CVE-2014-9101: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Oxwall 1.7.0 build 7907 and 7906 and SkaDate Lite 2.0 build 7651 allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks or possibly have other unspecified impact v...

ISPmanager 4.2.15 Responder Local Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26503/info ISPmanager is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges on the affected computer. A successful exploit will lead to the complete...

CVE-2014-2116

Cisco Emergency Responder ER 8.6 and earlier allows remote attackers to inject web pages and modify dynamic content via unspecified parameters, aka Bug ID CSCun37882...

CVE-2014-2115

Multiple cross-site request forgery CSRF vulnerabilities in CERUserServlet pages in Cisco Emergency Responder ER 8.6 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun24250...

CVE-2014-2117

Multiple open redirect vulnerabilities in Cisco Emergency Responder ER 8.6 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters, aka Bug ID CSCun37909...

CVE-2014-2114

Cross-site scripting XSS vulnerability in UserServlet in Cisco Emergency Responder ER 8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun24384...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in CERUserServlet pages in Cisco Emergency Responder ER 8.6 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun24250...

Open redirect

Multiple open redirect vulnerabilities in Cisco Emergency Responder ER 8.6 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters, aka Bug ID CSCun37909...

Cross site scripting

Cross-site scripting XSS vulnerability in UserServlet in Cisco Emergency Responder ER 8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun24384...

Code injection

Cisco Emergency Responder ER 8.6 and earlier allows remote attackers to inject web pages and modify dynamic content via unspecified parameters, aka Bug ID CSCun37882...

CVE-2014-2114

Cross-site scripting XSS vulnerability in UserServlet in Cisco Emergency Responder ER 8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun24384...

CVE-2014-2115

Multiple cross-site request forgery CSRF vulnerabilities in CERUserServlet pages in Cisco Emergency Responder ER 8.6 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun24250...

CVE-2014-2117

Multiple open redirect vulnerabilities in Cisco Emergency Responder ER 8.6 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters, aka Bug ID CSCun37909...

CVE-2014-2115

CVE-2014-2115 affects Cisco Emergency Responder (ER) CERUserServlet pages in ER 8.6 and earlier. The root cause is insufficient CSRF protections, enabling unauthenticated, remote attackers to abuse an authenticated user’s session to perform unauthorized actions. Impact is session hijacking via CS...

CVE-2014-2114

CVE-2014-2114 concerns a cross-site scripting (XSS) vulnerability in the Cisco Emergency Responder (ER) software, specifically the UserServlet, affecting 8.6 and earlier. The issue stems from insufficient input validation on a parameter, allowing an unauthenticated, remote attacker to inject arbi...

CVE-2014-2116

Cisco Emergency Responder (ER) 8.6 and earlier is affected by CVE-2014-2116 due to insufficient input validation in the web interface. An unauthenticated, remote attacker could inject web pages and modify dynamic content by exploiting parameters in the web UI (Web page injection). This is documen...

CVE-2014-2117

CVE-2014-2117 affects Cisco Emergency Responder (ER) 8.6 and earlier. The issue arises from insufficient input validation in the ER web interface, enabling open redirects to arbitrary sites via crafted parameters. This could allow remote, unauthenticated attackers to funnel users to phishing page...

PT-2014-4490

Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder versions 8.6 and earlier Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters. Recommendations For Cisco Emergency Responder...

CVE-2014-2115: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in CERUserServlet pages in Cisco Emergency Responder ER 8.6 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun24250...

CVE-2014-2116: Improper Input Validation

Cisco Emergency Responder ER 8.6 and earlier allows remote attackers to inject web pages and modify dynamic content via unspecified parameters, aka Bug ID CSCun37882...