520 matches found
CVE-2014-0675
Cisco TelePresence Video Communication Server (VCS) Expressway is affected by CVE-2014-0675 due to using the same default X.509 SSL certificate across multiple customers, with the private key published. This enables potential MITM-style interception across SSL sessions if an attacker can leverage...
CVE-2014-0675
The Expressway component in Cisco TelePresence Video Communication Server VCS uses the same default X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's tru...
CVE-2014-0662
The SIP module in Cisco TelePresence Video Communication Server VCS before 8.1 allows remote attackers to cause a denial of service process failure via a crafted SDP message, aka Bug ID CSCue97632...
Code injection
The SIP module in Cisco TelePresence Video Communication Server VCS before 8.1 allows remote attackers to cause a denial of service process failure via a crafted SDP message, aka Bug ID CSCue97632...
CVE-2014-0662
The CVE describes a denial-of-service in the SIP module of Cisco TelePresence Video Communication Server (VCS) before 8.1, exploitable by a crafted SDP message. The vulnerability stems from the SIP component and affects remote attackers with network access, potentially causing process failure. Ci...
CVE-2014-0662
The SIP module in Cisco TelePresence Video Communication Server VCS before 8.1 allows remote attackers to cause a denial of service process failure via a crafted SDP message, aka Bug ID CSCue97632...
Cisco TelePresence Video Communication Server SIP Denial of Service Vulnerability
Cisco TelePresence Video Communication Server VCS contains a vulnerability that could allow an unauthenticated, remote attacker to trigger the failure of several critical processes which may cause active call to be dropped and prevent users from making new calls until the affected system is...
Cisco TelePresence Video Communication Server Policy Services Security Bypass Vulnerability
Cisco TelePresence Video Communication Server VCS contains a vulnerability that could allow an unauthenticated, remote attacker to bypass security restrictions on a targeted system. The vulnerability is due to improper processing of certain search rules processed by the affected software. An...
CVE-2012-5444
Cisco TelePresence Video Communication Server VCS X7.0.3 does not properly process certain search rules, which allows remote attackers to create conferences via an unspecified Conductor request, aka Bug ID CSCub67989...
CVE-2012-5444
Cisco TelePresence Video Communication Server (VCS) X7.0.3 contains a vulnerability where improper processing of certain search rules can be exploited by an unauthenticated, remote attacker to bypass security restrictions and create conferences via an unspecified Conductor request. The Cisco advi...
CVE-2012-5444
Cisco TelePresence Video Communication Server VCS X7.0.3 does not properly process certain search rules, which allows remote attackers to create conferences via an unspecified Conductor request, aka Bug ID CSCub67989...
CVE-2010-5251
Multiple untrusted search path vulnerabilities in IBM Lotus Notes 8.5 allow local users to gain privileges via a Trojan horse 1 nnoteswc.dll or 2 nlsxbe.dll file in the current working directory, as demonstrated by a directory that contains a .vcf, .vcs, or .ics file. NOTE: the provenance of this...
CVE-2012-0330
Cisco TelePresence Video Communication Server with software before X7.0.1 allows remote attackers to cause a denial of service device crash via a malformed SIP message, aka Bug ID CSCtr20426...
CVE-2011-3294
Cross-site scripting XSS vulnerability in the login page in the administrative interface on Cisco TelePresence Video Communication Servers VCS with software before X7.0 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header, aka Bug ID CSCts80342...
CVE-2011-3294
Cisco TelePresence Video Communication Server (VCS) before X7.0 has a cross-site scripting (XSS) flaw in the login page’s administrative interface. The vulnerability allows an attacker to inject arbitrary web script or HTML via the User-Agent header. Root cause details are not fully elaborated in...
CVE-2009-4510: TANDBERG VCS Static SSH Host Keys
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Virtual Security Research, LLC. http://www.vsecurity.com/ Security Advisory - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: TANDBERG Video Communication Server Static SSH Host Keys Release Date:...
CVE-2009-4509: TANDBERG VCS Authentication Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Virtual Security Research, LLC. http://www.vsecurity.com/ Security Advisory - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: TANDBERG Video Communication Server Authentication Bypass Release Date:...
Cross site scripting
Cross-site scripting XSS vulnerability on the TANDBERG Video Communication Server VCS before X5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Reference ID 66316...
Code injection
Unspecified vulnerability on the TANDBERG Video Communication Server VCS before X5.0 allows remote attackers to execute arbitrary code via unknown vectors, aka Reference ID 69773...