Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Security" component, which allows man-in-the-middle attackers to cause a denial of service application crash via vectors...

PT-2017-1291

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.2 macOS versions prior to 10.12.2 watchOS versions prior to 3.1.3 Description The issue involves the Security component, which allows remote attackers to cause a denial of service application crash via vectors related ...

CVE-2016-7636: Improper Input Validation

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Security" component, which allows man-in-the-middle attackers to cause a denial of service application crash via vectors...

CVE-2016-9208

A vulnerability in the File Management Utility, the Download File form, and the Serviceability application of Cisco Emergency Responder could allow an authenticated, remote attacker to access files in arbitrary locations on the file system of an affected device. More Information: CSCva98951...

CVE-2016-9208

A vulnerability in the File Management Utility, the Download File form, and the Serviceability application of Cisco Emergency Responder could allow an authenticated, remote attacker to access files in arbitrary locations on the file system of an affected device. More Information: CSCva98951...

CVE-2016-6468

A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. More Information: CSCvb06663. Known Affected Releases:...

CVE-2016-6468

A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. More Information: CSCvb06663. Known Affected Releases:...

Cross site request forgery (csrf)

A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. More Information: CSCvb06663. Known Affected Releases:...

Design/Logic Flaw

A vulnerability in the File Management Utility, the Download File form, and the Serviceability application of Cisco Emergency Responder could allow an authenticated, remote attacker to access files in arbitrary locations on the file system of an affected device. More Information: CSCva98951...

CVE-2016-6468

A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. More Information: CSCvb06663. Known Affected Releases:...

CVE-2016-9208

This CVE affects Cisco Emergency Responder: the vulnerability arises from improper sanitization of user-supplied HTTP POST parameters that describe filenames in the File Management Utility, the Download File form, and the Serviceability application. An authenticated, remote attacker could travers...

CVE-2016-9208

A vulnerability in the File Management Utility, the Download File form, and the Serviceability application of Cisco Emergency Responder could allow an authenticated, remote attacker to access files in arbitrary locations on the file system of an affected device. More Information: CSCva98951...

CVE-2016-6468

The CVE-2016-6468 issue affects Cisco Emergency Responder’s web-based management interface. A CSRF vulnerability could allow an unauthenticated, remote attacker to perform arbitrary actions on an affected device due to insufficient CSRF protections. Known affected release: 11.5(1.10000.4); known ...

CVE-2016-9208: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the File Management Utility, the Download File form, and the Serviceability application of Cisco Emergency Responder could allow an authenticated, remote attacker to access files in arbitrary locations on the file system of an affected device. More Information: CSCva98951...

CVE-2016-6468: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. More Information: CSCvb06663. Known Affected Releases:...

PT-2016-7704

Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder version 11.52.10000.5 Description A vulnerability in the File Management Utility, the Download File form, and the Serviceability application could allow an authenticated, remote attacker to access files in arbitrary...

PT-2016-6940

Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder version 11.51.10000.4 Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions...

Cisco Emergency Responder Cross-Site Request Forgery Vulnerability

Cisco Emergency Responder ER is the United States Cisco Cisco a set of IP communications systems in the emergency call software. The software provides real-time location tracking database and caller location and other features. A cross-site request forgery vulnerability exists in the Web-based...

Cisco Emergency Responder Directory Traversal Vulnerability (CNVD-2016-12573)

Cisco Emergency Responder is an integral part of the Cisco IP communications system. A real-time location address tracking database and enhanced routing capabilities allow emergency calls to be routed to a responding public safety answering point based on the caller's location. A directory...

Cisco Emergency Responder Cross-Site Request Forgery Vulnerability

A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for...