Lucene search
+L

903 matches found

OSV
OSV
•added 2021/06/30 2:15 p.m.•16 views

CVE-2021-22375

There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality,availability and integrity...

9.8CVSS7.3AI score0.00765EPSS
SaveExploits0References1
NVD
NVD
•added 2021/06/30 2:15 p.m.•39 views

CVE-2021-22375

There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality,availability and integrity...

9.8CVSS0.00765EPSS
SaveExploits0References1
Prion
Prion
•added 2021/06/30 2:15 p.m.•27 views

Design/Logic Flaw

There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality,availability and integrity...

7.5CVSS9.2AI score0.00765EPSS
SaveExploits0References1Affected Software2
attackerkb
attackerkb
•added 2021/06/30 2:15 p.m.•9 views

CVE-2021-22375

There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality,availability and integrity...

9.8CVSS7.2AI score0.00765EPSS
SaveExploits0References2
CVE
CVE
•added 2021/06/30 1:43 p.m.•69 views

CVE-2021-22375

CVE-2021-22375 corresponds to a Huawei smartphone vulnerability described as a key management error. The issue could affect service confidentiality, availability and integrity. Publicly documented data show an attacker could access the device over the network with low complexity (no authenticatio...

9.8CVSS9.2AI score0.00765EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
•added 2021/06/30 12:00 a.m.•13 views

华为智能手机安全漏洞

Huawei phones are smartphones from Huawei, a Chinese company. A security vulnerability exists in Huawei smartphones that stems from a key management error. The vulnerability may affect service confidentiality, availability and integrity...

9.8CVSS8.3AI score0.00765EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/30 12:00 a.m.•9 views

CVE-2021-22375: Undefined Security Weakness

There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality,availability and integrity...

9.8CVSS5.8AI score0.00765EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/30 12:00 a.m.•7 views

CVE-2021-22367: Undefined Security Weakness

There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may lead to authentication bypass...

9.8CVSS5.8AI score0.00832EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/06/30 12:00 a.m.•18 views

PT-2021-14996 · Huawei · Huawei Smartphone

Name of the Vulnerable Software and Affected Versions: Huawei Smartphone affected versions not specified Description: The issue is related to Key Management Errors, which may lead to authentication bypass if successfully exploited. Recommendations: At the moment, there is no information about a...

9.8CVSS9.4AI score0.00832EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/06/30 12:00 a.m.•4 views

PT-2021-15004

Name of the Vulnerable Software and Affected Versions: Huawei Smartphone affected versions not specified Description: The issue is related to Key Management Errors, which could impact service confidentiality, availability, and integrity if successfully exploited. Recommendations: At the moment,...

9.8CVSS0.00765EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2021/06/29 12:00 a.m.•13 views

The vulnerability of the authfile.c component of the sshd service in the OpenSSH encryption protection mechanism allows a hacker to gain unauthorized access to protected information.

The vulnerability of the authfile.c component of the sshd service in the OpenSSH encryption protection mechanism is related to key management errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.6AI score0.01101EPSS
SaveExploits1References5Affected Software3
The Hacker News
The Hacker News
•added 2021/06/14 2:26 p.m.•57 views

Google Workspace Now Offers Client-side Encryption For Drive and Docs

Google on Monday announced that it's rolling out client-side encryption to Google Workspace formerly G Suite, thereby giving its enterprise customers direct control of encryption keys and the identity service they choose to access those keys. "With client-side encryption, customer data is...

6.7AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•37 views

SUSE: Security Advisory (SUSE-SU-2019:14127-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.4AI score0.7111EPSS
SaveExploits3References14
RedhatCVE
RedhatCVE
•added 2021/05/13 6:48 a.m.•77 views

CVE-2020-26139

Frames used for authentication and key management between the AP and connected clients. Some clients may take these redirected frames masquerading as control mechanisms from the AP. Mitigation Mitigation for this issue is either not available or the currently available options does not meet the R...

5.3CVSS1.6AI score0.06487EPSS
SaveExploits0References4
zdt
zdt
•added 2021/03/17 12:00 a.m.•92 views

Microsoft Windows Containers DP API Cryptography Flaw Vulnerability

PRODUCT : Windows Containers VENDOR : Microsoft SEVERITY : High AFFECTED VERSION : Windows 10, Windows Server IDENTIFIERS : CVE-2021-1645 PATCH VERSION : KB4598229, KB4598230, KB4598242, KB4598243 FOUND BY : Marc Nimmerrichter, Certitude Lab Introduction ------------ Windows containers is a featu...

5CVSS6.8AI score0.07846EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2021/03/03 12:00 a.m.•15 views

Nessus Signing Key Management

Binary data preflightinstallsigningpubkey.nbin...

7.3AI score
SaveExploits0
attackerkb
attackerkb
•added 2021/02/25 5:00 p.m.•11 views

CVE-2021-20328

Specific versions of the Java driver that support client-side field level encryption CSFLE fail to perform correct host name verification on the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffi...

6.8CVSS6.6AI score0.00436EPSS
SaveExploits0References2Affected Software4
attackerkb
attackerkb
•added 2021/02/25 2:51 p.m.•11 views

CVE-2021-20327

A specific version of the Node.js mongodb-client-encryption module does not perform correct validation of the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffic between the Node.js driver and th...

6.8CVSS6.6AI score0.00202EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2021/02/25 12:00 a.m.•21 views

MongoDB Trust Management Issues Vulnerabilities

Mongodb Server is the United States Mongodb company's set of open source NoSQL database . The database provides collection-oriented storage, dynamic query, data replication and automatic failover and other functions. A security vulnerability exists in the MongoDB Java driver client-side, which ca...

6.8CVSS6.7AI score0.00436EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2021/02/25 12:00 a.m.•17 views

Vulnerability of the web-API service provided by Junos routers of the NFX Series and SRX Series; allowing attackers to obtain the secret key for the web-API service

The vulnerability of the web-API service of Junos router series NFX and SRX is related to errors in managing cryptographic keys. Exploiting this vulnerability can allow an attacker to obtain the secret key for the web-API service...

6.5CVSS6.6AI score0.00318EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder