EUVD-2011-0974

Malware in sbrugna...

EUVD-2013-3374

Malware in sbrugna...

EUVD-2013-3375

Malware in sbrugna...

EUVD-2013-3351

Malware in sbrugna...

EUVD-2011-0972

Malware in sbrugna...

CVE-2013-5488: Improper Input Validation

Cisco Common Services, as used in Cisco Prime LAN Management Solution LMS, Cisco Security Manager, Cisco Unified Service Monitor, and Cisco Unified Operations Manager, does not properly interact with the ActiveMQ component, which allows remote attackers to cause a denial of service memory...

CVE-2013-3439

Cross-site scripting XSS vulnerability in Cisco Unified Operations Manager allows remote attackers to inject arbitrary web script or HTML via a crafted URL in an unspecified HTTP header field, aka Bug ID CSCud80182...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Unified Operations Manager allows remote attackers to inject arbitrary web script or HTML via a crafted URL in an unspecified HTTP header field, aka Bug ID CSCud80182...

CVE-2013-3439

The CVE-2013-3439 issue affects Cisco Unified Operations Manager and is described as an HTTP header injection vulnerability that permits cross-site scripting (XSS) via a crafted URL. The root cause is improper validation of application URLs in the web interface, enabling an unauthenticated or rem...

CVE-2013-3440

Cisco Unified Operations Manager’s administrative web interface contains multiple XSS vulnerabilities (CVE-2013-3440) due to improper input validation and weak cookie protections. An unauthenticated, remote attacker could lure a user to a crafted URL to execute arbitrary script or hijack sessions...

CVE-2013-3439

Cross-site scripting XSS vulnerability in Cisco Unified Operations Manager allows remote attackers to inject arbitrary web script or HTML via a crafted URL in an unspecified HTTP header field, aka Bug ID CSCud80182...

Sql injection

SQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticated users to execute arbitrary SQL commands via an entry field, aka Bug ID CSCud80179...

CVE-2013-3440: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in Cisco Unified Operations Manager allow remote attackers to inject arbitrary web script or HTML, and obtain improperly secured cookies, via unspecified vectors, aka Bug ID CSCud80186...

PT-2013-4394

Name of the Vulnerable Software and Affected Versions Cisco Unified Operations Manager affected versions not specified Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL in an unspecified HTTP header field. Recommendations...

CVE-2013-3439: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Unified Operations Manager allows remote attackers to inject arbitrary web script or HTML via a crafted URL in an unspecified HTTP header field, aka Bug ID CSCud80182...

PT-2013-4395

Name of the Vulnerable Software and Affected Versions Cisco Unified Operations Manager affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the administrative web interface. These vulnerabilities allow remote attackers to inject...

CVE-2013-3437

Cisco Unified Operations Manager (UOM) suffers a SQL injection vulnerability in the management application (Bug CSCud80179). An authenticated remote attacker can submit crafted input via an entry field to execute arbitrary SQL commands. The issue stems from improper validation of user-supplied in...

CVE-2013-3437: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticated users to execute arbitrary SQL commands via an entry field, aka Bug ID CSCud80179...

PT-2013-4392

Name of the Vulnerable Software and Affected Versions Cisco Unified Operations Manager affected versions not specified Description The issue allows remote authenticated users to execute arbitrary SQL commands via an entry field in the management application. This is due to a SQL injection...

Cisco Unified Operations Manager SQL Injection Vulnerability

A vulnerability in the management application of the Cisco Unified Operations Manager could allow an authenticated, remote attacker to execute arbitrary Structured Query Language SQL queries. The vulnerability is due to a failure to validate user-supplied input used in SQL queries. An attacker...