Cross site scripting

Cross-site scripting XSS vulnerability in the web management interface in the ZyXEL P-330W router allows remote attackers to inject arbitrary web script or HTML via the pingstr parameter and other unspecified vectors...

CVE-2007-6730

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in the ZyXEL P-330W router allow remote attackers to hijack the authentication of administrators for requests that 1 enable remote router management via goform/formRmtMgt or 2 modify the administrator passwor...

CVE-2007-6730

CVE-2007-6730 affects ZyXEL P-330W router via the web management interface, introducing CSRF vulnerabilities that allow remote attackers to hijack administrator authentication for (1) enabling remote router management through goform/formRmtMgt, and (2) changing the administrator password via gofo...

CVE-2007-6729

The CVE-2007-6729 entry describes a Cross-site scripting (XSS) vulnerability in the web management interface of the ZyXEL P-330W router. The flaw allows remote attackers to inject arbitrary web script or HTML via the pingstr parameter and other vectors. Connected sources confirm the affected prod...

CVE-2007-6730

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in the ZyXEL P-330W router allow remote attackers to hijack the authentication of administrators for requests that 1 enable remote router management via goform/formRmtMgt or 2 modify the administrator passwor...

CVE-2007-6729: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web management interface in the ZyXEL P-330W router allows remote attackers to inject arbitrary web script or HTML via the pingstr parameter and other unspecified vectors...

CVE-2008-6708

Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services SES 3.x and 4.0, as used with Avaya Communication Manager 3.1.x and 4.x, allows remote authenticated administrators to gain root privileges via unknown vectors related to configuration of "data viewing or...

Authentication flaw

The Web management interface in Avaya SIP Enablement Services SES 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, does not perform authentication for certain functionality, which allows remote attackers to obtain sensitive information and access restricted functionality via 1 the...

Code injection

Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services SES 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allow remote attackers to obtain 1 application server configuration, 2 database server configuration including encrypted passwords...

CVE-2008-6707

The Web management interface in Avaya SIP Enablement Services SES 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, does not perform authentication for certain functionality, which allows remote attackers to obtain sensitive information and access restricted functionality via 1 the...

CVE-2008-6709

CVE-2008-6709 affects Avaya SIP Enablement Services (SES) 3.x and 4.0 used with Avaya Communication Manager 3.1.x. The Web management interface vulnerability allows remote authenticated users to execute arbitrary commands via unknown vectors related to configuring local data viewing or restoring ...

CVE-2008-6709: Undefined Security Weakness

Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services SES 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allows remote authenticated users to execute arbitrary commands via unknown vectors related to configuration of "local data viewing or...

CVE-2008-6708: Undefined Security Weakness

Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services SES 3.x and 4.0, as used with Avaya Communication Manager 3.1.x and 4.x, allows remote authenticated administrators to gain root privileges via unknown vectors related to configuration of "data viewing or...

CVE-2008-6395: Use of Externally-Controlled Format String

The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service device crash via a malformed HTTP POST request...

Design/Logic Flaw

The web management interface in Netgear WGR614v9 allows remote attackers to cause a denial of service crash via a request that contains a question mark "?"...

CVE-2008-6122

CVE-2008-6122 affects Netgear WGR614v9: the web management interface is vulnerable to a denial-of-service triggered by a crafted HTTP request containing a question mark ("?"). The issue is remote, requires no authentication, and results in a crash (availability impact). CVSS v2 base score 7.8 (HI...

CVE-2008-6122: Improper Input Validation

The web management interface in Netgear WGR614v9 allows remote attackers to cause a denial of service crash via a request that contains a question mark "?"...

CVE-2008-5709

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the 1 Set Static Routes and 2 Backup...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the 1 Set Static Routes and 2 Backup...

CVE-2008-5710

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1.x, 4.0.3, and 5.x allow remote attackers to read 1 configuration files, 2 log files, 3 binary image files, and 4 help files via unknown vectors...