CVE-2016-1000215

Ruckus Wireless H500 web management interface denial of service...

CVE-2016-1000214

CVE-2016-1000214 concerns the Ruckus Wireless H500 web management interface, where an authentication bypass vulnerability exists. Connected CNVD entry for this CVE describes that an attacker could bypass security restrictions by sending a request with a specially crafted string. NVD records indic...

CVE-2016-1000215

The CVE-2016-1000215 entry concerns the Ruckus Wireless H500, an indoor wall-switch access point, with a denial-of-service flaw in its web management interface. Connected CNVD-2016-10447 explicitly describes a DoS in the H500 web management interface and identifies the affected product. The CNVD ...

CVE-2016-1000214

Ruckus Wireless H500 web management interface authentication bypass...

daloRADIUS 0.9-9 SQL Injection / Code Execution

Abstract -------- "daloRADIUS is an advanced RADIUS web management application aimed at managing hotspots and general-purpose ISP deployments. It features user management, graphical reporting, accounting, a billing engine and integrates with GoogleMaps for geo-locating."1 While auditing this...

Cisco Meeting Server Cross-Site Scripting Vulnerability (CNVD-2016-10126)

Cisco Meeting Server formerly known as Acano Conferencing Server is the United States Cisco Cisco company's set of audio and video conferencing server software. A cross-site scripting vulnerability exists in the Web-based management interface of Cisco Meeting Server. A remote attacker can exploit...

Insecure Server Configuration

An incorrect Web management server configuration was identified in PAN-OS. Ref PAN-52038/86767...

Cross-Site Scripting in Web Interface

The Palo Alto Networks web management interface is vulnerable to a post-authentication persistent cross-site scripting condition in the monitor tab. Ref PAN-57659/95895...

Ruckus Wireless H500 Command Injection Vulnerability

The Ruckus Wireless H500 is an indoor wall switch access point from Ruckus Wireless, USA. web management interface is one of the web-based management interfaces. A command injection vulnerability exists in the Ruckus Wireless H500 web management interface. An attacker can exploit this vulnerabili...

Web interface denial of service

Palo Alto Networks web management server is vulnerable to a denial-of-service attack. Ref PAN-64917/105311 CVE-2014-9708 This pre-authenticated denial-of-service attack could disrupt the web management interface. This issue affects PAN-OS 5.0.19 and earlier; PAN-OS 5.1.12 and earlier; PAN-OS 6.0....

Web interface denial of service

Palo Alto Networks web management server is vulnerable to a denial-of-service attack. Ref PAN-64917/105311 CVE-2014-9708 This pre-authenticated denial-of-service attack could disrupt the web management interface. This issue affects PAN-OS 5.0.19 and earlier; PAN-OS 5.1.12 and earlier; PAN-OS 6.0....

CVE-2016-1000216

Ruckus Wireless H500 web management interface authenticated command injection...

Command injection

Ruckus Wireless H500 web management interface authenticated command injection...

CVE-2016-1000216

Ruckus Wireless H500 web management interface authenticated command injection...

CVE-2016-1000216

The CVE concerns the Ruckus Wireless H500 web management interface, which is affected by an authenticated command-injection vulnerability in its web UI. According to connected CNVD data, an attacker who can authenticate can trigger arbitrary command execution, enabling potential full compromise o...

Docomo L-04D mobile WiFi router vulnerable to cross-site request forgery

Overview L-04D provided by NTT DOCOMO, INC. is a wireless WiFi router. L-04D contains a cross-site request forgery vulnerability in the the web management screen. Atsuo Sakurai of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

Cisco Firepower Management Center and FireSIGHT System Software Cross-Site Scripting Vulnerability

Cisco Firepower Management Center and FireSIGHT System Software are management center software from Cisco in the United States. A cross-site scripting vulnerability in the web-based management interface of Cisco Firepower Management Center and FireSIGHT System Software allows remote attackers to...

ELNet Power Meter Unauthenticated Access / Weak Credential Management

ELNet Energy & Electrical Power Meter - Mulitple Vulnerabilities http://elnet.feniks-pro.com/Elnet-LT.php http://www.elnet.cc/product/elnet-lt/ Powermeter with color graphic display for all electrical measurements and harmonics, with TCP/IP and RS485 communication ModBus and Bacnet, panel mounted...

SQL Injection and XSS Vulnerabilities in Centro InfoTech Web Management System Wim V1.03

Ltd. is Huaibei Shengtuo Information Technology Co., Ltd. is Huaibei website construction, website optimization, 400 telephone for, short message group sending, software development, Internet industry companies. SQL injection and XSS vulnerability exists in version 1.03 of Centro InfoTech's websi...

CVE-2016-1472

The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service interface outage via a crafted HTTP request, aka Bug ID CSCuz76238...