CVE-2014-3686

wpasupplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpacli or hostapdcli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame...

CVE-2014-3686

wpasupplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpacli or hostapdcli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame...

CVE-2014-3686

wpasupplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpacli or hostapdcli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame...

CVE-2014-3686

CVE-2014-3686 affects wpa_supplicant and hostapd (versions 0.7.2–2.2) where using wpa_cli or hostapd_cli with action scripts can lead to remote arbitrary command execution via a crafted frame. Root cause involves unsanitized input passed to a system() call from action scripts, enabling command in...

CVE-2014-3686

wpasupplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpacli or hostapdcli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame...

[USN-2383-1] wpa_supplicant vulnerability

========================================================================== Ubuntu Security Notice USN-2383-1 October 14, 2014 wpa, wpasupplicant vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...

CVE-2014-3686

wpasupplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpacli or hostapdcli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame...

UBUNTU-CVE-2014-3686

wpasupplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpacli or hostapdcli with action scripts, allows remote attackers to execute arbitrary commands via a crafted frame...

CVE-2013-3686

cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list action...

CVE-2013-3686

CVE-2013-3686 affects AirLive IP cameras (notably WL2600CAM); vulnerable component is cgi-bin/operator/param, enabling remote information exposure that can disclose the administrator password via a list action. Also identified in Red Hat/NVD records and corroborated by multiple advisories; affect...

CVE-2013-3686

cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list action...

Airlive IP Cameras - Multiple Vulnerabilities

Exploit for hardware platform in category web applications 1.Advisory Information Title: Airlive Multiple Vulnerabilities Date Published: 12/06/2013 Date of last updated: 12/06/2013 2.Vulnerability Description Multiple vulnerabilities have been found in this devices: -CVE-2013-3540. Cross Site...

CVE-2012-3686

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1...

CVE-2012-3686

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1...

CVE-2012-3686

CVE-2012-3686 involves WebKit as used by Apple Safari before 6.0, where a crafted website could cause remote arbitrary code execution or memory corruption/DoS. The provided documents confirm the overall impact but do not enumerate exact affected versions beyond Safari before 6.0, nor specify the ...

CVE-2011-3686

CVE-2011-3686 affects Sonexis ConferenceManager (myAddressBook.asp) in versions 9.2.11.0 and 9.3.14.0. The vulnerability allows multiple XSS vectors via the parameters: fname, lname, email_edit, email, email2, email3, sms, sms_id, and work. NVD lists a CVSS v2 base score of 4.3 (network, medium c...

Debian: Security Advisory (DSA-2113-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-3686

The CVE-2010-3686 issue affects Drupal 6.x OpenID module before 6.18 and OpenID module 5.x before 5.x-1.4, where OpenID fields aren’t consistently signed, allowing remote attackers to bypass authentication via an OpenID provider assertion. Fixes are available: upgrade Drupal/OpenID to 6.18+ (and ...

CVE-2009-1947

SQL injection vulnerability in the UnbDbEncode function in unblib/database.lib.php in Unclassified NewsBoard UNB 1.6.4 allows remote attackers to execute arbitrary SQL commands via the Query parameter in a search action to forum.php, a different vector than CVE-2005-3686...

CVE-2008-3686

The CVE-2008-3686 entry concerns Linux kernel 2.6.26-rc4 and 2.6.26.x where the rt6_fill_node function in net/ipv6/route.c is vulnerable. Local users can trigger a denial of service (kernel OOPS) by sending IPv6 requests when no IPv6 input device is in use, causing a NULL pointer dereference. The...