cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2007-5468,https://securityvulnerability.io/vulnerability/CVE-2007-5468,,"Cisco CallManager 5.1.1.3000-5 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID (aka ""toll fraud and authentication forward attack"").",Cisco,Call Manager,,,0.007819999940693378,false,,false,false,false,,,false,false,,2007-10-16T00:00:00.000Z,0
CVE-2007-4634,https://securityvulnerability.io/vulnerability/CVE-2007-4634,,"Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the (1) user or (2) admin logon page, aka CSCsi64265.",Cisco,"Call Manager,Unified Communications Manager",,,0.002319999970495701,false,,false,false,false,,,false,false,,2007-08-31T23:17:00.000Z,0
CVE-2007-4633,https://securityvulnerability.io/vulnerability/CVE-2007-4633,,"Multiple cross-site scripting (XSS) vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the (1) user or (2) admin logon page, aka CSCsi10728.",Cisco,"Call Manager,Unified Communications Manager",,,0.0033599999733269215,false,,false,false,false,,,false,false,,2007-08-31T23:17:00.000Z,0
CVE-2007-2832,https://securityvulnerability.io/vulnerability/CVE-2007-2832,,"Cross-site scripting (XSS) vulnerability in the web application firewall in Cisco CallManager before 3.3(5)sr3, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1 allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to CCMAdmin/serverlist.asp (aka the search-form) and possibly other unspecified vectors.",Cisco,Call Manager,,,0.005750000011175871,false,,false,false,false,,,false,false,,2007-05-24T01:29:00.000Z,0
CVE-2007-1467,https://securityvulnerability.io/vulnerability/CVE-2007-1467,,"Multiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class in Cisco Secure Access Control Server (ACS), VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage, Unified Videoconferencing 35xx products, Unified Videoconferencing Manager, WAN Manager, Security Device Manager, Network Analysis Module (NAM), CiscoWorks and related products, Wireless LAN Solution Engine (WLSE), 2006 Wireless LAN Controllers (WLC), and Wireless Control System (WCS) allow remote attackers to inject arbitrary web script or HTML via the text field of the search form.",Cisco,"Unified Video Advantage,Unified Videoconferencing Manager,Vpn Client,Unified Personal Communicator,Wireless Lan Solution Engine,Ip Communicator,Unified Meetingplace,Ciscoworks,Wan Manager,Wireless Control System,Network Analysis Module,Security Device Manager,Acs Solution Engine,Unified Videoconferencing,Wireless Lan Controllers,Meetingplace,Call Manager,Unified Meetingplace Express",,,0.004230000078678131,false,,false,false,false,,,false,false,,2007-03-16T21:00:00.000Z,0
CVE-2006-3109,https://securityvulnerability.io/vulnerability/CVE-2006-3109,,"Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3), and 4.3 before 4.3(1), allows remote attackers to inject arbitrary web script or HTML via the (1) pattern parameter in ccmadmin/phonelist.asp and (2) arbitrary parameters in ccmuser/logon.asp, aka bugid CSCsb68657.",Cisco,Call Manager,,,0.036070000380277634,false,,false,false,false,,,false,false,,2006-06-21T01:00:00.000Z,0
CVE-2006-0367,https://securityvulnerability.io/vulnerability/CVE-2006-0367,,"Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a ""crafted URL on the CCMAdmin web page.""",Cisco,Call Manager,,,0.0038399999029934406,false,,false,false,false,,,false,false,,2006-01-22T20:00:00.000Z,0
CVE-2006-0368,https://securityvulnerability.io/vulnerability/CVE-2006-0368,,"Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote attackers to (1) cause a denial of service (CPU and memory consumption) via a large number of open TCP connections to port 2000 and (2) cause a denial of service (fill the Windows Service Manager communication queue) via a large number of TCP connections to port 2001, 2002, or 7727.",Cisco,Call Manager,,,0.023469999432563782,false,,false,false,false,,,false,false,,2006-01-22T20:00:00.000Z,0
CVE-2005-2241,https://securityvulnerability.io/vulnerability/CVE-2005-2241,,"Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 does not quickly time out Realtime Information Server Data Collection (RISDC) sockets, which results in a ""resource leak"" that allows remote attackers to cause a denial of service (memory and connection consumption) in RisDC.exe.",Cisco,Call Manager,,,0.0019399999873712659,false,,false,false,false,,,false,false,,2005-07-12T04:00:00.000Z,0
CVE-2005-2244,https://securityvulnerability.io/vulnerability/CVE-2005-2244,,"The aupair service (aupair.exe) in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to execute arbitrary code or corrupt memory via crafted packets that trigger a memory allocation failure and lead to a buffer overflow.",Cisco,Call Manager,,,0.010850000195205212,false,,false,false,false,,,false,false,,2005-07-12T04:00:00.000Z,0
CVE-2005-2243,https://securityvulnerability.io/vulnerability/CVE-2005-2243,,"Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1, when Multi Level Admin (MLA) is enabled, allows remote attackers to cause a denial of service (memory consumption) via a large number of Admin Service Tool (AST) logins that fail.",Cisco,Call Manager,,,0.0019399999873712659,false,,false,false,false,,,false,false,,2005-07-12T04:00:00.000Z,0
CVE-2005-0356,https://securityvulnerability.io/vulnerability/CVE-2005-0356,,"Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.",Cisco,"Secure Access Control Server,Mgx 8230,Mgx 8250,Personal Assistant,Unity Server,Interactive Voice Response,Call Manager,Support Tools,Web Collaboration Option,Remote Monitoring Suite Option,Ip Contact Center Express,Intelligent Contact Manager,Agent Desktop,E-mail Manager,Meetingplace,Alaxala,Emergency Responder,Ip Contact Center Enterprise",,,0.8651800155639648,false,,false,false,false,,,false,false,,2005-05-31T04:00:00.000Z,0
CVE-2004-1759,https://securityvulnerability.io/vulnerability/CVE-2004-1759,,"Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 14247, as demonstrated using port scanning.",Cisco,"Personal Assistant,Ip Interactive Voice Response,Ip Call Center Express Standard,Call Manager,Internet Service Node,Director Agent,Ip Call Center Express Enhanced,Emergency Responder",,,0.20750999450683594,false,,false,false,false,,,false,false,,2004-01-21T05:00:00.000Z,0
CVE-2004-1760,https://securityvulnerability.io/vulnerability/CVE-2004-1760,,"The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.",Cisco,"Personal Assistant,Ip Interactive Voice Response,Ip Call Center Express Standard,Call Manager,Internet Service Node,Director Agent,Ip Call Center Express Enhanced,Emergency Responder",,,0.03711000084877014,false,,false,false,false,,,false,false,,2004-01-21T05:00:00.000Z,0
CVE-2002-0505,https://securityvulnerability.io/vulnerability/CVE-2002-0505,,"Memory leak in the Call Telephony Integration (CTI) Framework authentication for Cisco CallManager 3.0 and 3.1 before 3.1(3) allows remote attackers to cause a denial of service (crash and reload) via a series of authentication failures, e.g. via incorrect passwords.",Cisco,Call Manager,,,0.005280000157654285,false,,false,false,false,,,false,false,,2002-08-12T04:00:00.000Z,0