1644 matches found
UBUNTU-CVE-2019-17133
In the Linux kernel through 5.3.2, cfg80211mgdwextgiwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow...
CVE-2019-17133
In the Linux kernel through 5.3.2, cfg80211mgdwextgiwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow...
CVE-2019-17133
CVE-2019-17133 affects Linux kernel up to 5.3.2, where cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c fails to reject an oversized SSID IE, causing a Buffer Overflow. The available connected docs confirm the vulnerability and its impact but do not provide a specific patched version or reme...
CVE-2019-17133
In the Linux kernel through 5.3.2, cfg80211mgdwextgiwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow...
CVE-2018-9581
In WiFi, the RSSI value and SSID information is broadcast as part of android.net.wifi.RSSICHANGE and android.net.wifi.STATECHANGE intents. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product:...
Information disclosure
In WiFi, the RSSI value and SSID information is broadcast as part of android.net.wifi.RSSICHANGE and android.net.wifi.STATECHANGE intents. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product:...
CVE-2018-9581
In WiFi, the RSSI value and SSID information is broadcast as part of android.net.wifi.RSSICHANGE and android.net.wifi.STATECHANGE intents. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product:...
CVE-2017-18484
Cognitoys Dino devices allow XSS via the SSID...
Command injection
Cognitoys Dino devices allow XSS via the SSID...
CVE-2017-18484
Cognitoys Dino devices are affected by CVE-2017-18484, a cross-site scripting (XSS) vulnerability that can be triggered via the SSID. Redhat/CNVD entries attribute the issue to a lack of proper validation of client-side data by the WEB application, enabling an attacker to execute client-side code...
CVE-2017-18484
Cognitoys Dino devices allow XSS via the SSID...
CVE-2016-10864
NETGEAR EX7000 V1.0.0.421.0.94 devices allow XSS via the SSID...
CVE-2016-10864
NETGEAR EX7000 V1.0.0.421.0.94 devices allow XSS via the SSID...
CVE-2016-10864
The CVE-2016-10864 entry concerns NETGEAR EX7000 devices (V1.0.0.42_1.0.94). Red Hat and CNVD records confirm a Cross-Site Scripting (XSS) vulnerability in the device’s web application that can be triggered via the SSID, stemming from insufficient input validation. Impact details in the sources i...
CVE-2017-18483
ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID...
CVE-2017-18483
ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID...
CVE-2018-12715
DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged...
Design/Logic Flaw
DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged...
CVE-2018-12715
Affected product: DIGISOL DG-HR3400 wireless router. Vulnerability: Cross-Site Scripting (XSS) via a modified SSID when the apssid value is unchanged, caused by lack of proper validation of client data by the web application. Impact: allows execution of client-side code in vulnerable contexts. Ro...