Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:10:47 +0000 cnvd-2016-01910 https://cve.radiocsirt.org/vuln/cnvd-2016-01910 cnvd-2016-01910 https://cve.radiocsirt.org/vuln/cnvd-2016-01910 EUVD-2026-82251 https://cve.radiocsirt.org/vuln/euvd-2026-82251 EUVD-2026-82251 https://cve.radiocsirt.org/vuln/euvd-2026-82251 fkie_cve-2016-1518 https://cve.radiocsirt.org/vuln/fkie_cve-2016-1518 <p>The auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-the-middle attackers to spoof provisioning data and consequently modify device functionality, obtain sensitive information from system logs, and have unspecified other impact by leveraging failure to use an HTTPS session for downloading configuration files from http://fm.grandstream.com/gs/.</p> <p>The auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-the-middle attackers to spoof provisioning data and consequently modify device functionality, obtain sensitive information from system logs, and have unspecified other impact by leveraging failure to use an HTTPS session for downloading configuration files from http://fm.grandstream.com/gs/.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-1518 GHSA-6536-qjrp-px99 https://cve.radiocsirt.org/vuln/ghsa-6536-qjrp-px99 <p>The auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-the-middle attackers to spoof provisioning data and consequently modify device functionality, obtain sensitive information from system logs, and have unspecified other impact by leveraging failure to use an HTTPS session for downloading configuration files from http://fm.grandstream.com/gs/.</p> <p>The auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-the-middle attackers to spoof provisioning data and consequently modify device functionality, obtain sensitive information from system logs, and have unspecified other impact by leveraging failure to use an HTTPS session for downloading configuration files from http://fm.grandstream.com/gs/.</p> https://cve.radiocsirt.org/vuln/ghsa-6536-qjrp-px99 gsd-2016-1518 https://cve.radiocsirt.org/vuln/gsd-2016-1518 gsd-2016-1518 https://cve.radiocsirt.org/vuln/gsd-2016-1518