CVE-2007-6729

The CVE-2007-6729 entry describes a Cross-site scripting (XSS) vulnerability in the web management interface of the ZyXEL P-330W router. The flaw allows remote attackers to inject arbitrary web script or HTML via the pingstr parameter and other vectors. Connected sources confirm the affected prod...

CVE-2007-6730

CVE-2007-6730 affects ZyXEL P-330W router via the web management interface, introducing CSRF vulnerabilities that allow remote attackers to hijack administrator authentication for (1) enabling remote router management through goform/formRmtMgt, and (2) changing the administrator password via gofo...

CVE-2007-6729: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web management interface in the ZyXEL P-330W router allows remote attackers to inject arbitrary web script or HTML via the pingstr parameter and other unspecified vectors...

Authentication flaw

The Web management interface in Avaya SIP Enablement Services SES 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, does not perform authentication for certain functionality, which allows remote attackers to obtain sensitive information and access restricted functionality via 1 the...

CVE-2008-6707

The Web management interface in Avaya SIP Enablement Services SES 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, does not perform authentication for certain functionality, which allows remote attackers to obtain sensitive information and access restricted functionality via 1 the...

CVE-2008-6708

Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services SES 3.x and 4.0, as used with Avaya Communication Manager 3.1.x and 4.x, allows remote authenticated administrators to gain root privileges via unknown vectors related to configuration of "data viewing or...

Code injection

Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services SES 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allow remote attackers to obtain 1 application server configuration, 2 database server configuration including encrypted passwords...

CVE-2008-6709

CVE-2008-6709 affects Avaya SIP Enablement Services (SES) 3.x and 4.0 used with Avaya Communication Manager 3.1.x. The Web management interface vulnerability allows remote authenticated users to execute arbitrary commands via unknown vectors related to configuring local data viewing or restoring ...

CVE-2008-6709: Undefined Security Weakness

Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services SES 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allows remote authenticated users to execute arbitrary commands via unknown vectors related to configuration of "local data viewing or...

CVE-2008-6708: Undefined Security Weakness

Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services SES 3.x and 4.0, as used with Avaya Communication Manager 3.1.x and 4.x, allows remote authenticated administrators to gain root privileges via unknown vectors related to configuration of "data viewing or...

CVE-2008-6395: Use of Externally-Controlled Format String

The web management interface in 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point allows remote attackers to cause a denial of service device crash via a malformed HTTP POST request...

Design/Logic Flaw

The web management interface in Netgear WGR614v9 allows remote attackers to cause a denial of service crash via a request that contains a question mark "?"...

CVE-2008-6122

CVE-2008-6122 affects Netgear WGR614v9: the web management interface is vulnerable to a denial-of-service triggered by a crafted HTTP request containing a question mark ("?"). The issue is remote, requires no authentication, and results in a crash (availability impact). CVSS v2 base score 7.8 (HI...

CVE-2008-6122: Improper Input Validation

The web management interface in Netgear WGR614v9 allows remote attackers to cause a denial of service crash via a request that contains a question mark "?"...

CVE-2008-5709

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the 1 Set Static Routes and 2 Backup...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the 1 Set Static Routes and 2 Backup...

CVE-2008-5710

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1.x, 4.0.3, and 5.x allow remote attackers to read 1 configuration files, 2 log files, 3 binary image files, and 4 help files via unknown vectors...

CVE-2008-5709: Improper Input Validation

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1 before 3.1.4 SP2, 4.0 before 4.0.3 SP1, and 5.0 before 5.0 SP3 allow remote authenticated users to execute arbitrary code via unknown attack vectors in the 1 Set Static Routes and 2 Backup...

CVE-2008-5710: Undefined Security Weakness

Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager CM 3.1.x, 4.0.3, and 5.x allow remote attackers to read 1 configuration files, 2 log files, 3 binary image files, and 4 help files via unknown vectors...

Packeteer Web Management Interface Version

It is possible to determine the version of the remote web application. Description : OpenVAS was able to determine the software version of the Packeteer web management interface running on the remote host. OpenVAS Vulnerability Test $Id: packeteerwebversion.nasl 5499 2017-03-06 13:06:09Z teissa $...