cisco videoscape distribution suite service manager vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.0 up to and including 3.4.0 allows remote malicious users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCva14552.

Cisco Videoscape Distribution Suite Service Manager 3.0.0 Cisco Videoscape Distribution Suite Service Manager 3.1.0 Cisco Videoscape Distribution Suite Service Manager 3.2.0 Cisco Videoscape Distribution Suite Service Manager 3.3.0 Cisco Videoscape Distribution Suite Service Manager 3.4.0

Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.4.0 and previous versions does not always use RBAC for backend database access, which allows remote authenticated users to read or write to database entries via (1) the GUI or (2) a crafted HTTP request, aka Bug ID CS...

Cisco Videoscape Distribution Suite Service Manager 3.4.0 Cisco Videoscape Distribution Suite Service Manager 3.2.0 Cisco Videoscape Distribution Suite Service Manager 3.0.0 Cisco Videoscape Distribution Suite Service Manager 3.1.0 Cisco Videoscape Distribution Suite Service Manager 3.3.0

Cisco Content Delivery System Manager Software 3.2 on Videoscape Distribution Suite Service Manager allows remote malicious users to obtain sensitive information via crafted URLs in REST API requests, aka Bug ID CSCuv86960.

Cisco Videoscape Distribution Suite Service Manager

Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Se...

Apache Commons Collections Apache Commons Collections 4.0

5 Github repositories

Race condition in mm/gup.c in the Linux kernel 2.x up to and including 4.x prior to 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka ...

Canonical Ubuntu Linux 16.10 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 12.04 Linux Linux Kernel Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux Tus 6.5 Redhat Enterprise Linux Eus 6.7 Redhat Enterprise Linux Long Life 5.6 Redhat Enterprise Linux Aus 6.4 Redhat Enterprise Linux 5 Redhat Enterprise Linux Long Life 5.9 Redhat Enterprise Linux Aus 6.2 Redhat Enterprise Linux Eus 7.1 Redhat Enterprise Linux Eus 6.6 Redhat Enterprise Linux Aus 6.5 Debian Debian Linux 8.0 Debian Debian Linux 7.0

5 EDB exploits177 Github repositories6 Articles

Use-after-free vulnerability in ntpd in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

The datalen parameter in the refclock driver in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote malicious users to execute arbitrary code or cause a denial of service (crash) via a negative input value.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

Buffer overflow in the password management functionality in NTP 4.2.x prior to 4.2.8p4, and 4.3.x prior to 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Balance -Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -

An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP dae...

Ntp Ntp-dev 4.3.70

Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP prior to 4.2.8p4, when used on systems that do not use '\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite ...

Ntp Ntp Ntp Ntp 4.2.8

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook