Cisco Email Security Appliance SMTP Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA Switches and Content Security Management Appliance SMA could allow an unauthenticated, remote attacker to conduct a persistent cross-site scripting XSS attack against a user of the affected interface on an...

Cisco Meeting Server Cross-Site Scripting Vulnerability (cisco-sa-20160714-ms)

Cisco Meeting Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Huawei Flybox B660 Router Bypass Authentication Vulnerability

Huawei is a Chinese supplier engaged in information and communication solutions.Huawei Flybox B660 Router is a router device from Huawei. An authentication bypass vulnerability exists in the Huawei Flybox B660 Router. The vulnerability exists due to a local path ". /htmlcode/html/" module and the...

Buffer overflow

Buffer overflow in the management web interface in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows remote attackers to execute arbitrary code via unspecified vectors...

Buffer Overflow in the Management Web Interface

Palo Alto Networks web management server improperly handles a buffer overflow. This can result in a possible remote code execution RCE. Ref PAN-63073/102953/CVE-2016-9150 An attacker with network access to the management web interface may be able to perform a remote code execution RCE or...

Cisco ASA Input Validation File Injection Vulnerability

A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance ASA could allow an unauthenticated, remote attacker to inject arbitrary XML commands on the affected system. The vulnerability is due to improper user input validation. An attacker could exploit th...

Ruckus Wireless H500 Cross-Site Request Forgery Vulnerability

The Ruckus Wireless H500 is an indoor wall switch access point from Ruckus Wireless, USA. web management interface is one of the web-based management interfaces. A cross-site request forgery vulnerability exists in the Ruckus Wireless H500 web management interface. An attacker could exploit this...

Ruckus Wireless H500 Denial of Service Vulnerability

The Ruckus Wireless H500 is an indoor wall switch access point from Ruckus Wireless, USA. web management interface is one of the web-based management interfaces. A denial of service vulnerability exists in the web management interface of the Ruckus Wireless H500. An attacker could exploit this...

Ruckus Wireless H500 Authentication Bypass Vulnerability

The Ruckus Wireless H500 is an indoor wall switch access point from Ruckus Wireless, USA. web management interface is one of the web-based management interfaces. An authentication bypass vulnerability exists in the Ruckus Wireless H500 web management interface. An attacker could exploit this...

CVE-2016-1000213

Ruckus Wireless H500 web management interface CSRF...

Denial of service

Ruckus Wireless H500 web management interface denial of service...

Cisco Meeting Server Cross-Site Scripting Vulnerability (CNVD-2016-10126)

Cisco Meeting Server formerly known as Acano Conferencing Server is the United States Cisco Cisco company's set of audio and video conferencing server software. A cross-site scripting vulnerability exists in the Web-based management interface of Cisco Meeting Server. A remote attacker can exploit...

Cross-Site Scripting in Web Interface

The Palo Alto Networks web management interface is vulnerable to a post-authentication persistent cross-site scripting condition in the monitor tab. Ref PAN-57659/95895...

Ruckus Wireless H500 Command Injection Vulnerability

The Ruckus Wireless H500 is an indoor wall switch access point from Ruckus Wireless, USA. web management interface is one of the web-based management interfaces. A command injection vulnerability exists in the Ruckus Wireless H500 web management interface. An attacker can exploit this vulnerabili...

CVE-2016-1000216

Ruckus Wireless H500 web management interface authenticated command injection...

CVE-2016-1000216

The CVE concerns the Ruckus Wireless H500 web management interface, which is affected by an authenticated command-injection vulnerability in its web UI. According to connected CNVD data, an attacker who can authenticate can trigger arbitrary command execution, enabling potential full compromise o...

CVE-2016-6840

Cross-site scripting XSS vulnerability in the management interface in Huawei OceanStor ISM before V200R001C04SPC200 allows remote attackers to inject arbitrary web script or HTML via the loginName parameter to cgi-bin/doLoginCgiEntry and possibly other unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the management interface in Huawei OceanStor ISM before V200R001C04SPC200 allows remote attackers to inject arbitrary web script or HTML via the loginName parameter to cgi-bin/doLoginCgiEntry and possibly other unspecified vectors...

Android Qualcomm SPMI Driver Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. An information disclosure vulnerability exists in Qualcomm SPMI on Nexus 5, 5X, 6, 6P devices in versions of Android prior to 2016-09-05, which can be exploited by a remote attacker to construct an application that can cause...

DEBIAN-CVE-2016-7180

epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6 does not properly consider whether a string is constant, which allows remote attackers to cause a denial of service use-after-free and application crash via a crafted packet...