Lucene search
K

310 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 4:0 p.m.10 views

CVE-2020-29031

An Insecure Direct Object Reference vulnerability exists in the web UI of the GateManager which allows an authenticated attacker to reset the password of any user in its domain or any sub-domain, via escalation of privileges. This issue affects all GateManager versions prior to 9.2c...

8.1CVSS7.1AI score0.00216EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/02/05 5:27 a.m.12 views

CVE-2024-1969

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Secomea GateManager webserver modules allows crash of GateManager.This issue affects GateManager: from 9.7 before 11.2.624095033...

8.2CVSS7AI score0.00186EPSS
Exploits0References1
NVD
NVD
added 2024/12/13 11:15 a.m.10 views

CVE-2021-32007

This issue affects: Secomea GateManager Version 9.5 and all prior versions. Protection Mechanism Failure vulnerability in web server of Secomea GateManager to potentially leak information to remote servers...

3.5CVSS0.00189EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/13 11:5 a.m.18 views

CVE-2021-32007 Missing security header: Referrer-Policy URL

This issue affects: Secomea GateManager Version 9.5 and all prior versions. Protection Mechanism Failure vulnerability in web server of Secomea GateManager to potentially leak information to remote servers...

3.5CVSS0.00189EPSS
Exploits0References1
CVE
CVE
added 2024/12/13 11:5 a.m.57 views

CVE-2021-32007

CVE-2021-32007 concerns Secomea GateManager (Version 9.5 and earlier). The issue is described as a Protection Mechanism Failure in the web server that could leak information to remote servers. The CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N with a base score of 3.5 (LOW). Affected comp...

3.5CVSS4AI score0.00189EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 11:5 a.m.10 views

CVE-2021-32007 Missing security header: Referrer-Policy URL

This issue affects: Secomea GateManager Version 9.5 and all prior versions. Protection Mechanism Failure vulnerability in web server of Secomea GateManager to potentially leak information to remote servers...

3.5CVSS4AI score0.00189EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.2 views

Secomea GateManager 安全漏洞

Secomea GateManager is a remote access server product from Secomea, Denmark. A security vulnerability exists in Secomea GateManager version 9.5 and earlier, which stems from the presence of a protection mechanism failure vulnerability that could disclose information to a remote server...

3.5CVSS6.5AI score0.00189EPSS
Exploits0References1
NVD
NVD
added 2024/04/29 2:15 p.m.13 views

CVE-2024-1969

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Secomea GateManager webserver modules allows crash of GateManager.This issue affects GateManager: from 9.7 before 11.2.624095033...

8.2CVSS8.3AI score0.00186EPSS
Exploits0References1
NVD
NVD
added 2024/04/29 2:15 p.m.9 views

CVE-2024-1579

Incorrect Usage of Seeds in Pseudo-Random Number Generator PRNG vulnerability in Secomea GateManager Webserver modules allows Session Hijacking.This issue affects GateManager: before 11.2.624071020...

8.1CVSS8.2AI score0.00206EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/29 1:29 p.m.21 views

CVE-2024-1969 Heap buffer overflow

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Secomea GateManager webserver modules allows crash of GateManager.This issue affects GateManager: from 9.7 before 11.2.624095033...

8.2CVSS7AI score0.00186EPSS
Exploits0References1
CVE
CVE
added 2024/04/29 1:29 p.m.74 views

CVE-2024-1969

CVE-2024-1969 affects Secomea GateManager webserver modules. A Buffer Copy without Checking Size of Input (classic buffer overflow) can crash GateManager. Affected versions are 9.7 through 11.2.624095033. Remediation: update to a version after 11.2.624095033 (per PT-2024-18459). The available con...

8.2CVSS6.9AI score0.00186EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/29 1:29 p.m.13 views

CVE-2024-1969 Heap buffer overflow

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Secomea GateManager webserver modules allows crash of GateManager.This issue affects GateManager: from 9.7 before 11.2.624095033...

8.2CVSS8.4AI score0.00186EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/29 1:27 p.m.13 views

CVE-2024-1579 Insufficient seeding of random number generator

Incorrect Usage of Seeds in Pseudo-Random Number Generator PRNG vulnerability in Secomea GateManager Webserver modules allows Session Hijacking.This issue affects GateManager: before 11.2.624071020...

8.1CVSS7AI score0.00206EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/29 1:27 p.m.13 views

CVE-2024-1579 Insufficient seeding of random number generator

Incorrect Usage of Seeds in Pseudo-Random Number Generator PRNG vulnerability in Secomea GateManager Webserver modules allows Session Hijacking.This issue affects GateManager: before 11.2.624071020...

8.1CVSS8.3AI score0.00206EPSS
Exploits0References1
CVE
CVE
added 2024/04/29 1:27 p.m.53 views

CVE-2024-1579

The CVE concerns Secomea GateManager, specifically the Webserver modules, with an underlying flaw in the PRNG seeding. The root cause is Incorrect Usage of Seeds in the PRNG, which can lead to session hijacking. Affected/version info: GateManager before 11.2.624071020. Documented impact indicates...

8.1CVSS6.9AI score0.00206EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/04/29 12:0 a.m.4 views

PT-2024-18459 · Secomea · Secomea Gatemanager

Name of the Vulnerable Software and Affected Versions: Secomea GateManager versions 9.7 through 11.2.624095033 Description: A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' issue in the webserver modules of Secomea GateManager allows the crash of GateManager. Recommendations...

8.2CVSS6.9AI score0.00186EPSS
Exploits0References8
CNNVD
CNNVD
added 2024/04/29 12:0 a.m.2 views

Secomea GateManager 安全漏洞

Secomea GateManager is a remote access server product from Secomea, Denmark. A security vulnerability exists in versions prior to Secomea GateManager 11.2.624095033, which stems from the presence of a buffer overflow vulnerability...

8.2CVSS7.2AI score0.00186EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/04/29 12:0 a.m.2 views

Secomea GateManager 安全漏洞

Secomea GateManager is a remote access server product from Secomea, Denmark. A security vulnerability exists in Secomea GateManager versions prior to 11.2.624071020, which stems from a security flaw in the pseudo-random number generator PRNG...

8.1CVSS6.8AI score0.00206EPSS
Exploits0References2
NVD
NVD
added 2024/04/18 11:15 a.m.14 views

CVE-2023-3675

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Secomea GateManager Web GUI allows Reading Data from System Resources.This issue affects GateManager: from 11.0.623074018 before 11.0.623373051...

6.5CVSS6.4AI score0.00268EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/18 10:41 a.m.7 views

CVE-2023-3675 Insufficient input validation when downloading certain file types.

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Secomea GateManager Web GUI allows Reading Data from System Resources.This issue affects GateManager: from 11.0.623074018 before 11.0.623373051...

6.5CVSS6.8AI score0.00268EPSS
Exploits0References1
Rows per page
Query Builder