291 matches found
CVE-2006-4975
Yahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user-assisted remote attackers to inject arbitrary web script or HTML via a URL at the online service...
CVE-2006-4975
Yahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user-assisted remote attackers to inject arbitrary web script or HTML via a URL at the online service...
CVE-2006-4975
CVE-2006-4975 concerns Yahoo! Messenger for WAP, where saving messages that contain JavaScript enables user-assisted remote script/HTML injection via a URL on the service. The vulnerability is tied to how messages could be stored and later rendered, allowing arbitrary script execution in affected...
CVE-2006-4975: Undefined Security Weakness
Yahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user-assisted remote attackers to inject arbitrary web script or HTML via a URL at the online service...
Code injection
Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points WAP allows remote authenticated users to cause a denial of service termination of packet passing or termination of client connections by sending the management interface a large number of spoofed ARP packets, which creates a large ARP...
CVE-2006-0354
CVE-2006-0354 affects Cisco IOS on Aironet Wireless Access Points. The issue: remote authenticated users can trigger a denial of service by sending a flood of spoofed ARP packets to the management interface, creating a large ARP table that exhausts memory and disrupts packet forwarding or client ...
Don't let upload My Chosen pass-vulnerability warning-the black bar safety net
Recently busy with the development of a WAP mobile website, several days did not sleep, is because UTF8 conversion for GB problems. Online though there are ready-made ASP script can be converted, but the conversion process or some character conversion. Helpless in a successful development of the...
CVE-2004-2556
NetGear WG602 aka WG602v1 Wireless Access Point firmware 1.04.0 and 1.5.67 has a hardcoded account of username "super" and password "5777364", which allows remote attackers to modify the configuration...
CVE-2003-1264
The CVE-2003-1264 issue affects the TFTP server used by Longshine WAP LCS-883R-AC-B and by the D-Link DI-614+ 2.0 based on it. The vulnerability enables remote attackers to download the configuration file (config.img) and other files without authentication, allowing access to the WEP secret and e...
CVE-2003-1264
TFTP server in Longshine Wireless Access Point WAP LCS-883R-AC-B, and in D-Link DI-614+ 2.0 which is based on it, allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file config.img and other files without authentication...
CVE-2003-1264: Undefined Security Weakness
TFTP server in Longshine Wireless Access Point WAP LCS-883R-AC-B, and in D-Link DI-614+ 2.0 which is based on it, allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file config.img and other files without authentication...
PT-2005-3279 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.8.20 through 0.10.11 Description: The issue is related to unknown vulnerabilities in certain dissectors, which can cause a denial of service. This happens when the application encounters specific packets that lead to a nul...
CVE-2001-1568
CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack...
CVE-2001-1568
The CVE-2001-1568 issue affects the CMG WAP gateway, where the system fails to verify the fully qualified domain name in the URL against X.509 certificates issued by root CAs. This hostname verification gap enables remote attackers to perform a man-in-the-middle attack to spoof SSL certificates, ...
CVE-2001-1569
Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack...
CVE-2001-1569
Openwave WAP gateway is affected by CVE-2001-1569: it does not verify the fully-qualified domain name in X.509 certificates against root CAs, enabling remote attackers to spoof SSL via a man-in-the-middle. Affected component: Openwave WAP gateway; root-cause: missing hostname verification. Impact...
CVE-2001-1569: Undefined Security Weakness
Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack...
CVE-2001-1568: Undefined Security Weakness
CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack...
