|
268191
|
6.5 |
MEDIUM
Network
|
samsung
|
x14j_firmware
|
SQL injection vulnerability in Cisco Unified Communications Manager 10.5(2.13900.9) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCux99227.
|
CWE-89
SQL Injection
|
CVE-2016-1308
|
2024-11-21 11:46 |
2016-02-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268192
|
5.4 |
MEDIUM
Network
|
zyxel
zzinc
|
gs1900-10hp_firmware
keymouse_firmware
|
The Openfire server in Cisco Finesse Desktop 10.5(1) and 11.0(1) and Unified Contact Center Express 10.6(1) has a hardcoded account, which makes it easier for remote attackers to obtain access via an…
|
CWE-287
CWE-255
Improper Authentication
Credentials Management
|
CVE-2016-1307
|
2024-11-21 11:46 |
2016-02-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268193
|
6.1 |
MEDIUM
Network
|
cisco
|
application_policy_infrastructure_controller_enterprise_module
|
Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attackers to inject arbitrary web script or HTML via vecto…
|
CWE-79
Cross-site Scripting
|
CVE-2016-1305
|
2024-11-21 11:46 |
2016-02-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268194
|
8.8 |
HIGH
Network
|
samsung
sun
zyxel
zzinc
cisco
|
x14j_firmware
opensolaris
gs1900-10hp_firmware
keymouse_firmware
nx-os
|
Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switches with software before 11.0(3h) and 11.1 before 11…
|
CWE-284
Improper Access Control
|
CVE-2016-1302
|
2024-11-21 11:46 |
2016-02-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268195
|
8.8 |
HIGH
Network
|
cisco
|
asa_cx_context-aware_security_software
prime_security_manager
|
The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1(112) and Cisco Prime Security Manager (PRSM) software before 9.3.1.1(112) allows remote authenticated users to c…
|
CWE-284
Improper Access Control
|
CVE-2016-1301
|
2024-11-21 11:46 |
2016-02-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268196
|
6.1 |
MEDIUM
Network
|
cisco
|
jabber_guest
|
Cross-site scripting (XSS) vulnerability in the management interface in Cisco Jabber Guest Server 10.6(8) allows remote attackers to inject arbitrary web script or HTML via the host tag parameter, ak…
|
CWE-79
Cross-site Scripting
|
CVE-2016-1311
|
2024-11-21 11:46 |
2016-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268197
|
6.1 |
MEDIUM
Network
|
sun
|
opensolaris
|
Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 11.5(0.199) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy09033.
|
CWE-79
Cross-site Scripting
|
CVE-2016-1310
|
2024-11-21 11:46 |
2016-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268198
|
6.1 |
MEDIUM
Network
|
sun
|
opensolaris
|
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Fog Director 1.0(0) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux80466.
|
CWE-79
Cross-site Scripting
|
CVE-2016-1306
|
2024-11-21 11:46 |
2016-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268199
|
5.9 |
MEDIUM
Network
|
isc
|
bind
|
rdataset.c in ISC BIND 9 Supported Preview Edition 9.9.8-S before 9.9.8-S5, when nxdomain-redirect is enabled, allows remote attackers to cause a denial of service (REQUIRE assertion failure and daem…
|
CWE-20
Improper Input Validation
|
CVE-2016-1284
|
2024-11-21 11:46 |
2016-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
268200
|
10.0 |
CRITICAL
Network
|
radicale
|
radicale
|
The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrated by /c:/file/ignore.
|
CWE-21
Pathname Traversal and Equivalence Errors
|
CVE-2016-1505
|
2024-11-21 11:46 |
2016-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
