1638 matches found
CVE-2019-14336: Undefined Security Weakness
An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated dump of all of the config files through a certain admin.cgi?action= insecure HTTP request...
D-Link 6600-AP XSS / DoS / Information Disclosure
Security Advisory - 22/07/2019 Multiple vulnerabilities found in the D-Link 6600-AP device running the latest firmware version 4.2.0.14. D-Link 6600-AP is not produced anymore but the support is still provided by D-Link as per described on the D-Link website. Not that this product is built for...
Cisco IOS Access Points Software Input Validation Error Vulnerability
Cisco IOS Access Points APs Software is a set of software from Cisco USA dedicated to Cisco wireless access point devices. An input validation error vulnerability exists in the implementation of 802.11r Fast Transition in Cisco IOS APs Software. An attacker could exploit this vulnerability to cau...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
CVE-2010-5330
On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi aka Show AP info because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSyn...
Authentication flaw
There is an improper authentication vulnerability in some Huawei AP products before version V200R009C00SPC800. Due to the improper implementation of authentication for the serial port, an attacker could exploit this vulnerability by connecting to the affected products and running a series of...
CVE-2019-5298
There is an improper authentication vulnerability in some Huawei AP products before version V200R009C00SPC800. Due to the improper implementation of authentication for the serial port, an attacker could exploit this vulnerability by connecting to the affected products and running a series of...
CVE-2019-5298
CVE-2019-5298 affects some Huawei AP products due to improper authentication for the serial port. The vulnerability allows an attacker to connect locally to affected devices and execute a series of commands. Affected devices are Huawei APs prior to version V200R009C00SPC800. Huawei’s security adv...
CVE-2019-5298
There is an improper authentication vulnerability in some Huawei AP products before version V200R009C00SPC800. Due to the improper implementation of authentication for the serial port, an attacker could exploit this vulnerability by connecting to the affected products and running a series of...
CVE-2019-5298: Improper Authentication
There is an improper authentication vulnerability in some Huawei AP products before version V200R009C00SPC800. Due to the improper implementation of authentication for the serial port, an attacker could exploit this vulnerability by connecting to the affected products and running a series of...
SQL Injection Vulnerability in Joomla! AppsConda Component ap***.php Page
Joomla! is an open source content management system CMS, the system provides RSS feeds, site search and other functions. A SQL injection vulnerability exists in the ap.php page of the Joomla! AppsConda component. An attacker can exploit the vulnerability to obtain sensitive database information...
hostap/ap-mgmt-fuzzer: Crash in copy_supp_rates
Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5737950014341120 Project: hostap Fuzzer: libFuzzerhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: libfuzzerubsanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...
hostap/ap-mgmt-fuzzer: Crash in ap_free_sta
Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5713840416751616 Project: hostap Fuzzer: libFuzzerhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: libfuzzerubsanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...
hostap/ap-mgmt-fuzzer: Crash in mlme_deauthenticate_indication
Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5675224822972416 Project: hostap Fuzzer: libFuzzerhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: libfuzzerubsanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...
hostap/ap-mgmt-fuzzer: Crash in handle_auth
Detailed report: https://oss-fuzz.com/testcase?key=5686935802085376 Project: hostap Fuzzer: libFuzzerhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: libfuzzermsanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fff00000858 Crash State: handleauth ieee80211mgm...
hostap/ap-mgmt-fuzzer: Crash in hostapd_is_dfs_required
Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5666753884979200 Project: hostap Fuzzer: aflhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: aflasanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f6600000018 Crash...
hostap/ap-mgmt-fuzzer: Heap-buffer-overflow in ssid_match
Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5206623624101888 Project: hostap Fuzzer: libFuzzerhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: libfuzzerasanhostap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
CVE-2018-11927: Improper Validation of Array Index
Improper input validation on input which is used as an array index will lead to an out of bounds issue while processing AP find event from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...
TPshop open source mall system Ap***.php file there are SQL injection vulnerabilities
TPshop open source mall system , is a set of Shenzhen SoBao Networks Ltd. developed a set of multi-merchant model of the mall system . TPshop open source mall system Ap.php file there is a SQL injection vulnerability , attackers can use this vulnerability to obtain sensitive database information...
CVE-2019-1654 Cisco Aironet Series Access Points Development Shell Access Vulnerability
A vulnerability in the development shell devshell authentication for Cisco Aironet Series Access Points APs running the Cisco AP-COS operating system could allow an authenticated, local attacker to access the development shell without proper authentication, which allows for root access to the...