CVE-2016-1000216

Ruckus Wireless H500 web management interface authenticated command injection...

CVE-2016-1000216

The CVE concerns the Ruckus Wireless H500 web management interface, which is affected by an authenticated command-injection vulnerability in its web UI. According to connected CNVD data, an attacker who can authenticate can trigger arbitrary command execution, enabling potential full compromise o...

PT-2016-4553

Name of the Vulnerable Software and Affected Versions Ruckus Wireless H500 affected versions not specified Description The issue concerns an authenticated command injection in the web management interface of the Ruckus Wireless H500. Recommendations At the moment, there is no information about a...

CVE-2016-1000216: Improper Neutralization of Special Elements used in an OS Command

Ruckus Wireless H500 web management interface authenticated command injection...

CVE-2016-6840

Cross-site scripting XSS vulnerability in the management interface in Huawei OceanStor ISM before V200R001C04SPC200 allows remote attackers to inject arbitrary web script or HTML via the loginName parameter to cgi-bin/doLoginCgiEntry and possibly other unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the management interface in Huawei OceanStor ISM before V200R001C04SPC200 allows remote attackers to inject arbitrary web script or HTML via the loginName parameter to cgi-bin/doLoginCgiEntry and possibly other unspecified vectors...

PT-2016-7134

Name of the Vulnerable Software and Affected Versions Huawei OceanStor ISM versions prior to V200R001C04SPC200 Description A cross-site scripting XSS issue exists in the management interface, allowing remote attackers to inject arbitrary web script or HTML. This can be achieved via the loginName...

CVE-2016-6840: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management interface in Huawei OceanStor ISM before V200R001C04SPC200 allows remote attackers to inject arbitrary web script or HTML via the loginName parameter to cgi-bin/doLoginCgiEntry and possibly other unspecified vectors...

Android Qualcomm SPMI Driver Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. An information disclosure vulnerability exists in Qualcomm SPMI on Nexus 5, 5X, 6, 6P devices in versions of Android prior to 2016-09-05, which can be exploited by a remote attacker to construct an application that can cause...

PT-2016-6871

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center versions prior to 6.1 Cisco FireSIGHT System Software versions prior to 6.1 Description A cross-site scripting XSS issue exists in the web-based management interface, allowing remote authenticated users to...

DEBIAN-CVE-2016-7180

epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6 does not properly consider whether a string is constant, which allows remote attackers to cause a denial of service use-after-free and application crash via a crafted packet...

Cisco Firepower Management Center and FireSIGHT System Software Cross-Site Scripting Vulnerability

Cisco Firepower Management Center and FireSIGHT System Software are management center software from Cisco in the United States. A cross-site scripting vulnerability in the web-based management interface of Cisco Firepower Management Center and FireSIGHT System Software allows remote attackers to...

Cisco FireSIGHT System Software Session Fixation Vulnerability

A vulnerability in session identification management functionality of the web-based management interface for Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to hijack a valid user session. The vulnerability exists because the affected application does not assign a...

Plone Zope Management (ZMI) Reflective Cross-Site Scripting Vulnerability

Plone is a free, open source Content Management System CMS. A reflected cross-site scripting vulnerability exists in Plone Zope Management ZMI, where the ZMI page of Zope2 does not properly escape user input in many places...

CVE-2016-1470

Cross-site request forgery CSRF vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuz76230...

PT-2016-4818

Name of the Vulnerable Software and Affected Versions Cisco Small Business 220 devices with firmware before 1.0.1.1 Description A cross-site request forgery CSRF issue exists in the web-based management interface, allowing remote attackers to hijack the authentication of arbitrary users...

PT-2016-4819

Name of the Vulnerable Software and Affected Versions Cisco Small Business 220 devices with firmware before 1.0.1.1 Description A cross-site scripting XSS issue exists in the web-based management interface, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL...

PT-2016-4820

Name of the Vulnerable Software and Affected Versions Cisco Small Business 220 devices with firmware prior to 1.0.1.1 Description The issue affects the web-based management interface, allowing remote attackers to cause a denial of service, resulting in an interface outage. This can be achieved vi...

CVE-2016-1471: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz76232...

CVE-2016-1472: Improper Input Validation

The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service interface outage via a crafted HTTP request, aka Bug ID CSCuz76238...