Lucene search
+L

432 matches found

Cvelist
Cvelist
added 2016/01/30 11:00 a.m.45 views

CVE-2016-1304

Cross-site scripting XSS vulnerability in Cisco Unity Connection 10.52.3009 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCux82596...

6AI score0.01009EPSS
SaveExploits0References2
CNVD
CNVD
added 2016/01/30 12:00 a.m.10 views

Cisco Unity Connection Cross-Site Scripting Vulnerability (CNVD-2016-00787)

Cisco Unity Connection is a voice messaging platform. A cross-site scripting vulnerability exists in Cisco Unity Connection, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user session...

6.1CVSS5.9AI score0.00773EPSS
SaveExploits0References1
Cisco
Cisco
added 2016/01/28 9:00 p.m.56 views

Cisco Unity Connection User Search Cross-Site Scripting Vulnerability

A vulnerability in the HTTP web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the affected system's web interface. The vulnerability is due to insufficient input validation of a...

4.3CVSS6AI score0.01009EPSS
SaveExploits0References1
OSV
OSV
added 2016/01/27 10:59 p.m.9 views

CVE-2016-1300

Cross-site scripting XSS vulnerability in Cisco Unity Connection UC 10.52.3009 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux82582...

6.1CVSS5.9AI score0.00773EPSS
SaveExploits0References1
NVD
NVD
added 2016/01/27 10:59 p.m.24 views

CVE-2016-1300

Cross-site scripting XSS vulnerability in Cisco Unity Connection UC 10.52.3009 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux82582...

6.1CVSS6AI score0.00773EPSS
SaveExploits0References1
Prion
Prion
added 2016/01/27 10:59 p.m.24 views

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Unity Connection UC 10.52.3009 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux82582...

4.3CVSS6AI score0.00773EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2016/01/27 10:00 p.m.58 views

CVE-2016-1300

CVE-2016-1300 affects Cisco Unity Connection (UC) 10.5(2.3009) Web Framework. The vulnerability is a cross-site scripting (XSS) flaw caused by insufficient input validation, allowing remote, unauthenticated attackers to inject arbitrary script/HTML through a crafted URL. Impact per sources: attac...

6.1CVSS5.9AI score0.00773EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2016/01/27 10:00 p.m.44 views

CVE-2016-1300

Cross-site scripting XSS vulnerability in Cisco Unity Connection UC 10.52.3009 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux82582...

6AI score0.00773EPSS
SaveExploits0References1
Cisco
Cisco
added 2016/01/27 5:21 p.m.53 views

Cisco Unity Connection Web Framework Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco Unity Connection UC could allow an unauthenticated, remote attacker to execute a cross-site scripting XSS attack. The vulnerability is due to insufficient input validation of user-supplied input. An attacker could exploit this vulnerability by...

4.3CVSS6AI score0.00773EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/12/18 12:00 a.m.9 views

Cisco Unity Connection Cross-Site Request Forgery Vulnerability

Cisco Unity Connection is a feature-rich voice mail platform. A cross-site request forgery vulnerability exists in Cisco Unity Connection 11.5 0.98. A remote attacker can exploit this vulnerability to submit arbitrary requests to an affected device, hijacking the authentication of arbitrary users...

6.8CVSS7.2AI score0.00981EPSS
SaveExploits0References1
Prion
Prion
added 2015/12/12 4:59 p.m.24 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco Unity Connection 11.50.98 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCux24578...

6.8CVSS7.7AI score0.00981EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2015/12/12 4:59 p.m.25 views

CVE-2015-6408

Cross-site request forgery CSRF vulnerability in Cisco Unity Connection 11.50.98 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCux24578...

6.8CVSS7.2AI score0.00981EPSS
SaveExploits0References3
CVE
CVE
added 2015/12/12 4:00 p.m.65 views

CVE-2015-6408

CVE-2015-6408 affects Cisco Unity Connection 11.5(0.98) and is a CSRF vulnerability caused by lack of CSRF protections, enabling remote attackers to hijack the authentication of arbitrary users. Impact and conditions are as described in Cisco’s advisory; no software updates were released at the t...

6.8CVSS7.4AI score0.00981EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2015/12/12 4:00 p.m.35 views

CVE-2015-6408

Cross-site request forgery CSRF vulnerability in Cisco Unity Connection 11.50.98 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCux24578...

7.1AI score0.00981EPSS
SaveExploits0References3
Cisco
Cisco
added 2015/12/09 8:00 p.m.42 views

Cisco Unity Connection Cross-Site Request Forgery Vulnerability

A cross-site request forgery CSRF vulnerability in Cisco Unity Connection could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to a lack of CSRF protections by an affected device. An attacker could exploit this vulnerability by convincing a user to...

4.3CVSS7.1AI score0.00981EPSS
SaveExploits0References1
myhack58
myhack58
added 2015/12/07 12:00 a.m.14 views

Cisco Unity Connection cross-site scripting Vulnerability(CVE-2 0 1 5-6 3 9 0)-vulnerability warning-the black bar safety net

CVECAN ID: CVE-2 0 1 5-6 3 9 0 Cisco Unity Connection is a feature-rich voice mail platform, using Linux Unified Communicationsoperating system. Cisco Unity Connection 9.11.10the Management Interface cross-site scripting vulnerability, the remote attacker via a URL within the structure of the...

SaveExploits0
CNVD
CNVD
added 2015/12/04 12:00 a.m.10 views

Cisco Unity Connection Cross-Site Scripting Vulnerability

Cisco Unity Connection is the United States Cisco Cisco a set of voice message platform. The platform can utilize voice commands to make calls or listen to messages in a "hands-free" manner. A cross-site scripting vulnerability exists in the administrative interface of Cisco Unity Connection...

4.3CVSS6AI score0.0136EPSS
SaveExploits0References1
seebug.org
seebug.org
added 2015/12/04 12:00 a.m.25 views

Cisco Unity Connection跨站脚本漏洞

No description provided by source...

7.1AI score
SaveExploits0
NVD
NVD
added 2015/12/03 3:59 a.m.28 views

CVE-2015-6390

Cross-site scripting XSS vulnerability in the management interface in Cisco Unity Connection 9.11.10 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCup92741...

4.3CVSS5.6AI score0.0136EPSS
SaveExploits0References2
Prion
Prion
added 2015/12/03 3:59 a.m.28 views

Cross site scripting

Cross-site scripting XSS vulnerability in the management interface in Cisco Unity Connection 9.11.10 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCup92741...

4.3CVSS6AI score0.0136EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder