1580 matches found
PT-2018-8784
Name of the Vulnerable Software and Affected Versions Cisco WebEx affected versions not specified Description A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of a...
PT-2018-8783
Name of the Vulnerable Software and Affected Versions Cisco WebEx affected versions not specified Description A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of a...
PT-2018-8750
Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning PCP versions prior to 12.1 Description A vulnerability in the web framework code could allow an unauthenticated, remote attacker to execute arbitrary SQL queries due to a lack of proper validation on...
Cisco Prime Collaboration Provisioning SQL Injection Vulnerability
A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The vulnerability is due to a lack of proper validation on user-supplied input in SQL queries. An attacker could exploit this...
Design/Logic Flaw
hapi is a web and services application framework. When hapi = 15.0.0 = 16.1.0 encounters a malformed accept-encoding header an uncaught exception is thrown. This may cause hapi to crash or to hang the client connection until the timeout period is reached...
CVE-2017-16013
hapi is a web and services application framework. When hapi = 15.0.0 = 16.1.0 encounters a malformed accept-encoding header an uncaught exception is thrown. This may cause hapi to crash or to hang the client connection until the timeout period is reached...
CVE-2017-16013
hapi is a web and services application framework. When hapi = 15.0.0 = 16.1.0 encounters a malformed accept-encoding header an uncaught exception is thrown. This may cause hapi to crash or to hang the client connection until the timeout period is reached...
CVE-2017-16020
Summit is a node web framework. When using the PouchDB driver in the module, Summit 0.1.0 and later allows an attacker to execute arbitrary commands via the collection name...
CVE-2017-16020
CVE-2017-16020 affects Summit (Node.js web framework) when using the PouchDB driver. Affected: Summit 0.1.0 and later. Vulnerability: collection names can be manipulated to execute arbitrary commands, enabling remote code execution. Exploitation details across connected sources consistently refer...
Cross site scripting
A vulnerability in the web framework of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain...
CVE-2018-0327
A vulnerability in the web framework of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain...
CVE-2018-0327
A vulnerability in the web framework of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain...
CVE-2018-0327
CVE-2018-0327 relates to Cisco Identity Services Engine (ISE) Web Framework. The vulnerability arises from insufficient input validation of parameters sent via HTTP GET/POST, enabling an unauthenticated, remote attacker to trigger a cross-site scripting (XSS) attack against a logged-in user of th...
Cisco Identity Services Engine Cross-Site Scripting Attack Vulnerability (CNVD-2018-10666)
Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. A cross-site scripting...
Cisco Unified Communications Manager and Cisco Unified Presence Cross-Site Scripting Vulnerabilities
Cisco Unified Communications Manager CUCM and Cisco Unified Presence are both products of Cisco Corporation.CUCM is a call-processing component of a unified communications system.Cisco Unified Presence is a key component of a unified communications system. Cisco Unified Presence is a key componen...
CVE-2018-0328: Improper Neutralization of Input During Web Page Generation
A vulnerability in the web framework of Cisco Unified Communications Manager and Cisco Unified Presence could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient...
Cisco Unified Communications Manager and Cisco Unified Presence Cross-Site Scripting Vulnerability
A vulnerability in the web framework of Cisco Unified Communications Manager and Cisco Unified Presence could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient...
Cisco Identity Services Engine Cross-Site Scripting Vulnerability
A vulnerability in the web framework of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain...
