Vulnerabilities (CVE)

Filtered by CWE-290
Total 826 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-12096 1 Meetcircle 2 Circle With Disney, Circle With Disney Firmware 2026-06-17 6.1 MEDIUM 6.5 MEDIUM
An exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted Access Point with the same name as the legitimate one can be used to make Circle connect to an untrusted network. An attacker needs to setup an Access Point reachable by the device and to send a series of spoofed "deauth" packets to trigger this vulnerability.
CVE-2017-12095 1 Meetcircle 1 Circle With Disney Firmware 2026-06-17 3.3 LOW 6.5 MEDIUM
An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1. A series of WiFi packets can force Circle to setup an Access Point with default credentials. An attacker needs to send a series of spoofed "de-auth" packets to trigger this vulnerability.
CVE-2017-11717 1 Metinfo Project 1 Metinfo 2026-06-17 5.0 MEDIUM 7.5 HIGH
MetInfo through 5.3.17 accepts the same CAPTCHA response for 120 seconds, which makes it easier for remote attackers to bypass intended challenge requirements by modifying the client-server data stream, as demonstrated by the login/findpass page.
CVE-2013-5661 4 Isc, Nic, Nlnetlabs and 1 more 4 Bind, Knot Resolver, Nsd and 1 more 2026-06-16 2.6 LOW 5.9 MEDIUM
Cache Poisoning issue exists in DNS Response Rate Limiting.
CVE-2009-1048 1 Snom 10 Snom 300, Snom 300 Firmware, Snom 320 and 7 more 2026-06-16 10.0 HIGH 9.8 CRITICAL
The web interface on the snom VoIP phones snom 300, snom 320, snom 360, snom 370, and snom 820 with firmware 6.5 before 6.5.20, 7.1 before 7.1.39, and 7.3 before 7.3.14 allows remote attackers to bypass authentication, and reconfigure the phone or make arbitrary use of the phone, via a (1) http or (2) https request with 127.0.0.1 in the Host header.
CVE-1999-0012 2 Microsoft, Netscape 5 Frontpage, Internet Information Server, Personal Web Server and 2 more 2026-06-16 5.0 MEDIUM 7.0 HIGH
Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.