46 matches found
KioWare 安全漏洞
KioWare is a suite of self-service terminal browser software. The software has the ability to restrict end-user access to specific interfaces. A security vulnerability exists in KioWare version 8.34 and prior versions, which stems from a vulnerability that allows brute force decryption of a PIN...
PT-2024-26004 · Unknown · Kioware For Windows
Name of the Vulnerable Software and Affected Versions: KioWare for Windows versions all through 8.35 Description: The issue allows an attacker to escape the environment by downloading PDF files, which are then opened in an external PDF viewer. This can lead to launching a web browser, searching...
PT-2024-26025 · Unknown · Kioware For Windows
Name of the Vulnerable Software and Affected Versions: KioWare for Windows versions all through 8.35 Description: The issue allows for brute forcing the PIN number that protects the application from being closed, due to the lack of mechanisms preventing excessive guessing of the number...
UBUNTU-CVE-2023-40660
A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock a...
OESA-2023-1767 opensc security update
OpenSC provides a set of libraries and utilities to work with smart cards. Its main focus is on cards that support cryptographic operations, and facilitate their use in security applications such as authentication, mail encryption and digital signatures. OpenSC implements the standard APIs to sma...
Fujitsu Arconte Áurea License Issue Vulnerability
Fujitsu Arconte Áurea is a view recording system from Fujitsu Japan. A security vulnerability exists in Fujitsu Arconte Áurea versions prior to 1.5.0.0. An attacker could exploit the vulnerability to brute-force an emailed PIN code to change a legitimate user's password...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Jan-2023 Release 1 prior to Release 1, which stems from improper privilege management in...
The vulnerability of the SetTriggerWPS function in D-Link COVR 1200, 1202, and 1203 router microprogramming systems allows a hacker to execute arbitrary commands.
The vulnerability of the SetTriggerWPS function in D-Link COVR 1200, 1202, and 1203 router microprogramming systems is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands through the...
CVE-2022-38788
An issue was discovered in Nokia FastMile 5G Receiver 5G14-B 1.2104.00.0281. Bluetooth on the Nokia ODU uses outdated pairing mechanisms, allowing an attacker to passively intercept a paring handshake and after offline cracking retrieve the PIN and LTK long-term key...
CVE-2022-38788
An issue was discovered in Nokia FastMile 5G Receiver 5G14-B 1.2104.00.0281. Bluetooth on the Nokia ODU uses outdated pairing mechanisms, allowing an attacker to passively intercept a paring handshake and after offline cracking retrieve the PIN and LTK long-term key...
CVE-2022-24689
An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. It mishandles access control. This allows a remote attacker to access account information pages including personal data without being authenticated. The collected information includes the badge numbers that operate as user login...
DSK DSKNet 安全漏洞
DSK DSKNet is a data interaction program from DSK Japan. Their time and attendance data can be accessed interactively from any site connected to your network. A security vulnerability exists in DSK DSKNet versions 2.16.136.0 and 2.17.136.5, which stems from incorrectly handled access control, whi...
PT-2021-21971
Name of the Vulnerable Software and Affected Versions: Canon devices manufactured in 2012 through 2020, such as imageRUNNER ADVANCE iR-ADV C5250 Description: The issue allows remote attackers to modify an e-mail address setting when Catwalk Server is enabled for HTTP access, causing the device to...
The vulnerability of the rand() and random() functions in software certification for wireless network WPA devices, related to the lack of entropy in PIN selection, allows a hacker to trigger a service failure.
The vulnerability of the rand and random functions in software device certification for wireless networks with WPA security is related to a lack of entropy in the PIN selection process. Exploiting this vulnerability could allow an attacker to trigger a service failure...
LOGITEC CORPORATION LAN-WN/GR Security Vulnerabilities
A security vulnerability exists in the LOGITEC CORPORATION LAN-W300N / GR. An attacker can exploit the vulnerability to recover the PIN and access the network...
Askey AP5100W Dual SIG Security Feature Issue Vulnerability
The Askey AP5100W Dual SIG is a router from China-based Askey Electronics Technology Askey. The Askey AP5100W Dual SIG suffers from a security signature issue vulnerability that stems from a faulty random number selection in the Diffie-Hellman exchange. By capturing an attempted or even failed WP...
CVE-2020-27747
An issue was discovered in Click Studios Passwordstate 8.9 Build 8973.If the user of the system has assigned himself a PIN code for entering from a mobile device using the built-in generator 4 digits, a remote attacker has the opportunity to conduct a brute force attack on this PIN code. As resul...
CVE-2020-10830
An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Attackers can view notifications by entering many PINs in Lockdown mode. The Samsung ID is SVE-2019-16590 March 2020...
Apple macOS High Sierra Local Authentication Local Information Disclosure Vulnerability
Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Local Authentication is one of the local authentication components. A security vulnerability exists in the handling of smart card PINs in the Local Authentication component of Apple macOS High Sierra...