Design/Logic Flaw

An exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted Access Point with the same name as the legitimate one can be used to make Circle connect to an untrusted network. An attacker needs to setup an Access Point reachable by the device and to send a series of...

CVE-2017-12096

An exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted Access Point with the same name as the legitimate one can be used to make Circle connect to an untrusted network. An attacker needs to setup an Access Point reachable by the device and to send a series of...

PT-2017-12349 · Disney · Circle With Disney

Name of the Vulnerable Software and Affected Versions: Circle with Disney affected versions not specified Description: A vulnerability exists in the WiFi management of Circle with Disney, allowing an attacker to connect the device to an untrusted network. This can be achieved by setting up a...

Circle with Disney Access Control Error Vulnerability

Circle with Disney is a set of internet monitoring and management devices from Circle Media, Inc. for monitoring children's internet behavior, and WiFi management is one of the WiFi management components. An access control error vulnerability exists in WiFi management in Circle with Disney versio...

Circle with Disney WiFi Security Downgrade Vulnerability

Summary An exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted Access Point with the same name as the legitimate one, can be used to make Circle connect to an untrusted network. An attacker needs to setup an Access Point reachable by the device and to send a...

Microsoft Windows Server DNS and LDAP Response Spoofing Vulnerability

Microsoft Windows is a family of operating systems from Microsoft. A security bypass vulnerability exists in the Microsoft Network Location Awareness NLA service, which can lead to overly lax configuration of firewall rules or some of the services, increasing the opportunity for attackers. The...

Microsoft Windows NLA Security Feature Bypass (MS15-005; CVE-2015-0006)

A security feature bypass vulnerability has been reported in the Network Location Awareness NLA service. The vulnerability is caused when the NLA service fails to properly validate if a domain-connected machine is connected to the domain or to an untrusted network. A remote attacker can exploit...

MS15-005: Vulnerability in Network Location Awareness Service Could Allow Security Feature Bypass (3022777)

The Network Location Awareness NLA service on the remote host is affected by a security bypass vulnerability due to a failure to validate whether it is connected to a trusted domain or an untrusted network. This could cause the system to unintentionally configure applications insecurely e.g. the...

Fedora 15 : libsocialweb-0.25.20-1.fc15 / rest-0.7.12-1.fc15 (2011-15839)

CVE-2011-4129 A security flaw was found in the way the libsocialweb, a social network data aggregator, performed its initialization when this service start was initiated by the dbus daemon. Due to a deficiency in a way the libsocialweb service was initialized, an untrusted non-SSL network...

Fedora 16 : libsocialweb-0.25.20-1.fc16 / rest-0.7.12-1.fc16 (2011-15833)

CVE-2011-4129 A security flaw was found in the way the libsocialweb, a social network data aggregator, performed its initialization when this service start was initiated by the dbus daemon. Due to a deficiency in a way the libsocialweb service was initialized, an untrusted non-SSL network...

CVE-2005-0618

The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R firmware before vuild 858, and Nexland Pro800turbo, when configured for load balancing between two WANs, might send SMTP traffic to a trusted network...

CVE-2005-0618

The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R firmware before vuild 858, and Nexland Pro800turbo, when configured for load balancing between two WANs, might send SMTP traffic to a trusted network...