CVE-2016-1439

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.52 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650...

PT-2016-4789

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Enterprise versions prior to 10.52 Description A cross-site scripting XSS issue exists in the management interface, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL. Recommendation...

CVE-2016-1439: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.52 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650...

CVE-2016-1396

Cross-site scripting XSS vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to inject arbitrary web script or HTML via a...

PT-2016-2219

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions prior to 1.2.1.7 Cisco RV130W versions prior to 1.0.3.16 Cisco RV215W versions prior to 1.3.0.8 Description The issue is related to insufficient input validation in the web-based management interface of the affected...

PT-2016-2274

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions prior to 1.2.1.7 Cisco RV130W versions prior to 1.0.3.16 Cisco RV215W versions prior to 1.3.0.8 Description The issue is related to a cross-site scripting XSS vulnerability in the web-based management interface of the...

PT-2016-2273

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions prior to 1.2.1.7 Cisco RV130W versions prior to 1.0.3.16 Cisco RV215W versions prior to 1.3.0.8 Description The issue is caused by a buffer overflow in the web-based management interface, allowing remote authenticated use...

CVE-2016-1397: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote authenticated users to cause a denial of service device reload via crafted...

CVE-2016-1396: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to inject arbitrary web script or HTML via a...

Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability

A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers could allow an authenticated, remote attacker to cause a buffer overflow on a targeted system, resulting in a...

Cisco Wireless LAN Controller Management Interface Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco Wireless LAN Controller WLC devices running Cisco AireOS Softwar Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

squid: buffer overflow in cachemgr.cgi

A buffer overflow flaw was found in the way the Squid cachemgr.cgi utility processed remotely relayed Squid input. When the CGI interface utility is used, a remote attacker could possibly use this flaw to execute arbitrary code...

How To perform Emergency Network Reset on Citrix Hypervisor/XenServer

To configure or restore the management interface from either XSCONSOLE or from CLI command-line interface...

Cross site scripting

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Computing System UCS Central Software 1.41a allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250...

PT-2016-2116

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Central Software version 1.41a Description The issue is related to a cross-site scripting XSS vulnerability in the management interface. This vulnerability allows remote attackers to inject arbitrary web scri...

CVE-2016-1401: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Computing System UCS Central Software 1.41a allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250...

Web Interface for DNSmasq / Mikrotik - SQL Injection

/ + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/DNSDHCP-WEB-INTERFACE-SQL-INJECTION.txt + ISR: apparitionsec Vendor: ==================== tmcdos / sourceforge Product: ====================== dnsdhcp Web Interface Download:...

Cisco Wireless LAN Controller Web Management Interface Denial of Service Vulnerability

The Cisco WLC is responsible for system-wide wireless LAN functions such as security policy, intrusion protection, RF management, quality of service, and mobility. A denial of service vulnerability in the Web management interface of the Cisco Wireless LAN Controller WLC Software could allow an...

The vulnerability of the microprogramming software of the Medialink MWN-WARP300N router allows a hacker to enhance their privileges.

The vulnerability of the web-management interface of the Medialink MWN-WARP300N router software relates to the use of default passwords for user accounts. Exploiting this vulnerability could allow an attacker to gain increased privileges by utilizing Wi-Fi sessions...

Multiple Lenovo LenovoEMC Devices Information Disclosure Vulnerability

Lenovo LenovoEMC EZ Media and Backup hm3 and others are firmware developed by the Chinese company Lenovo Lenovo for use in network storage devices. A security vulnerability exists in the management interface of several Lenovo LenovoEMC devices, which can be exploited by remote attackers to obtain...