EUVD-2013-6511

Malware in sbrugna...

EUVD-2013-6766

Malware in sbrugna...

The vulnerability in the software web interface for Cisco Webex Events, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center allows a perpetrator to trigger a service failure.

The vulnerability of software web interfaces for Cisco WebEx Events, Cisco WebEx Meeting Center, Cisco WebEx Support Center, and Cisco WebEx Training Center exists due to insufficient testing of UCF media files. Exploiting this vulnerability can allow attackers to cause service failures by sendin...

The vulnerability in the web interface of software for Cisco Webex Events Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center allows a perpetrator to disclose protected information.

The vulnerability of the software web interfaces for Cisco Webex Events Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center is related to the absence of CAPTCHA protection. Exploiting this vulnerability can allow a malicious actor to disclose protected...

PT-2020-1641

Name of the Vulnerable Software and Affected Versions Cisco Webex Events, Cisco Webex Meeting Center, Cisco Webex Support Center, Cisco Webex Training Center affected versions not specified Description The issue is related to insufficient validation of Universal Communications Format UCF media...

Cisco Webex Centers CVE-2020-3116 Denial of Service Vulnerability

Description Cisco Webex Centers is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. This issue is being tracked by Cisco Bug IDs CSCvr16379, CSCvr16383 and CSCvr16386. Technologies Affected Cisco WebEx Event Center Cisco WebEx...

CVE-2019-15987 Cisco WebEx Centers Username Enumeration Information Disclosure Vulnerability

A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA protection in certain...

CVE-2019-15987: Improper Authentication

A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulnerability is due to missing CAPTCHA protection in certain...

Cisco Webex Centers CVE-2019-15987 Information Disclosure Vulnerability

Description Cisco Webex Centers are prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. This issue is being tracked by Cisco Bug IDs CSCvq81213 and CSCvq81230. Cisco Webex Event Center, Cisco Webex...

CVE-2018-15436: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Webex Events Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based...

PT-2018-2139

Name of the Vulnerable Software and Affected Versions Cisco Webex Events Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the...

Cisco WebEx Training Center Cross-Site Scripting Vulnerability

Cisco WebEx Training Center is an online training solution from Cisco. A cross-site scripting vulnerability in Cisco WebEx Training Center allows remote attackers to inject arbitrary web script or HTML via an unspecified value...

Cisco WebEx Training Center培训注册跨站脚本漏洞

Bugtraq ID:64277 CVE ID:CVE-2013-6963 Cisco WebEx Training Center是一款互动式培训解决方案，可开展电子教学。 Cisco WebEx Training Center培训中心注册页面不正确过滤用户提交的输入，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可获取敏感信息或劫持用户会话。 0 Cisco WebEx Training Center 厂商补丁： Cisco ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...

CVE-2013-6966: Improper Input Validation

Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul36031...

PT-2013-6207

Name of the Vulnerable Software and Affected Versions Cisco WebEx Training Center affected versions not specified Description The issue allows remote attackers to redirect users to arbitrary web sites, potentially leading to phishing attacks. Recommendations At the moment, there is no information...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco WebEx Training Center allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCul25567...

Design/Logic Flaw

Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail address exists, which allows remote attackers to enumerate attendees via a series of requests, aka Bug ID CSCul36003...

Cross site scripting

Cross-site scripting XSS vulnerability in the registration component in Cisco WebEx Training Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36207...

CVE-2013-6968

Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail address exists, which allows remote attackers to enumerate attendees via a series of requests, aka Bug ID CSCul36003...

PT-2013-6096

Name of the Vulnerable Software and Affected Versions Cisco WebEx Training Center affected versions not specified Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not specified...