Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

Internet Explorer Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain. In a web-based attack scenario, an attacker could host a website that is us...

Scripting Engine Information Disclosure Vulnerability

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. In a web-based attack scenario, an...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

PT-2017-17753

Name of the Vulnerable Software and Affected Versions Intellinet NFC-30ir IP Camera version LM.1.6.16.05 Description A directory traversal issue exists in the web-based management site of the affected device, allowing remote attackers to read arbitrary files. This is possible due to a lack of...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. This vulnerability affects...

CVE-2017-3888

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. This vulnerability affects...

CVE-2017-3888

The CVE-2017-3888 entry concerns Cisco Unified Communications Manager (CUCM) and describes a reflected cross-site scripting (XSS) vulnerability in the web-based management interface. The issue requires an authenticated administrator and can lead to script execution in the browser of a user access...

PT-2017-1798

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure version 2.22 Cisco Prime Infrastructure versions prior to 3.10.0 Description A vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to...

PT-2017-1795

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions prior to 12.00.98000.750 Cisco Unified Communications Manager versions prior to 12.00.98000.708 Cisco Unified Communications Manager versions prior to 12.00.98000.707 Cisco Unified Communications...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (cisco-sa-20170405-ucm1)

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attac against a user of the web-based management interface of an affected device. Copyright C 2017 Greenbone...

CVE-2017-3888: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. This vulnerability affects...

CVE-2017-3848: Improper Neutralization of Input During Web Page Generation

A vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. More Information: CSCuw63001 CSCuw63003. Known Affected...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due t...

Cross site scripting

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of an affected device. More Information: CSCvc21620. Known Affected Releases:...

CVE-2017-3872

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of an affected device. More Information: CSCvc21620. Known Affected Releases:...

CVE-2017-3868

A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information: CSCvc44344. Known Affected Release...

CVE-2017-3872

A cross-site scripting XSS filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of an affected device. More Information: CSCvc21620. Known Affected Releases:...

CVE-2017-3868

Cisco UCS Director (web-based management interface) is affected by CVE-2017-3868 due to insufficient validation of user-supplied input, enabling unauthenticated, remote attackers to perform cross-site scripting (XSS) against users. The vulnerability stems from the interface not properly validatin...