CVE-2021-25755

In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic...

Design/Logic Flaw

An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reolink P2P cameras outside of local network access...

CVE-2020-25173 Reolink P2P Cameras

An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reolink P2P cameras outside of local network access...

CVE-2020-25173

CVE-2020-25173 affects Reolink P2P cameras. Multiple connected sources confirm a fixed cryptography key is exposed, enabling an attacker with local network access to potentially decrypt tokens and compromise cameras beyond the local network. Root cause: hard-coded/fixed cryptographic material. Im...

CVE-2020-4983

IBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2 could allow a user on the local network who has privileges to submit LSF jobs to execute arbitrary commands. IBM X-Force ID: 192586...

Code injection

IBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2 could allow a user on the local network who has privileges to submit LSF jobs to execute arbitrary commands. IBM X-Force ID: 192586...

CVE-2020-4983

IBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2 could allow a user on the local network who has privileges to submit LSF jobs to execute arbitrary commands. IBM X-Force ID: 192586...

CVE-2020-4983

CVE-2020-4983 affects IBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2. A local attacker with privileges to submit LSF jobs can execute arbitrary commands due to an authentication weakness in certain messages between binaries over the network, potentially gaining full control of the cluster....

Reolink P2P Cameras Trust Management Issue Vulnerability

Reolink P2P Cameras is a camera. A trust management issue vulnerability exists in Reolink P2P Cameras, which can be exploited by an attacker to obtain a fixed encryption key and access applications outside the local network access range. The vulnerability exists in the following devices or models...

CVE-2020-29491

Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the sensitive information on the local network, leading to the potential compromise of impacted thin...

CVE-2020-29491

Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the sensitive information on the local network, leading to the potential compromise of impacted thin...

Dell Wyse ThinOS 安全漏洞

Wyse ThinOS is a highly secure, virus-resistant thin operating system. An insecure default configuration vulnerability exists in Wyse ThinOS 8.6 and earlier versions. An attacker could exploit the vulnerability to access sensitive information on the local network...

CVE-2020-12523

On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports g...

Denial Of Service (DoS)

SANE is vulnerable to denial of service. An attacker may connect a malicious device to the same local network as the victim and utilize a null pointer dereference in sane backend to cause a denial of service...

Arbitrary Code Execution

sane is vulnerable to arbitrary code execution. A heap buffer overflow allows a malicious device connected to the same local network as the victim to execute arbitrary code...

Information Disclosure

sane is vulnerable to information disclosure. An out-of-bounds read allows a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program...

Information Disclosure

sane is vulnerable to information disclosure. An out-of-bounds read allows a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program...

Information Disclosure

sane is vulnerable to information disclosure. An out-of-bounds read allows a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program...

CVE-2020-7339

Use of a Broken or Risky Cryptographic Algorithm vulnerability in McAfee Database Security Server and Sensor prior to 4.8.0 in the form of a SHA1 signed certificate that would allow an attacker on the same local network to potentially intercept communication between the Server and Sensors...

Design/Logic Flaw

Use of a Broken or Risky Cryptographic Algorithm vulnerability in McAfee Database Security Server and Sensor prior to 4.8.0 in the form of a SHA1 signed certificate that would allow an attacker on the same local network to potentially intercept communication between the Server and Sensors...