19 results · Feed
-
High 7.6
In openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the authenticated client …
-
High 7.1
A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on t…
-
High 8.3
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fa…
-
Medium 5.3
Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhau…
-
Medium 5.5
openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c.
-
Critical 9.8
An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the network interface name entry in the configur…
-
Critical 9.8
An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the FAS key entry in the configuration file, all…
-
Critical 9.8
An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the status path script entry in the configuratio…
-
Critical 9.8
An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the gateway FQDN entry in the configuration file…
-
Unscored —
OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denia…
-
Unscored —
An issue was discovered in OpenNDS Captive Portal before 10.1.2. it has a do_binauth NULL pointer dereference that can …
-
Unscored —
An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a do_binauth NULL pointer dereference t…
-
Unscored —
An issue was discovered in OpenNDS before 10.1.2. It allows users to skip the splash page sequence (and directly authen…
-
Unscored —
An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a show_preauthpage NULL pointer derefer…
-
Unscored —
An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a try_to_authenticate NULL pointer dere…
-
Unscored —
An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, …
-
Unscored —
An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a NULL pointer dereference in preauthen…
-
High 7.5
An issue was discovered in the captive portal in OpenNDS before version 10.1.3. It has multiple memory leaks due to not…
-
Unscored —
An issue was discovered in the captive portal in OpenNDS before version 10.1.3. get_query in http_microhttpd.c does not…