Directory traversal

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is...

CVE-2018-0425: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is...

CVE-2018-0426: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is...

CVE-2018-0424: Improper Neutralization of Special Elements used in a Command

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an authenticated, remote attacker to execute arbitrary commands. The vulnerability is due to...

CVE-2018-0423: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to cause a denial of service condition or to execute arbitrar...

HP / H3C VPN Firewall Module DoS

No description provided...

[security bulletin] HPSBGN02936 rev.1 - HP and H3C VPN Firewall Module Products, Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03993467 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03993467 Version: 1 HPSBGN02936 rev....

CVE-2013-4840

Unspecified vulnerability in HP and H3C VPN Firewall Module products SECPATH1000FE before 5.20.R3177 and SECBLADEFW before 5.20.R3177 allows remote attackers to cause a denial of service via unknown vectors...

CVE-2013-4840

Unspecified vulnerability in HP and H3C VPN Firewall Module products SECPATH1000FE before 5.20.R3177 and SECBLADEFW before 5.20.R3177 allows remote attackers to cause a denial of service via unknown vectors...

CVE-2013-4840: Undefined Security Weakness

Unspecified vulnerability in HP and H3C VPN Firewall Module products SECPATH1000FE before 5.20.R3177 and SECBLADEFW before 5.20.R3177 allows remote attackers to cause a denial of service via unknown vectors...

Cisco Patches Authentication Flaw in Wireless Routers

There’s a serious security flaw in some of Cisco’s wireless routers that could allow a remote attacker to take complete control of the router. The bug is in a number of the Cisco small business routers, as well as a wireless VPN firewall. Cisco has released patches to fix the vulnerability in its...

3Com OfficeConnect VPN Firewall Default Credentials (HTTP)

The remote 3Com OfficeConnect VPN Firewall is using known default credentials. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program ...

CVE-2010-3010

Cross-site scripting XSS vulnerability on the HP 3Com OfficeConnect Gigabit VPN Firewall 3CREVF100-73 with firmware before 1.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: a separate XSS issue for HP System Management Homepage SMH was originally...

CVE-2010-3010: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability on the HP 3Com OfficeConnect Gigabit VPN Firewall 3CREVF100-73 with firmware before 1.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: a separate XSS issue for HP System Management Homepage SMH was originally...

NETGEAR ProSafe VPN Firewall Web Server Malformed Basic Authorization Header Remote DoS (intrusive check)

It was possible to crash the remote Web server possibly the NETGEAR ProSafe VPN Web interface by supplying a long malformed username and password. An attacker may use this flaw to disable the remote service. TRUSTED...

NETGEAR ProSafe 1.x - VPN Firewall Web Interface Login Denial of Service

NETGEAR ProSafe 1.x - VPN Firewall Web Interface Login Denial of Service source: https://www.securityfocus.com/bid/7166/info It has been reported that some ProSafe VPN Firewall devices do not properly handle some types of input. Because of this, a remote user could potentially send malicious inpu...

Netgear ProSafe 1.x - VPN Firewall Web Interface Login Denial of Service

source: https://www.securityfocus.com/bid/7166/info It has been reported that some ProSafe VPN Firewall devices do not properly handle some types of input. Because of this, a remote user could potentially send malicious input to the device that would result in a crash, and potential denial of...

Phenoelit Advisory 0815 ++ -- Brick

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 ++- Authors FX [email protected] kim0 [email protected] Phenoelit Group http://www.phenoelit.de http://www.phenoelit.de/stuff/LucentBrick.txt Affected Products Lucent LSMS 5.5 Lucent Brick, Bridging VPN Firewall Lucent Bug ID: Not assigned...