68 matches found
CVE-2017-8840
Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2380hw6580hw2710hw31350hw22500-7.0.1-build2093. A direct request to cgi-bin/HASync/hasync.cgi?debug=1 shows Master LAN Address, Serial Number, HA Group ID, Virtual IP, a...
CVE-2017-8840
CVE-2017-8840 affects Peplink Balance models 305, 380, 580, 710, 1350 and 2500 with firmware prior to fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. A request to cgi-bin/HASync/hasync.cgi?debug=1 discloses sensitive information including Master LAN Address, Serial Number, HA Group ...
CVE-2017-8840
Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2380hw6580hw2710hw31350hw22500-7.0.1-build2093. A direct request to cgi-bin/HASync/hasync.cgi?debug=1 shows Master LAN Address, Serial Number, HA Group ID, Virtual IP, a...
CVE-2016-8840
CVE-2016-8840 is rejected/not used and does not represent an active vulnerability entry.
CVE-2015-8840
Affected component: SAP NetWeaver AS Java — XML DAS (XML Data Archiving Service). Vulnerability summary: The XML DAS service does not perform authorization checks, enabling remote authenticated users to obtain sensitive information, and potentially gain privileges or cause other impact through re...
CVE-2014-8840
CVE-2014-8840 affects the iTunes Store component in Apple iOS prior to 8.1.3, where a website redirect from Safari to the iTunes Store could bypass Safari’s sandbox protection. The root cause is improper handling of SSL URL redirects to the iTunes Store, enabling a remote attacker to bypass sandb...
