CVE-2017-3828

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. More Information:...

Cisco Prime Collaboration Assurance Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

Sophos Web Appliance Command Injection Vulnerability

Sophos Web Appliance is a web security gateway solution. An input validation vulnerability in the MgrReport.php file in the web management interface of the Sophos Web Appliance could be exploited by an attacker to submit a special request to inject a system command and execute it...

Sophos Web Appliance Remote Command Injection Vulnerability

Sophos Web Appliance is a web security gateway solution. An input validation vulnerability in the MgrDiagnosticTools.php /controllers/MgrDiagnosticTools.php file in the web management interface of the Sophos Web Appliance could be exploited by an attacker to submit a special request for injection...

Juniper Junos Elevation of Privilege Vulnerability (CNVD-2017-00606)

Juniper Junos is a network operating system dedicated to the company's hardware systems. A security vulnerability in the Juniper Junos Space WEB management interface allows remote attackers to submit special requests, create privileged users, and elevate privileges...

Juniper Junos Cross-Site Scripting Vulnerability (CNVD-2017-00608)

Juniper Junos is a network operating system dedicated to the company's hardware systems. Cross-site scripting exists in the Juniper Junos Space WEB management interface, which allows remote attackers to exploit vulnerabilities to inject malicious script or HTML code that can be used to gain acces...

CVE-2016-9202

A vulnerability in the web-based management interface of Cisco Email Security Appliance ESA Switches could allow an unauthenticated, remote attacker to conduct a persistent cross-site scripting XSS attack against a user of the affected interface on an affected device. More Information: CSCvb37346...

CVE-2016-6464

A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages that should be restricted. More Information: CSCva49629. Known Affected Releases: 11.51. Known Fixed...

CVE-2016-6464: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages that should be restricted. More Information: CSCva49629. Known Affected Releases: 11.51. Known Fixed...

PT-2016-6936

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM and Presence Service version 11.51 Description A vulnerability in the web management interface could allow an unauthenticated, remote attacker to view information on web pages that should be restricted...

Ruckus Wireless H500 Cross-Site Request Forgery Vulnerability

The Ruckus Wireless H500 is an indoor wall switch access point from Ruckus Wireless, USA. web management interface is one of the web-based management interfaces. A cross-site request forgery vulnerability exists in the Ruckus Wireless H500 web management interface. An attacker could exploit this...

Ruckus Wireless H500 Authentication Bypass Vulnerability

The Ruckus Wireless H500 is an indoor wall switch access point from Ruckus Wireless, USA. web management interface is one of the web-based management interfaces. An authentication bypass vulnerability exists in the Ruckus Wireless H500 web management interface. An attacker could exploit this...

Ruckus Wireless H500 Denial of Service Vulnerability

The Ruckus Wireless H500 is an indoor wall switch access point from Ruckus Wireless, USA. web management interface is one of the web-based management interfaces. A denial of service vulnerability exists in the web management interface of the Ruckus Wireless H500. An attacker could exploit this...

CVE-2016-1000213

Ruckus Wireless H500 web management interface CSRF...

Denial of service

Ruckus Wireless H500 web management interface denial of service...

CVE-2016-1000214: Exposure of Sensitive Information to an Unauthorized Actor

Ruckus Wireless H500 web management interface authentication bypass...

CVE-2016-1000213: Cross-Site Request Forgery (CSRF)

Ruckus Wireless H500 web management interface CSRF...

CVE-2016-1000215: Undefined Security Weakness

Ruckus Wireless H500 web management interface denial of service...

PT-2016-4551

Name of the Vulnerable Software and Affected Versions Ruckus Wireless H500 affected versions not specified Description The issue concerns an authentication bypass in the web management interface of the Ruckus Wireless H500. Recommendations At the moment, there is no information about a newer...

PT-2016-4552

Name of the Vulnerable Software and Affected Versions Ruckus Wireless H500 affected versions not specified Description The issue affects the web management interface of the Ruckus Wireless H500, causing a denial of service. Recommendations At the moment, there is no information about a newer...