PT-2016-7692

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client for Windows versions 4.32039 through 4.3748 Description A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an...

CVE-2016-9192: Undefined Security Weakness

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. More Information: CSCvb68043. Known Affected...

Cisco Catalyst Switches Network Mobility Services Protocol Port Information Disclosure Vulnerability (cisco-sa-20160413-nms)

Cisco Catalyst Switches running Cisco IOS Software releases may allow an unauthenticated, remote attacker to retrieve version information about the software release running on the device by accessing the Network Mobility Services Protocol NMSP port. SPDX-FileCopyrightText: 2016 Greenbone AG Some...

CVE-2016-6369

Cisco AnyConnect Secure Mobility Client before 4.2.05015 and 4.3.x before 4.3.02039 mishandles pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCuz92464...

CVE-2016-6369

CVE-2016-6369 affects Cisco AnyConnect Secure Mobility Client for Windows. Versions before 4.2.05015 and before 4.3.02039 mishandle pathnames/filenames during INF-based installation, allowing a local attacker to gain SYSTEM privileges via a crafted INF file (Bug CSCuz92464). Impact is local privi...

Cisco AnyConnect Secure Mobility Client Local Elevation of Privilege Vulnerability

Cisco AnyConnect Secure Mobility Client is a secure mobility client from Cisco that provides secure access to networks and applications from any device. A local elevation of privilege vulnerability exists in Cisco AnyConnect Secure Mobility Client versions prior to 4.2.05015 and 4.3.02039. A loca...

CVE-2016-6369: Undefined Security Weakness

Cisco AnyConnect Secure Mobility Client before 4.2.05015 and 4.3.x before 4.3.02039 mishandles pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCuz92464...

PT-2016-6850

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client versions prior to 4.2.05015 Cisco AnyConnect Secure Mobility Client versions 4.3.x prior to 4.3.02039 Description The issue is related to the mishandling of pathnames by the software, allowing local user...

CVE-2016-2025

HPE Service Manager 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote attackers to obtain sensitive information via unspecified vectors, related to the Web Client, Service Request Catalog, and Mobility components...

CVE-2016-2025

HPE Service Manager 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote attackers to obtain sensitive information via unspecified vectors, related to the Web Client, Service Request Catalog, and Mobility components...

CVE-2016-2025

HPE Service Manager 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote attackers to obtain sensitive information via unspecified vectors, related to the Web Client, Service Request Catalog, and Mobility components...

CVE-2016-2025: Exposure of Sensitive Information to an Unauthorized Actor

HPE Service Manager 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote attackers to obtain sensitive information via unspecified vectors, related to the Web Client, Service Request Catalog, and Mobility components...

PT-2016-4973

Name of the Vulnerable Software and Affected Versions HPE Service Manager versions 9.30 through 9.41 Description The issue allows remote attackers to obtain sensitive information via unspecified vectors, related to the Web Client, Service Request Catalog, and Mobility components. Recommendations...

The vulnerability of the Cisco IOS operating system allows a perpetrator to gain access to confidential information related to software versions.

The vulnerability of the Cisco IOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential information, including details about the software version, by querying the Network...

clients.punchmobility.com XSS vulnerability

Open Bug Bounty ID: OBB-147151 Description| Value ---|--- Affected Website:| clients.punchmobility.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cisco Catalyst Switches IOS Software Information Disclosure Vulnerability

Cisco Catalyst Switches running Cisco IOS Software is a switch product from Cisco that runs the Cisco IOS operating system. An information disclosure vulnerability exists in Cisco Catalyst Switches running Cisco IOS Software versions prior to 15.22E1 due to a failure of the program to properly...

CVE-2016-1378

Cisco IOS before 15.22E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a request to the Network Mobility Services Protocol NMSP port, aka Bug ID CSCum62591...

CVE-2016-1378

Cisco IOS before 15.22E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a request to the Network Mobility Services Protocol NMSP port, aka Bug ID CSCum62591...

CVE-2016-1378: Exposure of Sensitive Information to an Unauthorized Actor

Cisco IOS before 15.22E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a request to the Network Mobility Services Protocol NMSP port, aka Bug ID CSCum62591...

PT-2016-1742

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.22E1 Description The issue is related to a lack of protection for service data in the Cisco IOS operating system. It allows a remote attacker to obtain potentially sensitive software-version information by sendin...