|
266221
|
8.8 |
HIGH
Network
|
juniper
|
junos
|
J-Web does not validate certain input that may lead to cross-site request forgery (CSRF) issues or cause a denial of J-Web service (DoS).
|
CWE-352
Origin Validation Error
|
CVE-2016-1261
|
2024-11-21 11:46 |
2017-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266222
|
7.5 |
HIGH
Network
|
exagrid
|
ex3000_firmware ex5000_firmware ex7000_firmware ex10000e_firmware ex13000e_firmware ex21000e_firmware ex32000e_firmware ex40000e_firmware
|
ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorized_keys file for root, which allows remote attackers to obtain SSH access by leveraging knowledge of a pri…
|
CWE-200
Information Exposure
|
CVE-2016-1561
|
2024-11-21 11:46 |
2017-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266223
|
9.8 |
CRITICAL
Network
|
exagrid
|
ex3000_firmware ex5000_firmware ex7000_firmware ex10000e_firmware ex13000e_firmware ex21000e_firmware ex32000e_firmware ex40000e_firmware
|
ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the support account in the web interface, which allows remote …
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2016-1560
|
2024-11-21 11:46 |
2017-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266224
|
7.8 |
HIGH
Local
|
grandstream
|
wave
|
The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers to execute arbitrary code via a crafted …
|
CWE-254
7PK - Security Features
|
CVE-2016-1520
|
2024-11-21 11:46 |
2017-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266225
|
5.9 |
MEDIUM
Network
|
grandstream
|
wave
|
The com.softphone.common package in the Grandstream Wave app 1.0.1.26 and earlier for Android does not properly validate SSL certificates, which allows man-in-the-middle attackers to spoof the Grands…
|
CWE-295
Improper Certificate Validation
|
CVE-2016-1519
|
2024-11-21 11:46 |
2017-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266226
|
8.1 |
HIGH
Network
|
grandstream
|
wave
|
The auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-the-middle attackers to spoof provisioning data and conseque…
|
CWE-284
Improper Access Control
|
CVE-2016-1518
|
2024-11-21 11:46 |
2017-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266227
|
8.1 |
HIGH
Network
|
d-link
|
dap-1353_h\/w_b1_firmware dap-2553_h\/w_a1_firmware dap-3520_h\/w_a1_firmware
|
D-Link DAP-1353 H/W vers. B1 3.15 and earlier, D-Link DAP-2553 H/W ver. A1 1.31 and earlier, and D-Link DAP-3520 H/W ver. A1 1.16 and earlier reveal wireless passwords and administrative usernames an…
|
CWE-200
Information Exposure
|
CVE-2016-1559
|
2024-11-21 11:46 |
2017-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266228
|
9.8 |
CRITICAL
Network
|
netgear
|
wnap320_firmware wndap350_firmware wndap360_firmware
|
Netgear WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0 reveal wireless passwords and administrative usernames and passwords over SNMP.
|
CWE-200
Information Exposure
|
CVE-2016-1557
|
2024-11-21 11:46 |
2017-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266229
|
7.5 |
HIGH
Network
|
netgear
|
wnap320_firmware wndap350_firmware wndap360_firmware wndap210v2_firmware wn604_firmware wnd930_firmware
|
Information disclosure in Netgear WN604 before 3.3.3; WNAP210, WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0; and WND930 before 2.0.11 allows remote attackers to read the wireless WPS PIN or passphr…
|
CWE-200
Information Exposure
|
CVE-2016-1556
|
2024-11-21 11:46 |
2017-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266230
|
9.8 |
CRITICAL
Network
|
dlink
|
dap-3662_firmware dap-2310_firmware dap-2330_firmware dap-2360_firmware dap-2553_firmware dap-2660_firmware dap-2690_firmware dap-2695_firmware dap-3320_firmware dap-2230_f…
|
Buffer overflow in D-Link DAP-2310 2.06 and earlier, DAP-2330 1.06 and earlier, DAP-2360 2.06 and earlier, DAP-2553 H/W ver. B1 3.05 and earlier, DAP-2660 1.11 and earlier, DAP-2690 3.15 and earlier,…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2016-1558
|
2024-11-21 11:46 |
2017-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|