CVE-2018-0390

A vulnerability in the web framework of Cisco Webex could allow an unauthenticated, remote attacker to conduct a Document Object Model-based DOM-based cross-site scripting XSS attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input...

Cross site scripting

A vulnerability in the web framework of Cisco Webex could allow an unauthenticated, remote attacker to conduct a Document Object Model-based DOM-based cross-site scripting XSS attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input...

Cross site scripting

A vulnerability in the web framework of the Cisco Unified Communications Manager IM and Presence Service software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of an affected system. The vulnerability is due to...

CVE-2018-0396

CVE-2018-0396 is a cross-site scripting (XSS) vulnerability affecting Cisco Unified Communications Manager IM and Presence Service web framework. It arises from insufficient input validation of parameters passed to the web server, enabling an authenticated, remote attacker to craft a malicious li...

Cisco Unified Communications Manager IM And Presence Service Cross-Site Scripting Vulnerability

A vulnerability in the web framework of the Cisco Unified Communications Manager IM and Presence Service software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of an affected system. The vulnerability is due to...

Arbitrary file read vulnerability

An arbitrary file read vulnerability in the Stapler web framework used by Jenkins allowed unauthenticated users to send crafted HTTP requests returning the contents of any file on the Jenkins controller file system that the Jenkins controller process has access to. Input validation in Stapler has...

PT-2018-8810

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM and Presence Service software affected versions not specified Description A vulnerability in the web framework could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack...

CVE-2018-13034

Directory traversal in Jester web framework 0.2.0 allows remote attackers to fetch files in arbitrary locations via "..%f" sequences...

CVE-2018-13034

Directory traversal in Jester web framework 0.2.0 allows remote attackers to fetch files in arbitrary locations via "..%f" sequences...

Directory traversal

Directory traversal in Jester web framework 0.2.0 allows remote attackers to fetch files in arbitrary locations via "..%f" sequences...

CVE-2018-13034

Directory traversal in Jester web framework 0.2.0 allows remote attackers to fetch files in arbitrary locations via "..%f" sequences...

CVE-2018-13034

CVE-2018-13034: A directory traversal vulnerability in the Jester web framework (version 0.2.0) enables remote attackers to fetch files in arbitrary locations by crafting requests with "..%f" sequences. The vulnerability primarily impacts confidentiality (C) with partial impact, as indicated by C...

CVE-2018-13034

Directory traversal in Jester web framework 0.2.0 allows remote attackers to fetch files in arbitrary locations via "..%f" sequences...

PT-2018-11550

Name of the Vulnerable Software and Affected Versions Jester web framework version 0.2.0 Description The issue allows remote attackers to fetch files in arbitrary locations via "..%f" sequences, which is a result of a directory traversal vulnerability. Recommendations For Jester web framework...

CVE-2018-13034: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal in Jester web framework 0.2.0 allows remote attackers to fetch files in arbitrary locations via "..%f" sequences...

unicorn-list path traversal vulnerability

unicorn-list is a web framework for dynamically loading content using the .cats engine. A path traversal vulnerability exists in unicorn-list. An attacker can exploit this vulnerability by placing a '. /' sequence in a URL to gain access to the file system...

CVE-2018-0340

A vulnerability in the web framework of the Cisco Unified Communications Manager Unified CM software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. The vulnerability is due to insufficient...

Cross site scripting

A vulnerability in the web framework of the Cisco Unified Communications Manager Unified CM software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. The vulnerability is due to insufficient...

Cross site scripting

A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters...

Cross site scripting

A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain parameters that are...