CVE-2017-2800

wolfSSL (CyaSSL) vulnerability CVE-2017-2800 is a use-after-free-style out-of-bounds byte overwrite triggered by processing a specially crafted x509 certificate. Affected: wolfSSL up to version 3.10.2. Impact described in sources includes certificate validation issues, denial of service, and pote...

PT-2017-16153

Name of the Vulnerable Software and Affected Versions Cisco Aironet 1800, 2800, and 3800 Series Access Points version 8.3.102.0 Description A vulnerability in the Plug-and-Play PnP subsystem could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges due to...

CVE-2017-3873: Improper Input Validation

A vulnerability in the Plug-and-Play PnP subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points running a Lightweight Access Point AP or Mobility Express image could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges. The vulnerability is...

EulerOS 2.0 SP1 : firefox (EulerOS-SA-2016-1002)

According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or,...

CVE-2016-9197

A vulnerability in the CLI command parser of the Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers could allow an authenticated, local attacker to obtain access to the underlying operating system shell with root-level privileges. More Information: CSCvb70351. Known Affected...

CVE-2016-9197

CVE-2016-9197 affects Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers. The root cause is a vulnerability in the CLI command parser due to incorrect permissions assigned to configured users, enabling an authenticated, local attacker to obtain access to the underlying operating...

Cisco Mobility Express 2800 and 3800 Series Local Security Bypass Vulnerability

Cisco Mobility Express 2800 and 3800 Access Points are wireless products based on the Mobility Express solution from Cisco. A local security bypass vulnerability exists in the Cisco Mobility Express 2800 and 3800 series, which could be exploited by an attacker to bypass certain security...

PT-2017-9993

Name of the Vulnerable Software and Affected Versions Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers version 8.3102.0 Description A vulnerability in the CLI command parser could allow an authenticated, local attacker to obtain access to the underlying operating system shell...

CVE-2016-9197: Undefined Security Weakness

A vulnerability in the CLI command parser of the Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers could allow an authenticated, local attacker to obtain access to the underlying operating system shell with root-level privileges. More Information: CSCvb70351. Known Affected...

CVE-2016-9196: Undefined Security Weakness

A vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms could allow an authenticated, local attacker to gain unrestricted root access to the underlying Linux operating system. The root Linux shell is provided for advanced...

PT-2017-9992

Name of the Vulnerable Software and Affected Versions Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms versions 8.2121.0 through 8.3102.0 Description A vulnerability in login authentication management could allow an authenticated, local attacker to gain unrestricted root access to...

CVE-2016-9221

A Denial of Service Vulnerability in 802.11 ingress connection authentication handling for the Cisco Mobility Express 2800 and 3800 Access Points APs could allow an unauthenticated, adjacent attacker to cause authentication to fail. Affected Products: This vulnerability affects Cisco Mobility...

CVE-2016-9221: Undefined Security Weakness

A Denial of Service Vulnerability in 802.11 ingress connection authentication handling for the Cisco Mobility Express 2800 and 3800 Access Points APs could allow an unauthenticated, adjacent attacker to cause authentication to fail. Affected Products: This vulnerability affects Cisco Mobility...

CVE-2016-9220: Undefined Security Weakness

A Denial of Service Vulnerability in 802.11 ingress packet processing of the Cisco Mobility Express 2800 and 3800 Access Points APs could allow an unauthenticated, adjacent attacker to cause the connection table to be full of invalid connections and be unable to process new incoming requests. Mor...

PT-2017-9999

Name of the Vulnerable Software and Affected Versions Cisco Mobility Express 2800 Series Access Points versions 8.2121.12 through 8.41.82 Cisco Mobility Express 3800 Series Access Points versions 8.2121.12 through 8.41.82 Description A Denial of Service issue in 802.11 ingress connection...

PT-2017-9998

Name of the Vulnerable Software and Affected Versions Cisco Mobility Express 2800 and 3800 Access Points version 8.2130.0 Description A Denial of Service issue in the 802.11 ingress packet processing could allow an unauthenticated, adjacent attacker to cause the connection table to be full of...

Cisco Mobility Express 2800 and 3800 Access Points Denial of Service Vulnerability (CNVD-2017-01065)

Cisco Mobility Express 2800 and 3800 Access Points are wireless products based on the Mobility Express solution from Cisco. A denial of service vulnerability exists in the Cisco Mobility Express 2800 and 3800 Access Points. An attacker could exploit this vulnerability to cause a denial of service...

Cisco Mobility Express 2800 and 3800 Access Points Denial of Service Vulnerability

Cisco Mobility Express 2800 and 3800 Access Points are wireless products based on the Mobility Express solution from Cisco. A denial of service vulnerability exists in the Cisco Mobility Express 2800 and 3800 Access Points. An attacker could exploit this vulnerability to cause a denial of service...

Mozilla Thunderbird Security Advisories - 1 - (MFSA2016-16, MFSA2016-38) - Windows

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

CVE-2016-6362

Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0, 8.2.12x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow local users to gain privileges via crafted CLI parameters, aka Bug ID CSCuz24725...