6572 matches found
CVE-2019-18199
An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, and because of password-based authentication, they are vulnerable to replay attacks...
Design/Logic Flaw
An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, and because of password-based authentication, they are vulnerable to replay attacks...
CVE-2019-18199
The CVE-2019-18199 entry concerns Fujitsu Wireless Keyboard Set LX390 GK381. The issue stems from insufficient protection of 2.4 GHz communications and password-based authentication, enabling replay attacks. Affected hardware is the Fujitsu Wireless Keyboard Set LX390 GK381; the vulnerability det...
CVE-2019-18199
An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, and because of password-based authentication, they are vulnerable to replay attacks...
PT-2019-15268
Name of the Vulnerable Software and Affected Versions Fujitsu Wireless Keyboard Set LX390 GK381 devices affected versions not specified Description An issue was discovered due to the lack of proper encryption of 2.4 GHz communication and the use of password-based authentication, making the device...
CVE-2019-18199: Cleartext Transmission of Sensitive Information
An issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack of proper encryption of 2.4 GHz communication, and because of password-based authentication, they are vulnerable to replay attacks...
NewStart CGSL CORE 5.04 / MAIN 5.04 : httpd Vulnerability (NS-SA-2019-0182)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has httpd packages installed that are affected by a vulnerability: - In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated...
CVE-2018-1312
In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed...
CVE-2018-12384
A flaw was found in the way NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. A man-in-the-middle attacker could use this flaw in a passive replay attack...
Schneider Electric Modicon M580 Has Denial of Service Vulnerability
Schneider Electric Modicon M580 PLC belongs to Schneider and is a programmable controller PLC for complex equipment and medium-sized projects. A denial of service vulnerability exists in the Schneider Electric Modicon M580, which can be exploited by an attacker to directly utilize packet replay...
College-Management-System 1.2 - Authentication Bypass
College-Management-System 1.2 - Authentication Bypass Exploit Title: College-Management-System 1.2 - Authentication Bypass Author: Cakes Discovery Date: 2019-09-14 Vendor Homepage: https://github.com/ajinkyabodade/College-Management-System Software Link:...
CVE-2019-12587
The CVE-2019-12587 entry concerns the EAP peer implementation in Espressif ESP-IDF 2.0.0–4.0.0 and ESP8266_NONOS_SDK 2.2.0–3.1.0, where a zero PMK can be installed after any EAP authentication, enabling attackers in radio range to replay, decrypt, or spoof frames via a rogue AP. Red Hat and OSV r...
CVE-2019-12587
The EAP peer implementation in Espressif ESP-IDF 2.0.0 through 4.0.0 and ESP8266NONOSSDK 2.2.0 through 3.1.0 allows the installation of a zero Pairwise Master Key PMK after the completion of any EAP authentication method, which allows attackers in radio range to replay, decrypt, or spoof frames v...
CVE-2018-14062
The COSPAS-SARSAT protocol allows remote attackers to forge messages, replay encrypted messages, conduct denial of service attacks, and send private messages unrelated to distress alerts via a crafted 406 MHz digital signal...
CVE-2018-14062: Undefined Security Weakness
The COSPAS-SARSAT protocol allows remote attackers to forge messages, replay encrypted messages, conduct denial of service attacks, and send private messages unrelated to distress alerts via a crafted 406 MHz digital signal...
PT-2019-9021
Name of the Vulnerable Software and Affected Versions COSPAS-SARSAT protocol affected versions not specified Description The issue allows remote attackers to forge messages, replay encrypted messages, conduct denial of service attacks, and send private messages via a crafted 406 MHz digital signa...
NewStart CGSL MAIN 4.05 : nss Vulnerability (NS-SA-2019-0131)
The remote NewStart CGSL host, running version MAIN 4.05, has nss packages installed that are affected by a vulnerability: - A flaw was found in the way NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random. A man-in-the-middle attacker could use this fla...
CVE-2018-20957
The Bluetooth Low Energy BLE subsystem on Tapplock devices before 2018-06-12 allows replay attacks...