1370 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-4023
Cross-site scripting XSS vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-4023
Aruba Mobility Controller is affected by a cross-site scripting (XSS) vulnerability in the login CGI page. The issue impacts Aruba Mobility Controller versions 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions. The vulnerability allows remote attackers to inject arbitrary web scrip...
CVE-2007-4023: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and earlier FIPS versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-0931
The CVE describes a heap-based buffer overflow in the management interfaces of Aruba Mobility Controllers (200, 800, 2400, 6000) and Alcatel-Lucent OmniAccess Wireless (43xx, 6000). The underlying flaw allows remote attackers to trigger a denial of service (process crash) and potentially execute ...
CVE-2007-0931
Heap-based buffer overflow in the management interfaces in 1 Aruba Mobility Controllers 200, 800, 2400, and 6000 and 2 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 allows remote attackers to cause a denial of service process crash and possibly execute arbitrary code via long credential string...
CVE-2007-0931: Undefined Security Weakness
Heap-based buffer overflow in the management interfaces in 1 Aruba Mobility Controllers 200, 800, 2400, and 6000 and 2 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 allows remote attackers to cause a denial of service process crash and possibly execute arbitrary code via long credential string...
CVE-2007-0932: Undefined Security Weakness
The 1 Aruba Mobility Controllers 200, 600, 2400, and 6000 and 2 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN...
CVE-2006-6953
The virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key as it is pressed, which allows local users to capture arbitrary keystrokes, such as for passwords, by shoulder surfing or grabbing periodic screenshots...
CVE-2006-6953
The virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key as it is pressed, which allows local users to capture arbitrary keystrokes, such as for passwords, by shoulder surfing or grabbing periodic screenshots...
CVE-2006-6953
CVE-2006-6953 affects the GlobeTrotter Mobility Manager. The vulnerability arises from the virtual keyboard: when a key is pressed, its color changes, enabling local attackers to capture arbitrary keystrokes (e.g., passwords) via shoulder surfing or periodic screenshots. Exploitation is local and...
CVE-2006-6953: Exposure of Sensitive Information to an Unauthorized Actor
The virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key as it is pressed, which allows local users to capture arbitrary keystrokes, such as for passwords, by shoulder surfing or grabbing periodic screenshots...
GlobeTrotter Mobility Manager - security issue
Discovered by Damian Zelek - 03 April 2006 Published - 23 June 2006 Vendor was informed - 24 April 2006 Vendors answer - "We will talk with our Department of Software" :-D Summary: GlobeTrotter Mobility Manager is a unique PC software solution that enables fast, simple and easy access to wireless...
GlobeTrotter Mobility Manager security protection bypass
It's possible to bypass keylogging protection by making screenshots...
CVE-2005-4771
Trusted Mobility Agent PC Policy in Trust Digital Trusted Mobility Suite provides a cancel button that bypasses the domain-authentication prompt, which allows local users to sync a handheld PDA device despite a policy setting that sync is unauthorized...
CVE-2005-4771
The CVE-2005-4771 entry concerns the Trust Digital Trusted Mobility Suite’s Trusted Mobility Agent PC Policy. A cancel button at the domain-authentication prompt bypasses policy checks, allowing local users to sync a handheld (PDA) device despite a policy setting that sync is unauthorized. The av...
CVE-2005-4771: Undefined Security Weakness
Trusted Mobility Agent PC Policy in Trust Digital Trusted Mobility Suite provides a cancel button that bypasses the domain-authentication prompt, which allows local users to sync a handheld PDA device despite a policy setting that sync is unauthorized...
CVE-2005-4771
Trusted Mobility Agent PC Policy in Trust Digital Trusted Mobility Suite provides a cancel button that bypasses the domain-authentication prompt, which allows local users to sync a handheld PDA device despite a policy setting that sync is unauthorized...
Trusted Digital, Trusted Mobility Suite Authorization Bypass Vulnerability
Trusted Digital, Trusted MObility Suite Authorization Bypass Vulnerability Affected applications Trusted Mobility Agent PC Policy Versions: All Backgroud: Trusted Mobility Suite detects, controls and centrally manages mobile devices. It also pushes security policy and disables lost or stolen...