1777 matches found
CVE-2007-2512
Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access to the voice VLAN via daisy-chained systems...
CVE-2007-2512
CVE-2007-2512 affects Alcatel-Lucent OmniPCX Enterprise Release 7.0 and later, where the built‑in mini switch on IP-Touch phones is enabled by default. This allows unauthenticated access to the voice VLAN through a daisy‑chained computer system, effectively bypassing 802.1x in some scenarios and ...
CVE-2007-2512
Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access to the voice VLAN via daisy-chained systems...
CVE-2007-2512: Undefined Security Weakness
Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which allows attackers to gain access to the voice VLAN via daisy-chained systems...
Mozilla Firefox <= 1.5.0.4 Javascript Navigator Object Code Execution PoC
No description provided by source. !-- Firefox = 1.5.0.4 Javascript navigator Object Code Execution PoC http://browserfun.blogspot.com/ The following bug mfsa2006-45 was tested on the Firefox 1.5.0.4 running on Windows 2000 SP4, Windows XP SP4, and a recently updated Gentoo Linux system. This bug...
CVE-2006-3762
The Touch Control ActiveX control 2.0.0.55 allows remote attackers to read and possibly execute arbitrary files via a "file///" URI in the sPath parameter to the Execute function...
CVE-2006-3762
The CVE-2006-3762 entry concerns the Touch Control ActiveX control 2.0.0.55. A remote attacker can read, and possibly execute, arbitrary files by supplying a file:/// URI in the sPath parameter to the Execute function. This indicates a failure in input handling for file paths within the ActiveX c...
CVE-2006-3762: Undefined Security Weakness
The Touch Control ActiveX control 2.0.0.55 allows remote attackers to read and possibly execute arbitrary files via a "file///" URI in the sPath parameter to the Execute function...
CVE-2004-1780
CVE-2004-1780 affects the Info Touch Surfnet kiosk. The issue allows local users to deposit extra time into Internet kiosk accounts via repeated authentication attempts. CVSS v2.0 base score 4.6 (Medium): vectors suggest Local access, Low attack complexity, no authentication, partial impact on co...
CVE-2004-1795
Technical details about CVE-2004-1795 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2004-1780
Info Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts via repeated authentication attempts...
CVE-2004-1781
Info Touch Surfnet kiosk allows local users to crash Surfnet and access the underlying operating system via the CMDCREDITCARDCHARGE command...
CVE-2004-1795
Info Touch Surfnet kiosk allows local users to access the underlying filesystem via a 'file://' URI...
CVE-2004-1780: Undefined Security Weakness
Info Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts via repeated authentication attempts...
CVE-2004-1795: Undefined Security Weakness
Info Touch Surfnet kiosk allows local users to access the underlying filesystem via a 'file://' URI...
CVE-2004-1781: Undefined Security Weakness
Info Touch Surfnet kiosk allows local users to crash Surfnet and access the underlying operating system via the CMDCREDITCARDCHARGE command...
CVE-2001-1425
The CVE-2001-1425 entry concerns the Alcatel Speed Touch (firmware KHDSAA.108 through KHDSAA.134) where the EXPERT user’s challenge-response authentication can be bypassed by an attacker who directly computes the login response from information provided during login. This constitutes remote privi...
CVE-2001-1425
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login...
CVE-2001-1426
Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers to change firmware versions or the device's configurations...
CVE-2001-1426
Affected product: Alcatel Speed Touch with firmware KHDSAA.108 and KHDSAA.132–KHDSAA.134. Vulnerability: TFTP server runs without a password, enabling remote modification of firmware versions or device configurations. Root cause: insecure TFTP service exposed on the device. Impact: allows uninten...