EUVD-2018-19289

Malware in sbrugna...

EUVD-2018-19290

Malware in sbrugna...

Polycom QDX 6000 Cross-Site Request Forgery Vulnerability

Polycom QDX 6000 devices is a video conferencing endpoint device from Polycom, Inc.Web application interface is one of the Web application interfaces. A cross-site request forgery vulnerability exists in the web application interface in Polycom QDX 6000 devices. A remote attacker could use this...

Polycom QDX 6000 Cross-Site Scripting Vulnerability

The Polycom QDX 6000 devices is a video conferencing endpoint device from Polycom. A cross-site scripting vulnerability exists in the Web application feature of the Polycom QDX 6000 devices. A remote attacker can exploit this vulnerability to execute arbitrary Javascript code in a user's web...

Cross site scripting

Stored XSS exists on Polycom QDX 6000 devices...

CVE-2018-7565

CSRF exists on Polycom QDX 6000 devices...

Cross site request forgery (csrf)

CSRF exists on Polycom QDX 6000 devices...

CVE-2018-7564

Stored XSS exists on Polycom QDX 6000 devices...

CVE-2018-7565

CSRF exists on Polycom QDX 6000 devices...

CVE-2018-7565

Polycom QDX 6000 devices expose a web interface CSRF vulnerability (CVE-2018-7565) that could allow a remote attacker to change arbitrary configuration settings. The CNVD entry confirms the issue as Cross-Site Request Forgery in the web application interface, with impact described as potential ch...

CVE-2018-7564

CVE-2018-7564 is a stored XSS vulnerability in the Web application of Polycom QDX 6000 devices. The issue is documented across multiple sources (NVD/NVD CVE entry, CNVD, PRION, CVE listing) as a Cross‑Site Scripting flaw that allows arbitrary JavaScript execution in a user’s browser when interact...

CVE-2018-7564

Stored XSS exists on Polycom QDX 6000 devices...