Cross site scripting

Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. More Information: CSCut43061 CSCut43066...

Sql injection

A vulnerability in the web framework code of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to execute arbitrary SQL commands on the database. More Information: CSCva46542. Known Affected Releases: 1.30.876...

CVE-2016-6429

A vulnerability in the web framework code of the Cisco IP Interoperability and Collaboration System IPICS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. More Information: CSCva47092. Known Affected Releases: 4.101...

CVE-2016-6429

A vulnerability in the web framework code of the Cisco IP Interoperability and Collaboration System IPICS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. More Information: CSCva47092. Known Affected Releases: 4.101...

CVE-2016-6451

Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. More Information: CSCut43061 CSCut43066...

CVE-2016-6453

A vulnerability in the web framework code of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to execute arbitrary SQL commands on the database. More Information: CSCva46542. Known Affected Releases: 1.30.876...

CVE-2016-6429

CVE-2016-6429 affects Cisco IP Interoperability and Collaboration System (IPICS). The issue is a cross-site scripting (XSS) vulnerability in the web framework, arising from insufficient input validation of parameters passed to the web server. An unauthenticated, remote attacker could exploit this...

CVE-2016-6451

CVE-2016-6451 concerns Cisco Prime Collaboration Provisioning. The Cisco advisory and NVD entry describe multiple vulnerabilities in the web framework code that could allow an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack against users of the web interface. The r...

CVE-2016-6453

Cisco Identity Services Engine (ISE) web framework vulnerability (CVE-2016-6453) allows an authenticated, remote attacker to execute arbitrary SQL commands on the ISE database via crafted URLs. The issue stems from insufficient controls over SQL statements in the web framework interface, affectin...

CVE-2016-6451: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. More Information: CSCut43061 CSCut43066...

PT-2016-6924

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning version 10.6 Description The issue allows an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. This is due to...

PT-2016-6926

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE version 1.30.876 Description A vulnerability in the web framework code could allow an authenticated, remote attacker to execute arbitrary SQL commands on the database. Recommendations For Cisco Identity...

PT-2016-6903

Name of the Vulnerable Software and Affected Versions Cisco IP Interoperability and Collaboration System IPICS version 4.101 Description A vulnerability in the web framework code could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. Recommendations For...

Cisco Identity Services Engine SQL Injection Vulnerability (cisco-sa-20161026-ise)

A vulnerability in the web framework code of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to execute arbitrary SQL commands on the database. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Cisco IP Interoperability and Collaboration System Cross-Site Scripting Vulnerability

A vulnerability in the web framework code of the Cisco IP Interoperability and Collaboration System IPICS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to insufficient input validation of some parameters passed to the web...

Cisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability

Multiple vulnerabilities in the web framework code of the Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. The vulnerability is due to insufficient inpu...

Cisco Identity Services Engine SQL Injection Vulnerability

A vulnerability in the web framework code of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to execute arbitrary SQL commands on the database. The vulnerability is due to insufficient controls on Structured Query Language SQL statements. An attacker could exploit...

[SECURITY] Fedora 23 Update: python-django-1.8.15-1.fc23

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

[SECURITY] Fedora 24 Update: python-django-1.9.10-1.fc24

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

[SECURITY] Fedora 25 Update: python-django-1.9.10-1.fc25

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...