Mohamed Sayed

The function `php openssl matches wildcard name()` in `ext/openssl/xp ssl.c` contains an integer underflow in the length argument passed to `memchr()`. This occurs when a TLS server certificate uses a wildcard name with literal characters that exceed the length of the hostname being verified. A malicious server can exploit this to force the PHP client to read up to `SIZE MAX` bytes beyond a heap allocation. This issue is reachable via any default client stream as `verify peer name` is enabled by default.

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager versions (affected versions not specified) Cisco Unified Communications Manager Session Management Edition versions (affected versions not specified) Description: The issue is related to the improper inclusion of sensitive information in downloadable files, which could allow an authenticated, remote attacker to access sensitive information on an affected device. An attacker could exploit this by authenticating to the device and issuing specific commands, potentially obtaining hashed credentials of system users. The attacker would need valid user credentials with elevated privileges to exploit this issue. Recommendations: For Cisco Unified Communications Manager, restrict access to downloadable files until a patch is available. For Cisco Unified Communications Manager Session Management Edition, consider disabling the ability to download sensitive files as a temporary workaround until a fix is provided. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The web-based management interface of the affected Cisco products does not properly validate user-supplied input, allowing an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against an interface user. An attacker could exploit this issue by persuading an interface user to click a crafted link, potentially executing arbitrary script code in the context of the affected interface or accessing sensitive browser-based information.

The web-based management interface of the affected Cisco products does not properly validate user-supplied input, allowing an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against an interface user. An attacker could exploit this issue by persuading an interface user to click a crafted link, potentially executing arbitrary script code in the context of the affected interface or accessing sensitive browser-based information.

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server (affected versions not specified) Description: A spoofing issue exists in Microsoft Exchange Server, related to errors in information representation by the user interface. This could allow a remote attacker to conduct spoofing attacks, potentially impersonating a user. The estimated number of potentially affected devices worldwide is not provided. There is no information about real-world incidents where this issue was exploited. Recommendations: To prevent these types of attacks, download inline images from different DNS domains than the rest of OWA. Please see further instructions in the FAQ to put in place these mitigations. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to missing authentication in the survey application of IBM Security Identity Governance and Intelligence, which could allow an attacker to obtain sensitive information.

The issue allows a remote attacker to send specially-crafted SQL statements, potentially enabling the attacker to view information in the back-end database. This is achieved through SQL injection.