686 matches found
mingw-w64-binutils: multiple issues
CVE-2014-8484 invalid read Invalid read flaw leads to denial of service while parsing specially crafted files in programs using libbfd. - CVE-2014-8485 out-of-bounds write Lack of range checking leading to controlled write in bfdelfsetupsections which results in denial of service or possible code...
file upload Ar Version - Upload Shell Vulnerability
No description provided by source...
Joomla Component com_otzivi Blind SQL Injection Vulnerability
No description provided by source. ------------------- header data start ------------------- Joomla Component comotzivi Blind SQL Injection Vulnerability Author : Cyber945 Home : Ar-ge.Org Greetz : By.Danger,D3xer,LionTurk and All Ar-ge.Org Members Not3 : Ar-ge.Org Online Name : comotzivi Bug Typ...
AR-Blog 5.2 - Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18120/info AR-Blog is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
AR-Blog 5.2 Print.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17522/info The ar-blog application is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in...
Edimax AR-6004 ADSL Router Management Interface Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9374/info Edimax AR-6004 ADSL Routers are prone to cross-site scripting attacks via the web management interface of affected devices. An attacker could exploit this issue by enticing a victim user to follow a malicious li...
Blogger CMS AR LoxBlog - CS Cross Site Web Vulnerability
Document Title: =============== Blogger CMS AR LoxBlog - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1224 Release Date: ============= 2014-03-10 Vulnerability Laboratory ID VL-ID: ====================================...
Security Advisory-A DoS Vulnerability in the SSH Module on Huawei AR Router
On Some Huawei AR routers that receive a large number of SSH authentication attack packets with malformed data, legitimate users fail to log in through SSH. Attackers can construct massive attack packets to cause the AR routers to deny SSH login from legitimate users. HWPSIRT-2013-1255. This...
Stack overflow
Stack-based buffer overflow in the HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches allows remote attackers to execute arbitrary code via a long URI...
CVE-2012-6571
The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses predictable Session ID values, which makes it easier for remote attackers to hijack sessions via a...
CVE-2012-6570
The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches does not check whether HTTP data is longer than the value of the Content-Length field, which allows remot...
CVE-2012-6569
Stack-based buffer overflow in the HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches allows remote attackers to execute arbitrary code via a long URI...
CVE-2012-6569
CVE-2012-6569 describes a stack-based buffer overflow in the HTTP module of Huawei AR routers and related S-series switches (S2000, S3000, S3500, S3900, S5100, S5600, S7800, S8500) that allows remote attackers to execute arbitrary code via a long URI. The issue affects the HTTP component used for...
CVE-2012-6571
The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses predictable Session ID values, which makes it easier for remote attackers to hijack sessions via a...
CVE-2012-6571
The CVE-2012-6571 issue affects Huawei devices (AR routers and S-series switches: S2000, S3000, S3500, S3900, S5100, S5600, S7800). The HTTP module in the BIMS/web management components uses predictable Session ID values, enabling remote attackers to hijack sessions via brute-force. This is docum...
CVE-2013-4630
CVE-2013-4630 describes a stack-based buffer overflow affecting Huawei AR series routers (AR 150, 200, 1200, 2200, 3200) when SNMPv3 debugging is enabled. The vulnerability allows remote attackers to execute arbitrary code via malformed SNMPv3 requests. Documents do not provide explicit exploit d...
CVE-2012-4960
CVE-2012-4960 covers a DES-based password encryption weakness in Huawei networking devices (including NE5000E, NE40E/80E, CX/ CX600, and related models). The root cause is use of DES for stored passwords, enabling brute-force or context-dependent attacks to recover cleartext passwords. Public adv...
CVE-2013-4632
CVE-2013-4632 affects Huawei Access Router (AR) before V200R002SPC003. A remote attacker can cause a denial of service (device reset) by sending a crafted field in a DHCP request, with the attack demonstrated from an IP phone. The NVD CVSS v2 base score is 7.8 (HIGH), indicating a network-exploit...
CVE-2012-6570
The CVE-2012-6570 entry concerns Huawei AR routers and related Huawei S-series switches (S2000, S3000, S3500, S3900, S5100, S5600, S7800, S8500) where the HTTP module fails to validate that incoming data length respects the Content-Length header. This vulnerability in the HTTP module of both the ...
CVE-2012-6569
Stack-based buffer overflow in the HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches allows remote attackers to execute arbitrary code via a long URI...