RHEL 6 : openstack-swift-plugin-swift3 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - openstack-swift-plugin3: replay attack - date/date header unvalidated CVE-2015-8466 Note that Nessus has not tested...

RHEL 7 : ceph (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - ceph: cephx protocol is vulnerable to replay attack CVE-2018-1128 - A flaw was found in the way signature...

BIT-HUBBLE-RELAY-2024-28860

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Users of IPsec transparent encryption in Cilium may be vulnerable to cryptographic attacks that render the transparent encryption ineffective. In particular, Cilium is vulnerable to chosen plaintext, key...

CVE-2024-35048

An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password...

CVE-2024-35048

An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password...

CVE-2024-35048

An issue in SurveyKing v1.3.1 allows attackers to perform a session replay attack after a user has changed their password. This vulnerability is categorized as Insufficient Session Expiration (CWE-613). Practical consequences include the potential for an attacker to maintain unauthorized access d...

CVE-2024-35048

An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password...

RHEL 7 : ceph (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - ceph: cephx protocol is vulnerable to replay attack CVE-2018-1128 - ceph: user/tenant can obtain access...

CVE-2024-23592: Improperly Implemented Security Check for Standard

An authentication bypass vulnerability was reported in Lenovo devices with Synaptics fingerprint readers that could allow an attacker with physical access to replay fingerprints and bypass Windows Hello authentication...

CVE-2024-28860: Inadequate Encryption Strength

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Users of IPsec transparent encryption in Cilium may be vulnerable to cryptographic attacks that render the transparent encryption ineffective. In particular, Cilium is vulnerable to chosen plaintext, key...

Session Replay Attack

libosdp is vulnerable to a Session Replay Attack. The vulnerability is due to the lack of validation for RMACI messages in response to osdpSCRYPT, and the allowance of SCS14 on encrypted connections. Attackers with man-in-the-middle access can intercept RMACI replies during a session and replay...

CVE-2024-21495: Use of Insufficiently Random Values

Versions of the package github.com/greenpau/caddy-security before 1.0.42 are vulnerable to Insecure Randomness due to using an insecure random number generation library which could possibly be predicted via a brute-force search. Attackers could use the potentially predictable nonce value used for...

CVE-2023-6374

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 all serial numbers allows a remote unauthenticated attacker to bypass authentication by capture-replay attack and illegally login to the affected module. As a result, the remote...

PT-2024-1489 · Mitsubishi · Melsec Ws Series Ws0-Geth00200

Name of the Vulnerable Software and Affected Versions: MELSEC WS Series WS0-GETH00200 all serial numbers Description: The issue is related to an authentication bypass vulnerability in the MELSEC WS Series WS0-GETH00200, allowing a remote unauthenticated attacker to bypass the authentication proce...

Meross MSH30Q Security Vulnerability

The Meross MSH30Q is a smart Wi-Fi hub from Meross. A security vulnerability exists in the Meross MSH30Q version 4.5.23, which stems from vulnerability to replay attacks, where an attacker can record and replay previously captured communications to perform unauthorized commands or actions...

PT-2024-13387 · Meross · Meross Msh30Q

Name of the Vulnerable Software and Affected Versions: Meross MSH30Q version 4.5.23 Description: The radio frequency communication protocol used by the device is susceptible to replay attacks. This allows attackers to record and replay previously captured communication, enabling them to execute...

CVE-2023-46892: Authentication Bypass by Capture-replay

The radio frequency communication protocol being used by Meross MSH30Q 4.5.23 is vulnerable to replay attacks, allowing attackers to record and replay previously captured communication to execute unauthorized commands or actions e.g., thermostat's temperature...

SUSE-SU-2024:0129-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unixstreamreadgeneric on the socket th...

CVE-2023-50128

The remote keyless system of the Hozard alarm system alarmsystemen v1.0 sends an identical radio frequency signal for each request, which results in an attacker being able to conduct replay attacks to bring the alarm system to a disarmed state...

CVE-2023-50128

The CVE-2023-50128 entry concerns the Hozard alarm system (alarmsystemen) v1.0 remote keyless system. The vulnerability arises because the RF signal emitted for each request is identical, enabling an attacker to perform replay attacks and disarm the alarm. This is supported by multiple sources (e...