377 matches found
Polycom HDX Video End Points XML External Entity Denial of Service Vulnerability
Polycom HDX Video End Points video conferencing system. A denial of service vulnerability exists in Polycom HDX Video End Points. An attacker could exploit this vulnerability to cause a denial of service condition...
support.polycom.com XSS vulnerability
Vulnerable URL: http://support.polycom.com/PolycomService/knowledgebase/search.htm?searchString=a%22%3E%3C/iframe%3E%3C/div%3E%3Cscript%3Ealert%27xss%27;%3C/script%3E%3C!-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability...
polycom-web-management-interface-os-command-injection
No description provided by source...
Polycom Command Shell Authorization Bypass
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Polycom Command Shell Authorization Bypass', 'Alias' = 'pshauthbypass', 'Author' = 'Paul Haas ', module 'h00die ',...
polycom HDX系列设备默认登录控制台无需密码
No description provided by source...
Polycom VVX-Series Business Media Phones - Path Traversal Vulnerability
Exploit for hardware platform in category web applications Polycom VVX-Series Business Media Phones Path Traversal Vulnerability --Summary-- Polycom VVX-series Business Media Phones allow authenticated users to execute file path traversal attacks Polycom http://www.polycom.com --Affects-- Polycom...
Polycom VVX-Series Business Media Phones - Directory Traversal
Polycom VVX-Series Business Media Phones Path Traversal Vulnerability --Summary-- Polycom VVX-series Business Media Phones allow authenticated users to execute file path traversal attacks Polycom http://www.polycom.com --Affects-- Polycom VVX 101, 201, 300, 310, 400, 410, 500, 600, & 1500 UC...
Polycom VVX-Series Business Media Phones - Directory Traversal
Polycom VVX-Series Business Media Phones - Directory Traversal Polycom VVX-Series Business Media Phones Path Traversal Vulnerability --Summary-- Polycom VVX-series Business Media Phones allow authenticated users to execute file path traversal attacks Polycom http://www.polycom.com --Affects--...
Polycom VVX-Series Path Traversal
Polycom VVX-Series Business Media Phones Path Traversal Vulnerability --Summary-- Polycom VVX-series Business Media Phones allow authenticated users to execute file path traversal attacks Polycom http://www.polycom.com --Affects-- Polycom VVX 101, 201, 300, 310, 400, 410, 500, 600, & 1500 UC...
Polycom SoundStation/SoundPoint IP Default Credentials (HTTP)
The remote Polycom SoundStation IP web interface is using known default credentials. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later if...
Polycom BTOE Connector 2.3.0 Local Privilege Escalation
Title: Polycom BToE Connector up to version 2.3.0 allows unprivileged windows users to execute arbitrary code with SYSTEM privileges. Type of vulnerability: Privilege Escalation Exploitation vector: local Attack outcome: Code execution with SYSTEM privileges. Impact: CVSS Base Score 6,2 CVSS v2...
Arbitrary File Containment Vulnerability in Polycom's (Polycom, Inc) Polycom RMX Family of Products
Polycom's PolycomRMX family of products are multipoint video conferencing system servers that provide easy-to-manage multipoint video and integrated conferencing services for next-generation real-time media conferencing platforms. The series of products have an arbitrary file inclusion...
Cross site scripting
Cross-site scripting XSS vulnerability in Polycom RealPresence CloudAXIS Suite before 1.7.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-1516
Cross-site scripting XSS vulnerability in Polycom RealPresence CloudAXIS Suite before 1.7.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-1516
CVE-2015-1516 describes a cross-site scripting (XSS) vulnerability in Polycom RealPresence CloudAXIS Suite, present in versions before 1.7.0. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. From the connected CNVD record, affected softwa...
CVE-2015-1516
Cross-site scripting XSS vulnerability in Polycom RealPresence CloudAXIS Suite before 1.7.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-1516: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Polycom RealPresence CloudAXIS Suite before 1.7.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
PT-2015-5339
Name of the Vulnerable Software and Affected Versions Polycom RealPresence CloudAXIS Suite versions prior to 1.7.0 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved via...
Polycom RealPresence Resource Manager Information Disclosure Vulnerability
RealPresence Resource Manager software is a key component of the Polycom RealPresence platform, a robust device and software optimized for virtual environments. An information disclosure vulnerability exists in Polycom RealPresence Resource Manager, which could be exploited by an attacker to obta...
Polycom RealPresence Resource Manager Arbitrary File Deletion Vulnerability
RealPresence Resource Manager software is a key component of the Polycom RealPresence platform, a robust device and software optimized for virtual environments. An arbitrary file deletion vulnerability exists in Polycom RealPresence Resource Manager, which could be exploited by an attacker to...