CVE-2011-3682

The CVE-2011-3682 entry pertains to SingTel-customized 2Wire gateway routers (2701HGV-E/2700HGV-2/2700HG) where the Management and Diagnostic Console (MDC) is exposed at http://192.168.1.254/mdc. The MDC uses a default, non-changeable password “2wire” and lacks CSRF protection, enabling CSRF-driv...

CVE-2011-4058

CVE-2011-4058 relates to multiple XSS vulnerabilities in Alcatel-Lucent OmniTouch 8400 Instant Communications Suite (ICS) WebICS and related web/admin interfaces. The advisory cites stored XSS in the phonebook, reflected XSS in multiple JSP/servlet endpoints, and CSRF in WebICS and WebAdmin. Affe...

CVE-2011-4059

This CVE documents CSRF vulnerabilities in Alcatel-Lucent OmniTouch 8400 Instant Communications Suite (WebICS/WebAdmin) version 6.1 Patch 102a. The advisory lists CSRF in Websoftphone servlet endpoints and ClientMgmt areas, enabling unauthorized actions such as changing user settings (e.g., DND, ...

CVE-2011-3485

CVE-2011-3485 concerns Zoho ManageEngine ADSelfService Plus. Connected documents confirm the vulnerability in ADSelfService Plus 4.5 Build 4521 where a defect in the authentication procedure allows a remote attacker to bypass login by including an extra parameter resetUnLock=true in the authentic...

CVE-2011-1656

CVE-2011-1656 affects NetBSD 5.1 libc/net. The vulnerability involves a stack buffer overflow in multiple network name/address resolution functions: getservbyname, getservbyname_r, getservbyport, getservbyport_r, and related calls getaddrinfo/getnameinfo. The root cause is improper handling of bu...

CVE-2012-2765

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2010-2782

CVE-2010-2782 is documented only with placeholder metadata in the Initial Description. A connected CIRCL sighting references an Exploit-DB entry (exploitation confirmed) but provides no concrete technical details (affected product/version, root cause, impact, or remediation) in the supplied docum...

CVE-2010-0368

Affected product: LANDesk Management Gateway (LANDesk Management Suite). Vulnerability: Cross-site request forgery (CSRF) that enables an external attacker to trigger an OS command injection, potentially executing arbitrary commands on the web server (code execution). Impact/conditions: Requires ...

CVE-2010-0369

LANDesk Management Gateway prior to 4.0-1.48 and 4.2-1.8 is affected by OS command injection (CVE-2010-0369) via gsb/BackupRestoreTab.php when processing a crafted delBackupName POST parameter, enabling arbitrary command execution as the web server user (gsbadmin) with sudo privileges. A patch (G...

CVE-2026-35330

The connected document indicates CVE-2026-35330 concerns strongSwan, specifically the libsimaka component, described as an infinite loop. The available materials do not specify affected versions, root cause, impact, exploit details, or a remediation. No exploit status or mitigations are provided;...

CVE-2026-35333

CVE-2026-35333 is linked to a Debian advisory: strongSwan’s libradius component is affected by an infinite loop condition. The connected document confirms a concrete technical impact within the libradius module, tied to strongSwan, but does not provide details on affected versions, specific root ...