Lucene search
+L

427 matches found

Zero Day Initiative
Zero Day Initiative
added 2018/05/14 12:0 a.m.31 views

Cisco WebEx Recorder and Player WRF File Length Field Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Cisco WebEx Recorder and Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

2.6CVSS1.7AI score0.0264EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/05/14 12:0 a.m.31 views

Cisco WebEx Recorder and Player WRF File Length Field Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Cisco WebEx Recorder and Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

2.6CVSS1.7AI score0.0264EPSS
SaveExploits0References1
NVD
NVD
added 2018/05/02 10:29 p.m.30 views

CVE-2018-0288

A vulnerability in Cisco WebEx Recording Format WRF Player could allow an unauthenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The vulnerability is due to a...

5.3CVSS5.5AI score0.0264EPSS
SaveExploits0References3
Prion
Prion
added 2018/05/02 10:29 p.m.26 views

Out-of-bounds

A vulnerability in Cisco WebEx Recording Format WRF Player could allow an unauthenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The vulnerability is due to a...

5CVSS5.4AI score0.0264EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2018/05/02 10:0 p.m.11 views

CVE-2018-0288

A vulnerability in Cisco WebEx Recording Format WRF Player could allow an unauthenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The vulnerability is due to a...

6.8AI score0.0264EPSS
SaveExploits0References3
CVE
CVE
added 2018/05/02 10:0 p.m.59 views

CVE-2018-0288

The CVE-2018-0288 issue concerns Cisco WebEx Recording Format (WRF) Player: a design flaw in processing WRF files can allow remote attackers to read memory outside the mapped file boundaries, enabling information disclosure. Affected products include Cisco WebEx Business Suite meeting sites, WebE...

5.3CVSS5.4AI score0.0264EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2018/05/02 10:0 p.m.36 views

CVE-2018-0288

A vulnerability in Cisco WebEx Recording Format WRF Player could allow an unauthenticated, remote attacker to access sensitive data about the application. An attacker could exploit this vulnerability to gain information to conduct additional reconnaissance attacks. The vulnerability is due to a...

5.5AI score0.0264EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2017/12/08 12:0 a.m.42 views

Cisco WebEx WRF Player Multiple Vulnerabilities (cisco-sa-20171129-webex-players)

The version of Cisco WebEx WRF Player installed on the remote host is affected by multiple vulnerabilities. A remote attacker could exploit these by providing a user with a malicious WRF file that in some cases could allow arbitrary code execution. C Tenable Network Security, Inc...

9.6CVSS8.8AI score0.0298EPSS
SaveExploits0References7
Zero Day Initiative
Zero Day Initiative
added 2017/12/06 12:0 a.m.37 views

Cisco WebEx Recorder and Player WRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Recorder and Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.8CVSS6.3AI score0.0298EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/12/06 12:0 a.m.26 views

Cisco WebEx Recorder and Player WRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Recorder and Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.8CVSS6.3AI score0.0298EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/12/06 12:0 a.m.43 views

Cisco WebEx Recorder and Player WRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Recorder and Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.8CVSS6.3AI score0.0298EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/12/06 12:0 a.m.24 views

Cisco WebEx Recorder and Player WRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Recorder and Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.8CVSS6.3AI score0.0298EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/12/06 12:0 a.m.31 views

Cisco WebEx Recorder and Player WRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Recorder and Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

6.8CVSS6.3AI score0.0298EPSS
SaveExploits0References1
ThreatPost
ThreatPost
added 2017/11/30 2:22 p.m.50 views

Cisco Patches Critical Playback Bugs in WebEx Players

Cisco Systems issued a Critical alert on Wednesday warning of multiple vulnerabilities in its popular WebEx player. Six bugs were listed in the security advisory, each of them relating to holes in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WR...

10CVSS1AI score0.95707EPSS
SaveExploits15References8
NVD
NVD
added 2017/11/30 9:29 a.m.23 views

CVE-2017-12370

A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email o...

9.6CVSS9.6AI score0.0298EPSS
SaveExploits0References3
NVD
NVD
added 2017/11/30 9:29 a.m.22 views

CVE-2017-12369

A "Cisco WebEx Network Recording Player Out-of-Bounds Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or URL an...

9.6CVSS9.5AI score0.0298EPSS
SaveExploits0References3
NVD
NVD
added 2017/11/30 9:29 a.m.22 views

CVE-2017-12371

A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email o...

9.6CVSS9.6AI score0.0298EPSS
SaveExploits0References3
NVD
NVD
added 2017/11/30 9:29 a.m.16 views

CVE-2017-12360

A vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format WRF files could allow an attacker to cause a denial of service DoS condition. An attacker could exploit this vulnerability by providing a user with a malicious WRF file via email or URL and convincing the user to...

4.3CVSS4.7AI score0.01009EPSS
SaveExploits0References2
NVD
NVD
added 2017/11/30 9:29 a.m.20 views

CVE-2017-12367

A "Cisco WebEx Network Recording Player Denial of Service Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email or UR...

9.6CVSS9.5AI score0.02829EPSS
SaveExploits0References3
Prion
Prion
added 2017/11/30 9:29 a.m.15 views

Remote code execution

A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording Format ARF and WebEx Recording Format WRF files. A remote attacker could exploit this by providing a user with a malicious ARF or WRF file via email o...

6.8CVSS9.5AI score0.0298EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder