Cross site scripting

A vulnerability in the web framework code of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation...

PT-2017-2986

Name of the Vulnerable Software and Affected Versions Cisco UCS Central Software affected versions not specified Description The issue is related to insufficient input validation of commands entered in the CLI, which could allow an authenticated, local attacker to gain shell access by entering a...

Security Advisory - Multiple Vulnerabilities in MTK Platform

There are two buffer overflow vulnerabilities and one arbitrary memory write vulnerability in the camera driver of MTK platform in some Huawei smart phones. Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege an...

Cross site scripting

A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain...

CVE-2017-12212

A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain...

PT-2017-12402

Name of the Vulnerable Software and Affected Versions Cisco Unity Connection version 10.52 Description A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web...

The vulnerability of the USIM responder in the Android operating system from the CAF repository allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Android operating system from the CAF repository exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information during the processing of...

The vulnerability of the Linux kernel in the Android operating system, originating from the CAF repository, allows a hacker to cause incorrect control over the data transfer stream.

The vulnerability of the Linux operating system Android’s kernel from the CAF repository is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to improperly control the data transfer process by disabling the validation mechanisms...

CVE-2017-12706: Stack-based Buffer Overflow

A stack-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.220170817. Researchers have identified multiple vulnerabilities where there is a lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, which could...

PT-2017-3939

Name of the Vulnerable Software and Affected Versions Progress Telerik UI for ASP.NET AJAX versions prior to R2 2017 SP2 Description The issue is related to insufficient input validation in the RadAsyncUpload component, allowing remote attackers to perform arbitrary file uploads or execute...

PT-2017-3619

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to insufficient input validation in the wireless network driver of the Android operating system from the CAF repository. This can be exploited by a remote attacker to...

PT-2017-17321

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client Software version 98.8940 Description The issue is related to the WebLaunch functionality, which contains a flaw that could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS...

Cisco AnyConnect WebLaunch Cross-Site Scripting Vulnerability

The WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected software. The vulnerability is due to insufficient input...

PT-2017-3454

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 Description A Remote Code Execution issue was discovered, related to insufficient input validation in the operatorGroupSelectContent.xhtml component. This allows a remote attack...

PT-2017-3468

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 Description A Remote Code Execution issue was found in HPE Intelligent Management Center iMC PLAT, related to insufficient input validation in the smsRulesDownload.xhtml...

PT-2017-3480

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 Description A Remote Code Execution issue was discovered, related to insufficient input validation in the deviceSelect.xhtml component. This allows a remote attacker to execute...

PT-2017-3452

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 Description A Remote Code Execution issue was discovered, related to insufficient input validation in the wmiConfigContent.xhtml component. This allows a remote attacker to...

PT-2017-3438

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 Description A Remote Code Execution issue was found in HPE Intelligent Management Center iMC PLAT, related to insufficient input validation. This allows a remote attacker to...

PT-2017-3460

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 Description A Remote Code Execution issue was discovered in HPE Intelligent Management Center iMC PLAT, related to insufficient input validation in the iccSelectDymicParam.xhtml...

PT-2017-3439

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 Description The issue is related to insufficient input validation in the HPE Intelligent Management Center PLAT platform, which can be exploited by a remote attacker to execute...