Lucene search
+L

353 matches found

OSV
OSV
added 2024/12/25 4:15 p.m.4 views

CVE-2024-52534

Dell ECS, versions prior to ECS 3.8.1.3, contains an Authentication Bypass by Capture-replay vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Session theft...

5.4CVSS5.8AI score0.00304EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/25 4:4 p.m.64 views

CVE-2024-52534

Dell ECS prior to version 3.8.1.3 contains an Authentication Bypass by Capture-replay vulnerability that could allow a low-privilege attacker with remote access to perform session theft. Affected component: Dell ECS software (enterprise object storage). Root cause: capture-replay-based bypass ena...

5.4CVSS7.1AI score0.00304EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/12/25 12:0 a.m.5 views

Dell ECS 安全漏洞

Dell ECS is an enterprise-grade cloud storage solution that provides high-performance, scalable object storage services. An authentication bypass vulnerability exists in Dell ECS versions prior to 3.8.1.3 that stems from a capture replay attack. An attacker could exploit the vulnerability to...

5.4CVSS7AI score0.00304EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/25 12:0 a.m.9 views

PT-2024-35362 · Dell · Dell Ecs

Name of the Vulnerable Software and Affected Versions: Dell ECS versions prior to 3.8.1.3 Description: The issue is an Authentication Bypass by Capture-replay vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Session theft...

5.4CVSS7.1AI score0.00304EPSS
SaveExploits0References6
Redos
Redos
added 2024/12/11 12:0 a.m.16 views

ROS-20241211-12

A vulnerability in the RADIUS authentication protocol implementation is related to bypassing the authentication procedure through capture-replay of intercepted messages. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access by forging an authentication...

9CVSS7.7AI score0.14859EPSS
SaveExploits2
CNVD
CNVD
added 2024/12/06 12:0 a.m.7 views

Wyse Management Suite Authentication Bypass Vulnerability

Wyse Management Suite is Dell's hybrid cloud security management solution for Wyse thin client devices, designed to simplify IT management processes and enhance device security. An authentication bypass vulnerability exists in Wyse Management Suite, which stems from a vulnerability that includes...

7.6CVSS6.9AI score0.00534EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/26 3:15 a.m.7 views

CVE-2024-49595

Dell Wyse Management Suite, version WMS 4.4 and before, contain an Authentication Bypass by Capture-replay vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

4.9CVSS5.8AI score0.00534EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/26 3:15 a.m.16 views

CVE-2024-49595

Dell Wyse Management Suite, version WMS 4.4 and before, contain an Authentication Bypass by Capture-replay vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

7.6CVSS0.00534EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/26 2:46 a.m.16 views

CVE-2024-49595

Dell Wyse Management Suite, version WMS 4.4 and before, contain an Authentication Bypass by Capture-replay vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

7.6CVSS6.8AI score0.00534EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/26 2:46 a.m.36 views

CVE-2024-49595

Dell Wyse Management Suite, version WMS 4.4 and before, contain an Authentication Bypass by Capture-replay vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

7.6CVSS0.00534EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/26 2:46 a.m.71 views

CVE-2024-49595

CVE-2024-49595 affects Dell Wyse Management Suite (WMS) 4.4 and earlier, due to an Authentication Bypass by Capture‑Replay. The public documents show that a remote, high-privilege attacker could exploit this to cause a Denial of Service. Connected sources corroborate related issues in the same pr...

7.6CVSS6.8AI score0.00534EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/11/26 12:0 a.m.22 views

Dell Wyse Management Suite 安全漏洞

Wyse Management Suite is Dell's hybrid cloud security management solution for Wyse thin client devices, designed to simplify IT management processes and enhance device security. An authentication bypass vulnerability exists in Wyse Management Suite, which stems from a vulnerability that includes...

7.6CVSS6.9AI score0.00534EPSS
SaveExploits0References1
Rosalinux
Rosalinux
added 2024/10/29 8:27 a.m.34 views

Advisory ROSA-SA-2024-2509

Software: freeradius 3.0.13 OS: rosa-server79 packageevrstring: freeradius-3.0.13-15.0.1.res7 CVE-ID: CVE-2024-3596 BDU-ID: 2024-05180 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the RADIUS authentication protocol implementation is related to bypassing the authentication procedure through...

9CVSS7.7AI score0.14859EPSS
SaveExploits2
NVD
NVD
added 2024/10/07 4:15 p.m.17 views

CVE-2024-46041

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...

8.8CVSS0.0034EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/10/07 12:0 a.m.10 views

CVE-2024-46041

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...

6.9AI score0.0034EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/10/07 12:0 a.m.25 views

CVE-2024-46041

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...

0.0034EPSS
SaveExploits1References2
CVE
CVE
added 2024/10/07 12:0 a.m.59 views

CVE-2024-46041

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is affected by CVE-2024-46041: an Authentication Bypass via capture-replay during Provisioning (Access Point pairing). Public sources (NVD/Red Hat/CNNVD) confirm the product and version, describing an authentication-token replay attack that can bypass login...

8.8CVSS7.1AI score0.0034EPSS
SaveExploits1References2
OSV
OSV
added 2024/08/21 3:29 p.m.13 views

GO-2022-0889 Authentication bypass by capture-replay in github.com/cosmos/ethermint

Authentication bypass by capture-replay in github.com/cosmos/ethermint...

7.5CVSS7.5AI score0.01309EPSS
SaveExploits0References5
OSV
OSV
added 2024/08/21 3:29 p.m.39 views

GO-2022-0813 Authentication bypass by capture-replay in github.com/cosmos/ethermint

Authentication bypass by capture-replay in github.com/cosmos/ethermint...

7.5CVSS7.6AI score0.01147EPSS
SaveExploits0References5
OSV
OSV
added 2024/08/21 2:30 p.m.14 views

GO-2022-0310 Capture-replay in Gitea in code.gitea.io/gitea

Capture-replay in Gitea in code.gitea.io/gitea...

9.8CVSS9.4AI score0.02139EPSS
SaveExploits0References9
Rows per page
Query Builder