36 matches found
CVE-2017-8760
CVE-2017-8760: An XSS vulnerability affecting Accellion FTA devices prior to FTA_9_12_180. The flaw resides in the courier/1000@/index.html page via the auth_params parameter, with the device’s internal WAF filters unable to reliably block certain payloads; bypasses via URL-encoding and similar m...
CVE-2016-8760
CVE-2016-8760 is a heap overflow vulnerability in the touchscreen driver of Huawei P9 (before EVA-AL10C00B192) and Huawei Honor 6 (before H60-L02_6.10.1). The issue can crash the device or allow user privilege escalation. Affected devices use Huawei’s touchscreen/video drivers; Huawei’s security ...
[SECURITY] [DLA 881-1] ejabberd security update
Package : ejabberd Version : 2.1.10-4+deb7u2 CVE ID : CVE-2014-8760 Debian Bug : 767521 767535 It was found that ejabberd does not enforce the starttlsrequired setting when compression is used, which causes clients to establish connections without encryption. For Debian 7 "Wheezy", this problem h...
CVE-2015-8760
The CVE-2015-8760 issue affects TYPO3 6.2.x prior to 6.2.16, where the Flvplayer component can cause Cross-Site Flashing by embedding Flash videos from external domains via unspecified vectors. This vulnerability can allow remote attackers to load external media, with the impact described as pote...
Mandriva Linux Security Advisory : ejabberd (MDVSA-2015:175)
Updated ejabberd packages fix security vulnerability : A flaw was discovered in ejabberd that allows clients to connect with an unencrypted connection even if starttlsrequired is set CVE-2014-8760. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...
Mandriva Linux Security Advisory : ejabberd (MDVSA-2014:207)
Updated ejabberd packages fix security vulnerability : A flaw was discovered in ejabberd that allows clients to connect with an unencrypted connection even if starttlsrequired is set CVE-2014-8760. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...
DEBIAN-CVE-2014-8760
ejabberd before 2.1.13 does not enforce the starttlsrequired setting when compression is used, which causes clients to establish connections without encryption...
CVE-2014-8760
CVE-2014-8760 affects ejabberd prior to 2.1.13, where the starttls_required setting is not enforced when compression is used, allowing connections to be established without encryption. Public disclosures/ advisories (Debian DLA-881-1, Mandriva MDVSA entries, Mageia advisory) document the issue an...
CVE-2008-6395
The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service device crash via a malformed HTTP POST request...
Cross site request forgery (csrf)
The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service device crash via a malformed HTTP POST request...
CVE-2008-6395
The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service device crash via a malformed HTTP POST request...
CVE-2008-6395
CVE-2008-6395 affects the web management interface of the 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point. A remote attacker can trigger a denial of service (device crash) by sending a malformed HTTP POST request. The available documents identify the affected product and impact but do not ...
PR07-40: Authentication Bypass, Passwords Leakage and SNMP Injection on 3Com AP 8760
PR07-40: Authentication Bypass, Passwords Leakage and SNMP Injection on 3Com AP 8760 Vulnerability Found: 6th November 2007 Vendor Informed: 2nd May 2008 Date Public: 14th November 2008 Severity: Medium Credits: Adrian Pastor of ProCheckUp Ltd www.procheckup.com. Vulnerability 1: Description: The...
3Com AP 8760绕过认证、泄露口令及SNMP注入漏洞
BUGTRAQ ID: 32358 3Com Wireless 8760 Dual-Radio 11a/b/g PoE是适用于各种类型企业的无线接入路由器。 3Com AP 8760的HTTP认证机制如下： 1. 路由器检查用户提交的凭据是否有效。 2. 如果有效，路由器的Web界面将用户重新定向到仅有通过认证的管理用户才可以使用的URL。...
3Com Wireless 8760 Dual-Radio 11a/b/g PoE - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/32358/info 3Com Wireless 8760 Dual-Radio 11a/b/g PoE Access Point is prone to multiple security vulnerabilities, including an HTML-injection issue and an authentication-bypass issue. Successfully exploiting these issues will allow an attacker to obtain...
