CVE-2008-4078

SQL injection vulnerability in the AR/AP transaction report in 1 LedgerSMB LSMB before 1.2.15 and 2 SQL-Ledger 2.8.17 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-4078

SQL injection vulnerability in the AR/AP transaction report in 1 LedgerSMB LSMB before 1.2.15 and 2 SQL-Ledger 2.8.17 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Cross site request forgery (csrf)

The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from entering memory locations used for string constants, which allows remote attackers to change the admin password stored in memory via a long username in an HTTP...

CVE-2007-4915

The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from entering memory locations used for string constants, which allows remote attackers to change the admin password stored in memory via a long username in an HTTP...

CVE-2007-4915

The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from entering memory locations used for string constants, which allows remote attackers to change the admin password stored in memory via a long username in an HTTP...

CVE-2007-4915

The CVE-2007-4915 issue affects Boa 0.93.x to 0.94.11 with Intersil isl3893 extensions, where stack writes can overwrite memory locations used for string constants. This allows a remote attacker to change the admin password stored in memory through a long username in an HTTP Basic Authentication ...

CVE-2007-2554

CVE-2007-2554 affects Associated Press (AP) Newspower 4.0.1 and earlier. The root cause is a default blank MySQL root password, enabling remote attackers to insert or modify news articles via shows.tblscript. The observed impact is potential unauthenticated data integrity compromise (article inse...

AP Newspower software <=4.0.1 allows remote data manipulation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AP Newspower is commercial software available from the AP that allows media outlets to obtain text news feeds from the Associated Press. It's like RSS, but you pay for it. And it's slower. And fatter. The default install of this software includes a...

D-LINK DWL-2000AP+ remote DoS

D-LINK DWL-2000AP+ with firmware version 2.11 is prone to two remote denial of service vulnerability because it fails to handle arp flooding. The first vuln causes the wireless link 802.11 to be resetted and the arp table to be rebuilded. All clients connected to the AP are disconnected. This bug...

CVE-2006-5741

Multiple cross-site scripting XSS vulnerabilities in AirMagnet Enterprise before 7.5 build 6307 allow remote attackers to inject arbitrary web script or HTML via 1 the 404 error page of the Smart Sensor Edge Sensor; 2 the user name for a failed logon, when displayed in the audit journals reviewin...

CVE-2006-5741

AirMagnet Enterprise (before 7.5 build 6307) is affected by multiple XSS vulnerabilities. The affected component is the Enterprise Web interface and related log viewer, with vectors including (1) the Smart Sensor Edge Sensor 404 error page, (2) the failed-login username displayed in the audit jou...

Compex Wiriless Access Points DoS

DoS on UConfig agent packet parsing UDP/7778...

CVE-2004-2549

CVE-2004-2549 affects Nortel WLAN APs 2220, 2221, and 2225. A remote attacker can cause a service crash (DoS) by sending a TCP request containing a large string followed by eight newline characters to Telnet (port 23) or HTTP (port 80); the issue is described as possibly due to a buffer overflow....

CVE-2004-2549

Nortel Wireless LAN WLAN Access Point AP 2220, 2221, and 2225 allow remote attackers to cause a denial of service service crash via a TCP request with a large string, followed by 8 newline characters, to 1 the Telnet service on TCP port 23 and 2 the HTTP service on TCP port 80, possibly due to a...

Crash SMC AP

The remote SMC 2652W Access point web server crashes when sent a specially formatted HTTP request. OpenVAS Vulnerability Test $Id: smcwwwdos.nasl 5838 2017-04-03 10:26:36Z cfi $ Description: Crash SMC AP Authors: John Lampe ... [email protected] changes by rd: -fill the Host header to work...

Cisco wireless accee points LWAPP mode unauthorized access

It's possible to send unencrypted packet with spoofed MAC to secure network...

Serious flaw in Linksys wireless AP password security

It appears that firmware version 4.50.6 for the Linksys WRT54GS hardware version 1 wireless router allows wireless clients to connect and use the network without actually authenticating. With WPA Personal/TKIP authentication enabled, the unit allows both clients using encryption with the correct...

CVE-2005-0112

The web-based administrative interface for 3Com OfficeConnect Wireless 11g Access Point AP 1.00.08, and possibly earlier versions before 1.03.07A, allows remote attackers to bypass authentication and obtain sensitive information by directly accessing the 1 config.bin 2 profile.wlp?PN=ggg or 3...

CVE-2001-0352

CVE-2001-0352 affects 3Com AirConnect AP-4111 and Symbol 41X1 APs. The vulnerability arises from SNMP queries that read WEP keys from the IEEE 802.11b MIB (dot11WEPDefaultKeyValue in dot11WEPDefaultKeysTable) or the Symbol MIB (ap128bWepKeyValue), where keys should be write-only. This permits rem...