CVE-2016-1000213

Ruckus Wireless H500 web management interface CSRF...

Denial of service

Ruckus Wireless H500 web management interface denial of service...

CVE-2016-1000214: Exposure of Sensitive Information to an Unauthorized Actor

Ruckus Wireless H500 web management interface authentication bypass...

CVE-2016-1000213: Cross-Site Request Forgery (CSRF)

Ruckus Wireless H500 web management interface CSRF...

PT-2016-4551

Name of the Vulnerable Software and Affected Versions Ruckus Wireless H500 affected versions not specified Description The issue concerns an authentication bypass in the web management interface of the Ruckus Wireless H500. Recommendations At the moment, there is no information about a newer...

PT-2016-4550

Name of the Vulnerable Software and Affected Versions Ruckus Wireless H500 affected versions not specified Description The issue affects the web management interface of the Ruckus Wireless H500, where a CSRF Cross-Site Request Forgery issue is present. Recommendations At the moment, there is no...

CVE-2016-1000215: Undefined Security Weakness

Ruckus Wireless H500 web management interface denial of service...

PT-2016-4552

Name of the Vulnerable Software and Affected Versions Ruckus Wireless H500 affected versions not specified Description The issue affects the web management interface of the Ruckus Wireless H500, causing a denial of service. Recommendations At the moment, there is no information about a newer...

Cisco Meeting Server Cross-Site Scripting Vulnerability (CNVD-2016-10126)

Cisco Meeting Server formerly known as Acano Conferencing Server is the United States Cisco Cisco company's set of audio and video conferencing server software. A cross-site scripting vulnerability exists in the Web-based management interface of Cisco Meeting Server. A remote attacker can exploit...

Cross-Site Scripting in Web Interface

The Palo Alto Networks web management interface is vulnerable to a post-authentication persistent cross-site scripting condition in the monitor tab. Ref PAN-57659/95895...

Ruckus Wireless H500 Command Injection Vulnerability

The Ruckus Wireless H500 is an indoor wall switch access point from Ruckus Wireless, USA. web management interface is one of the web-based management interfaces. A command injection vulnerability exists in the Ruckus Wireless H500 web management interface. An attacker can exploit this vulnerabili...

CVE-2016-1000216

Ruckus Wireless H500 web management interface authenticated command injection...

CVE-2016-1000216

The CVE concerns the Ruckus Wireless H500 web management interface, which is affected by an authenticated command-injection vulnerability in its web UI. According to connected CNVD data, an attacker who can authenticate can trigger arbitrary command execution, enabling potential full compromise o...

PT-2016-4553

Name of the Vulnerable Software and Affected Versions Ruckus Wireless H500 affected versions not specified Description The issue concerns an authenticated command injection in the web management interface of the Ruckus Wireless H500. Recommendations At the moment, there is no information about a...

CVE-2016-1000216: Improper Neutralization of Special Elements used in an OS Command

Ruckus Wireless H500 web management interface authenticated command injection...

CVE-2016-6840

Cross-site scripting XSS vulnerability in the management interface in Huawei OceanStor ISM before V200R001C04SPC200 allows remote attackers to inject arbitrary web script or HTML via the loginName parameter to cgi-bin/doLoginCgiEntry and possibly other unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the management interface in Huawei OceanStor ISM before V200R001C04SPC200 allows remote attackers to inject arbitrary web script or HTML via the loginName parameter to cgi-bin/doLoginCgiEntry and possibly other unspecified vectors...

CVE-2016-6840: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management interface in Huawei OceanStor ISM before V200R001C04SPC200 allows remote attackers to inject arbitrary web script or HTML via the loginName parameter to cgi-bin/doLoginCgiEntry and possibly other unspecified vectors...

PT-2016-7134

Name of the Vulnerable Software and Affected Versions Huawei OceanStor ISM versions prior to V200R001C04SPC200 Description A cross-site scripting XSS issue exists in the management interface, allowing remote attackers to inject arbitrary web script or HTML. This can be achieved via the loginName...

Android Qualcomm SPMI Driver Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. An information disclosure vulnerability exists in Qualcomm SPMI on Nexus 5, 5X, 6, 6P devices in versions of Android prior to 2016-09-05, which can be exploited by a remote attacker to construct an application that can cause...