Lucene search
+L

497 matches found

attackerkb
attackerkb
•added 2021/08/12 6:15 p.m.•14 views

CVE-2021-36927

Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability...

7.8CVSS7.1AI score0.00529EPSS
SaveExploits0References2Affected Software12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/12 12:00 a.m.•3 views

CVE-2021-36927: Improper Privilege Management

Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability...

7.8CVSS5.7AI score0.00529EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/08/10 12:00 a.m.•8 views

PT-2021-4039 · Microsoft · Windows Digital Tv Tuner Device Registration Application +1

Name of the Vulnerable Software and Affected Versions: Windows Digital TV Tuner device registration application affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Digital TV Tuner device registration application, which can be...

7.8CVSS7.2AI score0.00529EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2021/05/12 12:00 a.m.•9 views

PT-2021-3507 · Red Hat · Keycloak

Name of the Vulnerable Software and Affected Versions: Keycloak affected versions not specified Description: The issue is related to weaknesses in the WebAuthn authentication mechanism. It allows an attacker to register a new security device or key for any user without a previously registered...

7.6CVSS7.4AI score0.01133EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
•added 2021/04/20 12:00 a.m.•21 views

PT-2021-8007 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the use of memory after it has been freed during the registration of input/output devices in the Kernel-based Virtual Machine KVM subsystem of the Linux kernel...

7.8CVSS6.5AI score0.08793EPSS
SaveExploits6References1398
Citrix
Citrix
•added 2021/04/13 12:00 a.m.•18 views

ADC Fails To Connect To ADM for Pooled Licensing

When trying to add the ADC to the ADM for Pooled Licensing, or CPU based licensing, or anything that uses ADM as the license server, you receive an errror. Error might be "Unable to connect to licenseserver" or "Registration of device failed"...

7.1AI score
SaveExploits0
OSV
OSV
•added 2020/10/21 7:15 p.m.•18 views

CVE-2020-3549

A vulnerability in the sftunnel functionality of Cisco Firepower Management Center FMC Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to obtain the device registration hash. The vulnerability is due to insufficient sftunnel negotiation...

8.1CVSS7.3AI score0.00959EPSS
SaveExploits0References1
Prion
Prion
•added 2020/10/21 7:15 p.m.•32 views

Design/Logic Flaw

A vulnerability in the sftunnel functionality of Cisco Firepower Management Center FMC Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to obtain the device registration hash. The vulnerability is due to insufficient sftunnel negotiation...

6.8CVSS7.8AI score0.00959EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
•added 2020/10/21 6:35 p.m.•18 views

CVE-2020-3549 Cisco Firepower Management Center Software and Firepower Threat Defense Software sftunnel Pass the Hash Vulnerability

A vulnerability in the sftunnel functionality of Cisco Firepower Management Center FMC Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to obtain the device registration hash. The vulnerability is due to insufficient sftunnel negotiation...

8.1CVSS6.7AI score0.00959EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/10/21 6:35 p.m.•46 views

CVE-2020-3549 Cisco Firepower Management Center Software and Firepower Threat Defense Software sftunnel Pass the Hash Vulnerability

A vulnerability in the sftunnel functionality of Cisco Firepower Management Center FMC Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to obtain the device registration hash. The vulnerability is due to insufficient sftunnel negotiation...

8.1CVSS7.9AI score0.00959EPSS
SaveExploits0References1
CVE
CVE
•added 2020/10/21 6:35 p.m.•82 views

CVE-2020-3549

The CVE-2020-3549 entry is backed by several connected documents describing a sftunnel MITM issue in Cisco Firepower FMC/FTD. The flaw arises from insufficient sftunnel negotiation protection during initial device registration, allowing an unauthenticated attacker in a man-in-the-middle position ...

8.1CVSS7.9AI score0.00959EPSS
SaveExploits0References1Affected Software2
Cisco
Cisco
•added 2020/10/21 4:00 p.m.•123 views

Cisco Firepower Management Center Software and Firepower Threat Defense Software sftunnel Pass the Hash Vulnerability

A vulnerability in the sftunnel functionality of Cisco Firepower Management Center FMC Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to obtain the device registration hash. The vulnerability is due to insufficient sftunnel negotiation...

8.1CVSS8.1AI score0.00959EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/10/21 12:00 a.m.•11 views

PT-2020-5097 · Cisco · Cisco Firepower Management Center +1

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the sftunnel functionality could allow an...

8.1CVSS6.8AI score0.00959EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2020/09/29 10:31 p.m.•10 views

kernel: use-after-free in drivers/bluetooth/hci_ldisc.c

A flaw was found in the Linux kernel's implementation of the HCI UART driver. A local attacker with access permissions to the Bluetooth device can issue an ioctl, which triggers the hciuartsetproto function in drivers/bluetooth/hcildisc.c. The flaw in this function can cause memory corruption or ...

7CVSS6.8AI score0.00643EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/07/07 1:23 p.m.•21 views

kernel: use-after-free in drivers/bluetooth/hci_ldisc.c

A flaw was found in the Linux kernel's implementation of the HCI UART driver. A local attacker with access permissions to the Bluetooth device can issue an ioctl, which triggers the hciuartsetproto function in drivers/bluetooth/hcildisc.c. The flaw in this function can cause memory corruption or ...

7CVSS6.8AI score0.00643EPSS
SaveExploits0References4
OSV
OSV
•added 2019/09/04 7:15 p.m.•10 views

UBUNTU-CVE-2019-15917

An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hciuartregisterdev fails in hciuartsetproto in drivers/bluetooth/hcildisc.c...

7.3CVSS6.7AI score0.00643EPSS
SaveExploits0References5
NVD
NVD
•added 2018/08/30 5:29 p.m.•32 views

CVE-2018-15478

An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip before 3.80, WiFi Button before 2.73, and WiFi Button Plus before 2.73. The process of registering a device with a cloud account was based o...

8.1CVSS8.2AI score0.00859EPSS
SaveExploits0References1
Prion
Prion
•added 2018/08/30 5:29 p.m.•26 views

Code injection

An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip before 3.80, WiFi Button before 2.73, and WiFi Button Plus before 2.73. The process of registering a device with a cloud account was based o...

6.8CVSS8.1AI score0.00859EPSS
SaveExploits0References1Affected Software6
Cvelist
Cvelist
•added 2018/08/30 5:00 p.m.•42 views

CVE-2018-15478

An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip before 3.80, WiFi Button before 2.73, and WiFi Button Plus before 2.73. The process of registering a device with a cloud account was based o...

8.2AI score0.00859EPSS
SaveExploits0References1
CVE
CVE
•added 2018/08/30 5:00 p.m.•60 views

CVE-2018-15480

CVE-2018-15480 affects multiple myStrom devices (WiFi Switch V1 <2.66, V2 <3.80, EU <3.80, Bulb <2.58, LED Strip <3.80, Button <2.73, Button Plus

8.8CVSS8.5AI score0.01024EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder