Lucene search
+L

77 matches found

OSV
OSV
•added 2024/09/30 8:15 a.m.•12 views

CVE-2024-8455

The swctrl service is used to detect and remotely manage PLANET Technology devices. For certain switch models, the authentication tokens used during communication with this service are encoded user passwords. Due to insufficient strength, unauthorized remote attackers who intercept the packets ca...

5.9CVSS5.8AI score0.00341EPSS
SaveExploits0References2
Veracode
Veracode
•added 2024/08/13 5:36 a.m.•23 views

Improper Validation Of Integrity Check Value

org.apache.sshd, sshd-common is vulnerable for Improper Validation Of Integrity Check Value. The vulnerability is due to the possibility of packet interception, where an attacker can intercept traffic between the client and server and drop certain packets from the stream, potentially downgrading ...

5.9CVSS7.2AI score0.00576EPSS
SaveExploits0References6Affected Software2
NVD
NVD
•added 2024/07/12 8:15 p.m.•66 views

CVE-2023-41093

Use After Free vulnerability in Silicon Labs Bluetooth SDK on 32 bit, ARM may allow an attacker with precise timing capabilities to intercept a small number of packets intended for a recipient that has left the network.This issue affects Silabs Bluetooth SDK: through 8.0.0...

3.1CVSS0.00193EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/12 8:15 p.m.•15 views

CVE-2023-41093

Use After Free vulnerability in Silicon Labs Bluetooth SDK on 32 bit, ARM may allow an attacker with precise timing capabilities to intercept a small number of packets intended for a recipient that has left the network.This issue affects Silabs Bluetooth SDK: through 8.0.0...

3.1CVSS5.8AI score0.00193EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/07/12 12:00 a.m.•20 views

Silicon Labs Bluetooth SDK Security Vulnerability

Silicon Labs Bluetooth SDK is a Bluetooth low energy software development kit from Silicon Labs, Inc. A security vulnerability exists in Silicon Labs Bluetooth SDK 8.0.0 and prior versions, which stems from the presence of post-release reuse and could allow an attacker with precise timing to...

3.1CVSS6.7AI score0.00193EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/12 12:00 a.m.•2 views

CVE-2023-41093: Use After Free

Use After Free vulnerability in Silicon Labs Bluetooth SDK on 32 bit, ARM may allow an attacker with precise timing capabilities to intercept a small number of packets intended for a recipient that has left the network.This issue affects Silabs Bluetooth SDK: through 8.0.0...

3.1CVSS5.8AI score0.00193EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2023/06/20 12:00 a.m.•15 views

The vulnerability of Huawei 535-232a router’s micro-programming software, related to access control errors when processing domain names, allows a hacker to intercept packets.

The vulnerability of Huawei 535-232a router’s microprogramming software is related to access control errors during the processing of domain names. Exploiting this vulnerability allows a remote attacker to intercept packets...

8CVSS6.6AI score0.00304EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/06/16 12:59 p.m.•12 views

CVE-2022-48469

There is a traffic hijacking vulnerability in Huawei routers. Successful exploitation of this vulnerability can cause packets to be hijacked by attackers...

6.8AI score0.00304EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/04/29 12:00 a.m.•18 views

Sea Cormorant Technology hospital food ordering applet has a flawed logic vulnerability

Guangzhou Hai Cormorant Network Technology Co., Ltd, referred to as: Hai Cormorant Technology, was founded on May 19, 2014, focusing on the healthcare industry, the main business includes the development and operation of intelligent mobile service platforms for WeChat Service Number, Alipay Life...

7.1AI score
SaveExploits0
Cvelist
Cvelist
•added 2020/05/13 3:10 p.m.•38 views

CVE-2019-9682

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker c...

8.1AI score0.0086EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/13 12:00 a.m.•6 views

CVE-2019-9682: Incorrect Default Permissions

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker c...

8.1CVSS7.4AI score0.0086EPSS
SaveExploits0References2
OSV
OSV
•added 2019/12/13 3:15 p.m.•14 views

CVE-2019-5291

Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modify the packets, and send the modified packets to the peer device. Due to insufficient verification of some field...

5.9CVSS6.2AI score0.00358EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/10/01 12:00 a.m.•12 views

PT-2019-3608 · Zingbox · Zingbox Inspector

Name of the Vulnerable Software and Affected Versions: Zingbox Inspector versions 1.293 and earlier Description: A security issue exists due to the failure to neutralize special elements in the network traffic handler. This could allow a remote attacker to intercept and modify software update...

10CVSS9.3AI score0.00889EPSS
SaveExploits0References5
CNVD
CNVD
•added 2019/05/28 12:00 a.m.•11 views

Jingdong Financial App has a logic flaw vulnerability

Jingdong Finance APP is an investment software. A logic flaw vulnerability exists in Jingdong Financial APP. Allows attackers to bypass real-name verification by intercepting packets using proxy tools...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2018/07/08 12:00 a.m.•7 views

Logic Design Vulnerability in LeShang Mall System v2.2.0

LeShang mall system is a based on THINKPHP5.0 as the core development of a free open source professional mall system. LeShang Mall System v2.2.0 has a logical design vulnerability. Attackers can overstep their authority to modify other users' personal information, including user passwords, by...

7AI score
SaveExploits0
CNVD
CNVD
•added 2018/06/04 12:00 a.m.•7 views

Logic Design Vulnerability in LemHealth APP, a Smart Health Bracelet from Synerchip Technology

LemHealth APP is a health management software. A logical design vulnerability exists in the LemHealth APP, a smart health bracelet from Synergy Technology. An attacker can reset any password and perform unauthorized operations by catching packets and intercepting changes...

7AI score
SaveExploits0References1
CNVD
CNVD
•added 2018/04/02 12:00 a.m.•8 views

Audi Travel App has a Bursting Vulnerability

Audi Travel App is a travel service software. Audi Travel APP is vulnerable to a blasting vulnerability. An attacker can log in to any user account and perform unauthorized operations by grabbing packets and bursting them...

6.9AI score
SaveExploits0
OSV
OSV
•added 2017/12/22 5:29 p.m.•16 views

CVE-2017-15321

Huawei FusionSphere OpenStack V100R006C000SPC102 NFV has an information leak vulnerability due to the use of a low version transmission protocol by default. An attacker could intercept packets transferred by a target device. Successful exploit could cause an information leak...

3.7CVSS5.8AI score0.00606EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/11/28 12:00 a.m.•6 views

Unauthorized Access Vulnerability in Xiao Feng Air Ching App Android Version

Ltd. developed with the work of the Xiao Feng Air Dorothy system APP, mainly used to monitor the indoor air quality and Xiao Feng Air Dorothy internal and external machine running status, monitoring items including PM2.5, formaldehyde, oxygen, temperature and humidity, and can be through the APP...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2017/11/28 12:00 a.m.•12 views

Smart Heat Temperature Control App for Android suffers from an override access vulnerability

Smart Heat Temperature Control APP a home temperature control software, users only need to add the home's Internet-accessible thermostat to the software, you can use your phone or tablet to control the temperature of your home's HVAC equipment. The Android version of Smart Heat Temperature Contro...

6.9AI score
SaveExploits0
Rows per page
Query Builder