Lucene search
+L

248 matches found

securityvulns
securityvulns
added 2007/02/05 12:0 a.m.80 views

Wap Portal Serve 1.* <= Remote File Inclusion

+-------------------------------------------------------------------- + + Wap Portal Serve 1. = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Wap Portal Server + Venedor ...........: http://www.sakic.net + Class ...............

0.5AI score
SaveExploits0
myhack58
myhack58
added 2006/12/11 12:0 a.m.38 views

Do-it-yourself unlock phone password-vulnerability warning-the black bar safety net

Crash This bar is estimated to be debugging the used,with caution,some crashes only under the battery. 9 9 9 89 2 6 6 display the receiving channel number and received signal strength; 9 9 9 87 8 6 display the contents of the boot time and the boot to the current a long time. Press-after displayi...

7.5AI score
SaveExploits0
OSV
OSV
added 2006/10/28 12:7 a.m.4 views

DEBIAN-CVE-2006-5469

Unspecified vulnerability in the WBXML dissector in Wireshark formerly Ethereal 0.10.11 through 0.99.3 allows remote attackers to cause a denial of service crash via certain vectors that trigger a null dereference...

5CVSS8.4AI score0.02139EPSS
SaveExploits0References1
NVD
NVD
added 2006/09/25 1:7 a.m.23 views

CVE-2006-4975

Yahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user-assisted remote attackers to inject arbitrary web script or HTML via a URL at the online service...

2.6CVSS6.4AI score0.01187EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2006/09/25 1:0 a.m.30 views

CVE-2006-4975

Yahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user-assisted remote attackers to inject arbitrary web script or HTML via a URL at the online service...

6.4AI score0.01187EPSS
SaveExploits1References3
CVE
CVE
added 2006/09/25 1:0 a.m.56 views

CVE-2006-4975

CVE-2006-4975 concerns Yahoo! Messenger for WAP, where saving messages that contain JavaScript enables user-assisted remote script/HTML injection via a URL on the service. The vulnerability is tied to how messages could be stored and later rendered, allowing arbitrary script execution in affected...

2.6CVSS6.7AI score0.01187EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2006/01/22 8:3 p.m.20 views

Code injection

Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points WAP allows remote authenticated users to cause a denial of service termination of packet passing or termination of client connections by sending the management interface a large number of spoofed ARP packets, which creates a large ARP...

5.5CVSS6.8AI score0.10485EPSS
SaveExploits2References9
CVE
CVE
added 2006/01/22 8:0 p.m.65 views

CVE-2006-0354

CVE-2006-0354 affects Cisco IOS on Aironet Wireless Access Points. The issue: remote authenticated users can trigger a denial of service by sending a flood of spoofed ARP packets to the management interface, creating a large ARP table that exhausts memory and disrupts packet forwarding or client ...

5.5CVSS6.3AI score0.10485EPSS
SaveExploits2References9Affected Software8
myhack58
myhack58
added 2005/12/16 12:0 a.m.23 views

Don't let upload My Chosen pass-vulnerability warning-the black bar safety net

Recently busy with the development of a WAP mobile website, several days did not sleep, is because UTF8 conversion for GB problems. Online though there are ready-made ASP script can be converted, but the conversion process or some character conversion. Helpless in a successful development of the...

7AI score
SaveExploits0
Cvelist
Cvelist
added 2005/11/21 11:0 a.m.24 views

CVE-2004-2556

NetGear WG602 aka WG602v1 Wireless Access Point firmware 1.04.0 and 1.5.67 has a hardcoded account of username "super" and password "5777364", which allows remote attackers to modify the configuration...

6.9AI score0.02987EPSS
SaveExploits1References9
Cvelist
Cvelist
added 2005/11/16 7:37 a.m.32 views

CVE-2003-1264

TFTP server in Longshine Wireless Access Point WAP LCS-883R-AC-B, and in D-Link DI-614+ 2.0 which is based on it, allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file config.img and other files without authentication...

6.8AI score0.01622EPSS
SaveExploits1References5
CVE
CVE
added 2005/11/16 7:37 a.m.60 views

CVE-2003-1264

The CVE-2003-1264 issue affects the TFTP server used by Longshine WAP LCS-883R-AC-B and by the D-Link DI-614+ 2.0 based on it. The vulnerability enables remote attackers to download the configuration file (config.img) and other files without authentication, allowing access to the WEP secret and e...

5CVSS7.2AI score0.01622EPSS
SaveExploits1References5Affected Software2
Positive Technologies
Positive Technologies
added 2005/08/10 12:0 a.m.5 views

PT-2005-3279 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.8.20 through 0.10.11 Description: The issue is related to unknown vulnerabilities in certain dissectors, which can cause a denial of service. This happens when the application encounters specific packets that lead to a nul...

7.5CVSS6.2AI score0.06143EPSS
SaveExploits1References21
Cvelist
Cvelist
added 2005/07/14 4:0 a.m.28 views

CVE-2001-1568

CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack...

6.5AI score0.00682EPSS
SaveExploits0References2
CVE
CVE
added 2005/07/14 4:0 a.m.50 views

CVE-2001-1568

The CVE-2001-1568 issue affects the CMG WAP gateway, where the system fails to verify the fully qualified domain name in the URL against X.509 certificates issued by root CAs. This hostname verification gap enables remote attackers to perform a man-in-the-middle attack to spoof SSL certificates, ...

6.4CVSS6.9AI score0.00682EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2005/07/14 4:0 a.m.27 views

CVE-2001-1569

Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack...

6.5AI score0.00682EPSS
SaveExploits0References2
CVE
CVE
added 2005/07/14 4:0 a.m.51 views

CVE-2001-1569

Openwave WAP gateway is affected by CVE-2001-1569: it does not verify the fully-qualified domain name in X.509 certificates against root CAs, enabling remote attackers to spoof SSL via a man-in-the-middle. Affected component: Openwave WAP gateway; root-cause: missing hostname verification. Impact...

6.4CVSS6.9AI score0.00682EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2004/08/20 12:0 a.m.13 views

Wireless Access Point (WAP) Detection (HTTP) (deprecated)

Binary data 1617.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2004/08/20 12:0 a.m.15 views

Broadcom Wireless Access Point (WAP) Detection (HTTP) (deprecated)

Binary data 1624.prm...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2004/08/20 12:0 a.m.6 views

Wireless Access Point (WAP) Detection (HTTP) (deprecated)

Binary data 1621.prm...

7.3AI score
SaveExploits0
Rows per page
Query Builder