118 matches found
CVE-2020-1830
Huawei CVE-2020-1830 affects the IPv6 IPSec processing in Huawei NIP6800 (V500R001C30, V500R001C60SPC500, V500R005C00) and Secospace USG6600/USG9500 (V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00). Root cause: a memory management error when the IPSec Module handles a specif...
Security Advisory - Small OOB Read Vulnerability in Huawei Product
There is an out-of-bound read vulnerability that a memory management error exists when IPSec Module handing a specific message. Attackers can send specific message to cause 1 byte out-of-bound read, compromising normal service. Vulnerability ID: HWPSIRT-2019-12417 This vulnerability has been...
CVE-2014-3809
Cross-site scripting XSS vulnerability in the management interface in Alcatel-Lucent 1830 Photonic Service Switch PSS 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the myurl parameter to menu/pop.html...
CVE-2014-3809
CVE-2014-3809 describes a reflected cross-site scripting (XSS) vulnerability in the management interface of Alcatel-Lucent 1830 Photonic Service Switch (PSS) 6.0 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via the myurl parameter to menu/pop.html. The root...
PT-2020-7658
Name of the Vulnerable Software and Affected Versions Alcatel-Lucent 1830 Photonic Service Switch PSS versions 6.0 and earlier Description A cross-site scripting XSS issue exists in the management interface, allowing remote attackers to inject arbitrary web script or HTML via the myurl parameter ...
CVE-2014-3809: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the management interface in Alcatel-Lucent 1830 Photonic Service Switch PSS 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the myurl parameter to menu/pop.html...
CVE-2011-1830
creationtimestamp| type| source ---|---|--- 2019-04-22 20:30:54+00:00| seen| Telegram/aicjc3QcOMecXaODhuuP8ucRDs7b3dWqJUf28BLt64WWdQ...
CVE-2011-1830 Ekiga attempts to dlopen /tmp/ekiga_test.so
Ekiga versions before 3.3.0 attempted to load a module from /tmp/ekigatest.so...
CVE-2011-1830
CVE-2011-1830 affects Ekiga versions before 3.3.0. The vulnerability arises when Ekiga attempts to load a module from /tmp/ekiga_test.so, enabling potential code execution via dlopen of an untrusted shared object. Multiple connected sources (SUSE, Red Hat, NVD, Ubuntu, Debian) confirm the vulnera...
CVE-2019-1830
CVE-2019-1830 describes a DoS vulnerability in the Cisco Wireless LAN Controller (WLC) related to Locally Significant Certificate (LSC) management. The issue stems from incorrect input validation of the HTTP URL used to reach the LSC Certificate Authority. An authenticated attacker with administr...
WellinTech KingView Buffer Overflow - Ver2 (CVE-2011-0406; CVE-2012-1830)
A buffer overflow vulnerability exists in WellinTech KingView. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Security Bulletin: Security vulnerabilities in ActiveMQ 5.2.0 affect IBM Sterling B2B Integrator (CVE-2015-1830, CVE-2014-8110, CVE-2013-3060, CVE-2013-1880, CVE-2013-1879, CVE-2012-6551, CVE-2012-6092, CVE-2010-1587, CVE-2010-1244, CVE-2010-0684)
Summary Multiple directory traversal, cross-site scripting, denial of service and cross-site request forgery security vulnerabilities in ActiveMQ 5.2.0. IBM Sterling B2B Integrator has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-1830 DESCRIPTION: Apache ActiveMQ could all...
Cisco Aironet suffers from a denial of service vulnerability (CNVD-2018-08990)
The Cisco Aironet 1810, 1830, and 1850 Series Access Points are different families of wireless access point devices from Cisco, Inc.Mobility Express Software is a set of management and control software that runs on them. The Mobility Express Software versions 8.4.100.0, 8.5.103.0, and 8.5.105.0 o...
CVE-2018-0249
A vulnerability when handling incoming 802.11 Association Requests for Cisco Aironet 1800 Series Access Point APs on Qualcomm Atheros QCA based hardware platforms could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected system. A successful explo...
Authentication flaw
A vulnerability in Central Web Authentication CWA with FlexConnect Access Points APs for Cisco Aironet 1560, 1810, 1810w, 1815, 1830, 1850, 2800, and 3800 Series APs could allow an authenticated, adjacent attacker to bypass a configured FlexConnect access control list ACL. The vulnerability is du...
PT-2018-8689
Name of the Vulnerable Software and Affected Versions: Cisco Aironet 1810, 1830, and 1850 Series Access Points versions 8.4.100.0 through 8.5.105.0 Description: A vulnerability in the implementation of Point-to-Point Tunneling Protocol PPTP functionality could allow an unauthenticated, remote...
CVE-2018-0234: Improper Input Validation
A vulnerability in the implementation of Point-to-Point Tunneling Protocol PPTP functionality in Cisco Aironet 1810, 1830, and 1850 Series Access Points could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The...
CVE-2018-0250: Protection Mechanism Failure
A vulnerability in Central Web Authentication CWA with FlexConnect Access Points APs for Cisco Aironet 1560, 1810, 1810w, 1815, 1830, 1850, 2800, and 3800 Series APs could allow an authenticated, adjacent attacker to bypass a configured FlexConnect access control list ACL. The vulnerability is du...
Cisco Mobility Express Pre-installed Credentials Full Control
The vulnerability of Cisco Mobility Express Software for Cisco Aironet 1830 Series and 1850 Series access points stems from the ability to connect to the device using pre-installed credentials, regardless of the device’s configuration master, subordinate, or standalone access point. Exploiting th...