9723 matches found
Design/Logic Flaw
IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1, allows remote authenticated users to execute arbitrary OS commands by leveraging Local Management Interface LMI access...
PT-2016-3656
Name of the Vulnerable Software and Affected Versions IBM Security Access Manager for Web versions 7.0.0 through 7.0.0 before FP19 IBM Security Access Manager for Web version 8.0 before 8.0.1.3 IF3 IBM Security Access Manager version 9.0 before 9.0.0.0 IF1 Description The issue allows remote...
CVE-2015-5018: Improper Neutralization of Special Elements used in an OS Command
IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1, allows remote authenticated users to execute arbitrary OS commands by leveraging Local Management Interface LMI access...
Session fixation
The web management interface on Belkin F9K1102 2 devices with firmware 2.10.17 has a blank password, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...
CVE-2015-5994
The web management interface on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 has a default password of admin for the admin account and a default password of password for the medialink account, which allows remote attackers to obtain administrative privileges by leveraging a...
PT-2015-3217
Name of the Vulnerable Software and Affected Versions Mediabridge Medialink MWN-WAPR300N version 5.07.50 Description The web management interface has a default password of admin for the admin account and a default password of password for the medialink account. This allows remote attackers to...
PT-2015-7098
Name of the Vulnerable Software and Affected Versions Belkin F9K1102 version 2.10.17 Description The web management interface has a blank password, allowing remote attackers to obtain administrative privileges by leveraging a LAN session. Recommendations For Belkin F9K1102 version 2.10.17, consid...
CVE-2015-5994: Undefined Security Weakness
The web management interface on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 has a default password of admin for the admin account and a default password of password for the medialink account, which allows remote attackers to obtain administrative privileges by leveraging a...
CVE-2015-5988: Undefined Security Weakness
The web management interface on Belkin F9K1102 2 devices with firmware 2.10.17 has a blank password, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...
Cisco EPC3928 Cross-Site Scripting Vulnerability
Cisco EPC3928 is a wireless router product from Cisco USA. A cross-site scripting vulnerability exists in the management interface of the Cisco EPC3928. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with user-entered values...
CVE-2015-6402
Cross-site scripting XSS vulnerability in the management interface on Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11, and 5.7.1 allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCux24935...
CVE-2015-6402
CVE-2015-6402 is a cross-site scripting (XSS) vulnerability in the management interface of the Cisco EPC3928 Wireless Residential Gateway (EDVA 5.5.10, 5.5.11, 5.7.1). The issue allows remote attackers to inject arbitrary web script or HTML via an unspecified value. Cisco advises that no software...
Cisco Unified Communications Manager Web Management Interface Cross-Site Scripting Filter Bypass Vulnerability
A cross-site scripting XSS filter bypass vulnerability in the web management interface of Cisco Unified Communications Manager UCM versions 8.0 through 8.6 could allow an unauthenticated, remote attacker to mount XSS attacks against a user of an affected device. The vulnerability is due to a...
PT-2015-7227
Name of the Vulnerable Software and Affected Versions Cisco EPC3928 devices with EDVA versions 5.5.10 through 5.5.11 Cisco EPC3928 devices with EDVA version 5.7.1 Description A cross-site scripting XSS issue in the management interface allows remote attackers to inject arbitrary web script or HTM...
CVE-2015-6402: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the management interface on Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11, and 5.7.1 allows remote attackers to inject arbitrary web script or HTML via an unspecified value, aka Bug ID CSCux24935...
CVE-2015-6390
Cross-site scripting XSS vulnerability in the management interface in Cisco Unity Connection 9.11.10 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCup92741...
Cross site scripting
Cross-site scripting XSS vulnerability in the management interface in Cisco Unity Connection 9.11.10 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCup92741...
KLA10704 Multiple vulnerabilities in ARRIS cable modems.
Multiple serious vulnerabilities have been found in ARRIS cable modems. Malicious users can exploit these vulnerabilities to gain privileges or inject arbitrary code. Below is a complete list of vulnerabilities: 1. Predictable technician password can be exploited remotely to gain technician...
PT-2015-7220
Name of the Vulnerable Software and Affected Versions Cisco Unity Connection version 9.11.10 Description A cross-site scripting XSS issue exists in the management interface, allowing remote attackers to inject arbitrary web script or HTML via a crafted value in a URL. Recommendations For Cisco...
CVE-2015-6390: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the management interface in Cisco Unity Connection 9.11.10 allows remote attackers to inject arbitrary web script or HTML via a crafted value in a URL, aka Bug ID CSCup92741...