is vulnerable to an arbitrary file write via the Cartridge interface. The root cause is insufficient input validation, allowing an authenticated, remote attacker to bypass access restrictions and write/overwrite arbitrary files. Published advisories (Ci...

CVE-2016-6405

Cisco Fog Director 1.00 for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka Bug ID CSCuz89368...

PT-2016-6879

Name of the Vulnerable Software and Affected Versions Cisco Fog Director version 1.00 for IOx Description The issue allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface. Recommendations For Cisco Fog Director version 1.0...

CVE-2016-6405: Improper Input Validation

Cisco Fog Director 1.00 for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka Bug ID CSCuz89368...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in several products. Exploitation of some of these vulnerabilities could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the following Cisco Security Advisories and appl...

Cisco Fog Director for IOx Arbitrary File Write Vulnerability

A vulnerability in the Cisco Fog Director for IOx could allow an authenticated, remote attacker to write a file to arbitrary locations. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by uploading a crafted file via the Cartridge interface. ...

Cisco Fog Director Cross-Site Scripting Vulnerability

Cisco Fog Director is an automated management platform for centralized management of multiple applications running at the network edge. The platform enables control of application settings and lifecycles, and supports access to and monitoring of large-scale IoT deployments. A cross-site scripting...

CVE-2016-1306

Multiple cross-site scripting XSS vulnerabilities in Cisco Fog Director 1.00 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466...

CVE-2016-1306

Multiple cross-site scripting XSS vulnerabilities in Cisco Fog Director 1.00 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco Fog Director 1.00 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466...

CVE-2016-1306

CVE-2016-1306 covers multiple cross-site scripting (XSS) vulnerabilities in Cisco Fog Director 1.0(0). Attackers can inject arbitrary script or HTML by manipulating a crafted parameter in the web interface, enabling potential session hijacking or information disclosure when the malicious data is ...

CVE-2016-1306

Multiple cross-site scripting XSS vulnerabilities in Cisco Fog Director 1.00 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466...

CVE-2016-1306: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cisco Fog Director 1.00 allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466...

PT-2016-4698

Name of the Vulnerable Software and Affected Versions Cisco Fog Director version 1.00 Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted parameter. This can be exploited to conduct cross-site scripting XSS attacks. Recommendations For Cisco Fog...