Lucene search
+L

13046 matches found

CVE
CVE
added 2019/06/07 8:26 p.m.219 views

CVE-2019-12506

CVE-2019-12506 affects the Logitech R700 Laser Presentation Remote R-R0010. The vulnerability arises from unencrypted and unauthenticated wireless communication, enabling keystroke injection and allowing an attacker to send arbitrary keystrokes to a victim’s computer when the receiver is in range...

8.8CVSS8.9AI score0.01347EPSS
SaveExploits2References4Affected Software1
CVE
CVE
added 2019/06/07 8:23 p.m.212 views

CVE-2019-12504

CVE-2019-12504 concerns the Inateck WP2002 2.4 GHz wearable wireless presenter. The connected documents confirm a vulnerability in data authenticity (CWE-345) where data from the receiver is not adequately validated, enabling keystroke injection attacks. The description notes unencrypted and unau...

8.8CVSS8.9AI score0.0192EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2019/06/07 8:04 p.m.37 views

CVE-2019-12505

Due to unencrypted and unauthenticated data communication, the wireless presenter Inateck WP1001 v1.3C is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In...

8.9AI score0.01333EPSS
SaveExploits1References4
CVE
CVE
added 2019/06/07 8:04 p.m.238 views

CVE-2019-12505

CVE-2019-12505 affects Inateck WP1001 wireless presenter (Rev. v1.3C). The issue arises from unencrypted and unauthenticated data communication over the 2.4 GHz link, enabling a remote attacker to perform keystroke injection and send arbitrary keystrokes to a victim’s computer when the target is ...

8.8CVSS8.9AI score0.01333EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2019/06/07 7:17 p.m.39 views

CVE-2018-10690

An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providing an insecure communication mechanism for a user connecting to the web server. This allows an attacker to sniff the traffic easily and allows an attacker to compromise sensitive data such...

8AI score0.01468EPSS
SaveExploits1References3
CVE
CVE
added 2019/06/07 7:17 p.m.171 views

CVE-2018-10690

The CVE-2018-10690 entry concerns Moxa AWK-3121 (version 1.14) where the device defaults to HTTP, enabling cleartext transmission of sensitive information. Multiple connected sources confirm the vulnerability is due to insecure web traffic allowing an attacker to sniff credentials and other data....

8.1CVSS7.9AI score0.01468EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2019/06/07 3:29 p.m.21 views

Design/Logic Flaw

Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language packs. This allows attacker to do man-in-the-middle MITM attack and replace original language pack by malicious one...

2.6CVSS5.2AI score0.00415EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/06/07 12:00 a.m.18 views

Siemens CP 1616 6GK1161-6AA02 Communications processor

Binary data 764359.prm...

7.3AI score
SaveExploits0
OSV
OSV
added 2019/06/05 5:29 p.m.7 views

CVE-2019-1872

A vulnerability in Cisco TelePresence Video Communication Server VCS and Cisco Expressway Series software could allow an unauthenticated, remote attacker to cause an affected system to send arbitrary network requests. The vulnerability is due to improper restrictions on network services in the...

5.3CVSS6.2AI score0.01516EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2019/06/05 4:30 p.m.25 views

CVE-2019-1872 Cisco TelePresence Video Communication Server and Cisco Expressway Series Server-Side Request Forgery Vulnerability

A vulnerability in Cisco TelePresence Video Communication Server VCS and Cisco Expressway Series software could allow an unauthenticated, remote attacker to cause an affected system to send arbitrary network requests. The vulnerability is due to improper restrictions on network services in the...

5.3CVSS5.5AI score0.01516EPSS
SaveExploits0References2
CVE
CVE
added 2019/06/05 4:25 p.m.108 views

CVE-2019-1845

The CVE-2019-1845 entry affects Cisco Unified Communications Manager IM&P Service, Cisco TelePresence Video Communication Server (VCS), and Cisco Expressway Series. The root cause is insufficient controls for specific memory operations, allowing an unauthenticated, remote attacker to send a malfo...

8.6CVSS8.7AI score0.04639EPSS
SaveExploits0References2Affected Software2
zdt
zdt
added 2019/06/05 12:00 a.m.283 views

Inateck 2.4 GHz Wireless Presenter WP1001 Keystroke Injection Vulnerability

Product: 2.4 GHz Wireless Presenter WP1001 Manufacturer: Inateck Affected Versions: Rev. v1.3C Tested Versions: Rev. v1.3C Vulnerability Type: Insufficient Verification of Data Authenticity CWE-345 Keystroke Injection Vulnerability Risk Level: High Solution Status: Open Manufacturer Notification:...

8.8CVSS0.4AI score0.01333EPSS
SaveExploits1
zdt
zdt
added 2019/06/05 12:00 a.m.153 views

Logitech R700 Laser Presentation Remote Keystroke Injection Vulnerability

Product: R700 Laser Presentation Remote Manufacturer: Logitech Affected Versions: Model R-R0010 PID WD904XM and PID WD802XM Tested Versions: Model R-R0010 PID WD904XM and PID WD802XM Vulnerability Type: Insufficient Verification of Data Authenticity CWE-345 Keystroke Injection Vulnerability Risk...

8.8CVSS0.6AI score0.01347EPSS
SaveExploits2
NVD
NVD
added 2019/06/03 7:29 p.m.18 views

CVE-2017-14852

An insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, due to an invalid SSL certificate. The attack allows for an eavesdropper to capture the communication and decrypt the data...

9.8CVSS9.5AI score0.01013EPSS
SaveExploits0References3
Prion
Prion
added 2019/06/03 7:29 p.m.20 views

Design/Logic Flaw

An insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, due to an invalid SSL certificate. The attack allows for an eavesdropper to capture the communication and decrypt the data...

5CVSS9.3AI score0.01013EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2019/06/03 6:57 p.m.24 views

CVE-2017-14852

An insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, due to an invalid SSL certificate. The attack allows for an eavesdropper to capture the communication and decrypt the data...

9.4AI score0.01013EPSS
SaveExploits0References3
CVE
CVE
added 2019/06/03 6:57 p.m.80 views

CVE-2017-14852

The CVE-2017-14852 entry concerns Orpak SiteOmat management console. The root cause is insecure communication due to an invalid SSL certificate, enabling an eavesdropper to capture and decrypt sensitive data in transit. Reported impact includes exposure of credentials and related data. Affected s...

9.8CVSS9.2AI score0.01013EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2019/06/03 6:57 p.m.12 views

CVE-2017-14852

An insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, due to an invalid SSL certificate. The attack allows for an eavesdropper to capture the communication and decrypt the data...

7.3AI score0.01013EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2019/06/03 12:47 p.m.154 views

PcapXray v2.5 - A Network Forensics Tool To Visualize A Packet Capture Offline As A Network Diagram

PcapXray is a Network Forensics Tool To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction. PcapXray Design Specification Goal: Given a Pcap File, plot a network diagram displaying hosts in the network,...

6.8AI score
SaveExploits0References1
Citrix
Citrix
added 2019/06/03 12:00 a.m.14 views

Citrix SDWAN High Availability FAQ

Q: What is the Platform and License Requirement for SDWAN High availability? The Platform and licenses should be same for both devices which participates in HA Q: What protocol and port numbers used by SDWAN for HA communication? SDWAN uses Citrix Proprietary protocol for HA communication and UDP...

6.8AI score
SaveExploits0
Rows per page
Query Builder