60 matches found
Code injection
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could...
CVE-2018-0474 Cisco Unified Communications Manager Digest Credentials Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could...
CVE-2018-0474 Cisco Unified Communications Manager Digest Credentials Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could...
Cisco Unified Communications Manager Digest Credentials Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in configuration pages. An attacker could...
Unauthorized Access Vulnerability in HP Officejet Pro X451dw Printer
The HP Officejet Pro X451dw is a desktop printer from HP. An unauthorized access vulnerability exists in the HP Officejet Pro X451dw Printer, which can be exploited by an attacker to gain unauthorized access to configuration pages and obtain sensitive information...
CVE-2013-4598
The Groups, Communities and Co GCC module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permission, which allows remote attackers to access the configuration pages via unspecified vectors...
Code injection
The Groups, Communities and Co GCC module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permission, which allows remote attackers to access the configuration pages via unspecified vectors...
Hewlett-Packard Application Information Optimizer Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Application Information Optimizer. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ability to access configuration pages without authentication...
Ruckus Wireless Zoneflex 2942 Wireless Access Point - Authentication Bypass
Ruckus Wireless Zoneflex 2942 Wireless Access Point - Authentication Bypass Exploit Title: Ruckus Wireless Zoneflex 2942 Wireless Access Point vulnerable to authentication bypass Date: 10/10/2013 Exploit Author: myexploit Vendor Homepage: http://www.ruckuswireless.com/ Version: 2942 Wireless Acce...
Ruckus Wireless Zoneflex 2942 Wireless Access Point - Authentication Bypass
Exploit Title: Ruckus Wireless Zoneflex 2942 Wireless Access Point vulnerable to authentication bypass Date: 10/10/2013 Exploit Author: myexploit Vendor Homepage: http://www.ruckuswireless.com/ Version: 2942 Wireless Access Point version 9.6.0.0.267 CVE : CVE-2013-5030 Video to show the exploit...
Ruckus Wireless Zoneflex 2942 Wireless Access Point vulnerable to authentication bypass
Overview Ruckus Wireless Zoneflex 2942 Wireless Access Point version 9.6.0.0.267 and possibly earlier versions contains an authentication bypass vulnerability CWE-592. Description CWE-592: Authentication Bypass Issues Ruckus Wireless Zoneflex 2942 Wireless Access Point version 9.6.0.0.267 contain...
SMC SMC8024L2 switch web interface authentication bypass
Overview The SMC8024L2 switch does not require authentication for the web interface configuration pages if they are visited with a direct URL. Description The SMC8024L2 switch does not require authentication for the web interface configuration pages if they are visited with a direct URL. An...
3Com Wireless 8760 access point unauthorized access
During authorized user's session it's possible for another user to access configuration pages without authentication...
WordPress / WordPress MU Multiple Vulnerabilities (Jul 2009)
WordPress / WordPress MU is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WowWee Rovio webcam unauthorized access
Unauthorized access to RTSP stream and different configuration pages is possible...
CVE-2007-2033
Unspecified vulnerability in Cisco Wireless Control System WCS before 4.0.81.0 allows remote authenticated users to read any configuration page by changing the group membership of user accounts, aka Bug ID CSCse78596...
CVE-2007-2033
Unspecified vulnerability in Cisco Wireless Control System WCS before 4.0.81.0 allows remote authenticated users to read any configuration page by changing the group membership of user accounts, aka Bug ID CSCse78596...
CVE-2005-3721
The default configuration of the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not require authentication for sensitive configuration pages, which allows remote attackers to modify configuration...
VocalTec VGW4/8 Telephony Gateway - Remote Authentication Bypass
source: https://www.securityfocus.com/bid/9876/info It has been reported that the VGW4/8 Telephony Gateway is prone to a remote authentication bypass vulnerability via its web configuration tool. The problem is due to a design error in the application that allows a user to access configuration...