1638 matches found
Debian DLA-260-1 : hostapd security update
A vulnerability was found in WMM Action frame processing in a case where hostapd is used to implement AP mode MLME/SME functionality i.e., Host AP driver of a mac80211-based driver on Linux. This vulnerability can be used to perform denial of service attacks by an attacker that is within radio...
AP Portfolio [mod_ap_portfolio], 3.3 and below, XSS (Cross Site Scripting)
AP Portfolio modapportfolio, 3.3.1 and below, XSS Cross Site Scripting Extension includes vulnerable JS library prettyPhoto Vulnerability fixed in version 3.3.2 Update notice:http://aplikko.com/joomla-extensions/ap-portfolio...
CVE-2015-4142
Integer underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpasupplicant 0.7.0 through 2.4, when used for AP mode MLME/SME functionality, allows remote attackers to cause a denial of service crash via a crafted frame, which triggers an out-of-bounds read...
The vulnerability of the Websense TRITON AP-EMAIL security tool allows attackers to carry out network attacks targeting port 17703.
The vulnerability of the Websense TRITON AP-EMAIL protection mechanism lies in the lack of protection against network attacks targeting port 17703...
hostapd: integer underflow in AP mode WMM Action frame processing
An integer underflow flaw, leading to a buffer over-read, was found in the way wpasupplicant handled WMM Action frames. A specially crafted frame could possibly allow an attacker within Wi-Fi radio range to cause wpasupplicant to crash...
wpa_supplicant security and enhancement update
1:2.0-17 - AP WMM: Fix integer underflow in WMM Action frame parser rh 1221178 rh 1222015 1:2.0-16 - P2P: Validate SSID element length before copying it CVE-2015-1863 1:2.0-15 - Add domainmatch config option from upstream rh 1178263 - Include peer certificate in EAP events for use by clients...
FreeBSD : hostapd and wpa_supplicant -- multiple vulnerabilities (bbc0db92-084c-11e5-bb90-002590263bf5)
Jouni Malinen reports : WPS UPnP vulnerability with HTTP chunked transfer encoding. 2015-2 - CVE-2015-4141 Integer underflow in AP mode WMM Action frame processing. 2015-3 - CVE-2015-4142 EAP-pwd missing payload length validation. 2015-4 - CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, CVE-2015-414...
Fedora 20 : hostapd-2.4-2.fc20 (2015-8386)
Security update for integer underflow in AP mode WMM Action frame processing. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
Fedora 22 : hostapd-2.4-2.fc22 (2015-8303)
Security update for integer underflow in AP mode WMM Action frame processing. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
hostapd and wpa_supplicant -- multiple vulnerabilities
Jouni Malinen reports: WPS UPnP vulnerability with HTTP chunked transfer encoding. 2015-2 - CVE-2015-4141 Integer underflow in AP mode WMM Action frame processing. 2015-3 - CVE-2015-4142 EAP-pwd missing payload length validation. 2015-4 - CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, CVE-2015-4146...
ArubaOS Remote Access Point (RAP) Command Injection (ARUBA-PSA-2015-004)
Aruba has identified a problem with the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:arubanetworks:arubaos"; if description...
Unspecified Vulnerability in Websense TRITON AP-EMAIL
Websense TRITON is the Unified Content Architecture for data security. An unspecified security vulnerability exists in Websense TRITON AP-EMAIL port 17703, no detailed vulnerability details are available at this time...
Multiple Cross-Site Scripting Vulnerabilities in Websense TRITON AP-DATA
Websense TRITON is the Unified Content Architecture for data security. Websense TRITON AP-DATA suffers from multiple cross-site scripting vulnerabilities that can be exploited by remote attackers to inject malicious script or HTML code that can be used to gain access to sensitive information or...
Unspecified Vulnerability in Websense TRITON AP-WEB
Websense TRITON is the Unified Content Architecture for data security. Websense TRITON AP-WEB HTTP authentication unspecified security vulnerability allows attackers to submit a special request to enumerate windows domain users...
Websense Triton and V-Series HTML Injection Vulnerabilities
Websense TRITON is the Unified Content Architecture for data security. Websense TRITON AP-WEB versions prior to 8.0.0 and V-Series 7.7 appliances suffer from multiple HTML injection vulnerabilities that can be exploited by remote attackers to inject malicious script or HTML code, which can be use...
CVE-2015-2771
The Mail Server in Websense TRITON AP-EMAIL and V-Series appliances before 8.0.0 uses plaintext credentials, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2015-2769
Multiple cross-site request forgery CSRF vulnerabilities in the Personal Email Manager PEM in Websense TRITON AP-EMAIL before 8.0.0 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2015-2768
Cross-site scripting XSS vulnerability in Websense TRITON AP-EMAIL before 8.0.0 and V-Series 7.7 appliances allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...