Lucene search
+L

1707 matches found

OSV
OSV
β€’added 2018/10/05 2:29 p.m.β€’15 views

CVE-2018-0434

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...

7.4CVSS5.8AI score0.00832EPSS
SaveExploits0References2
Prion
Prion
β€’added 2018/10/05 2:29 p.m.β€’24 views

Design/Logic Flaw

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...

5.8CVSS7.4AI score0.00832EPSS
SaveExploits0References2Affected Software4
Cvelist
Cvelist
β€’added 2018/10/05 2:00 p.m.β€’29 views

CVE-2018-0434 Cisco SD-WAN Solution Certificate Validation Vulnerability

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...

7.4AI score0.00832EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
β€’added 2018/10/05 2:00 p.m.β€’51 views

CVE-2018-0434 Cisco SD-WAN Solution Certificate Validation Vulnerability

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...

6.7AI score0.00832EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
β€’added 2018/10/05 12:00 a.m.β€’3 views

CVE-2018-0434: Improper Certificate Validation

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...

7.4CVSS7.2AI score0.00832EPSS
SaveExploits0References3
Filippo.io
Filippo.io
β€’added 2018/09/10 4:25 a.m.β€’25 views

Touch-to-operate password-store with YubiKey 4

There are dozens of tutorials on how to fight GnuPG to use YubiKeys for everything, but my favorite overlooked feature of the YubiKey 4 is "touch to operate", where each cryptographic operation takes a physical touch of the gold surface. That pairs particularly well with password-store, a PGP...

6.9AI score
SaveExploits0
Filippo.io
Filippo.io
β€’added 2018/09/10 4:25 a.m.β€’70 views

Touch-to-operate password-store with YubiKey 4

There are dozens of tutorials on how to fight GnuPG to use YubiKeys for everything, but my favorite overlooked feature of the YubiKey 4 is "touch to operate", where each cryptographic operation takes a physical touch of the gold surface. That pairs particularly well with password-store, a PGP...

6.9AI score
SaveExploits0
CNVD
CNVD
β€’added 2018/09/10 12:00 a.m.β€’16 views

Cisco SD-WAN Solution Certificate Validation Vulnerability

Cisco vEdge 100 Series Routers and so on are the products of the United States Cisco Cisco company. cisco vEdge 100 Series Routers is a 100 series router products. vManage Network Management System is a set of network management system. SD- WAN Solution is a set of network expansion solutions...

7.4CVSS7.6AI score0.00832EPSS
SaveExploits0References1
Cisco
Cisco
β€’added 2018/09/05 4:00 p.m.β€’64 views

Cisco SD-WAN Solution Certificate Validation Vulnerability

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...

8.1CVSS1.3AI score0.00832EPSS
SaveExploits0References1
Citrix
Citrix
β€’added 2018/08/16 12:00 a.m.β€’22 views

Touch Screen Keyboard / On Screen Keyboard Minimizes On Every Key Pressed On it.

Touch screen keyboard / On-screen keyboard minimizes on every key pressed on it only on published application. It works fine for published Desktop...

7.2AI score
SaveExploits0
CNVD
CNVD
β€’added 2018/07/26 12:00 a.m.β€’13 views

Cisco SD-WAN Zero Touch Provisioning Denial of Service Vulnerability

Cisco vBond Orchestrator Software, vManage Network Management Software, and Smart Controller Software are all products of Cisco, Inc. Cisco vBond Orchestrator Software, vManage Network Management Software and Smart Controller Software are all Cisco products. cisco vBond Orchestrator Software and...

7.8CVSS7.6AI score0.01987EPSS
SaveExploits0References1
CNVD
CNVD
β€’added 2018/07/26 12:00 a.m.β€’11 views

Cisco SD-WAN Zero Touch Provisioning Local Command Injection Vulnerability

Cisco vEdge 100 Series Routers and others are different series of router products from Cisco. the SD-WAN Solution is a suite of network extension solutions that run on it. A command injection vulnerability exists in the Zero Touch Provisioning ZTP subsystem in Cisco SD-WAN Solution versions prior...

7.8CVSS7.9AI score0.00471EPSS
SaveExploits0References1
NVD
NVD
β€’added 2018/07/18 11:29 p.m.β€’27 views

CVE-2018-0346

A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to incorrect bounds checks for certain values in packets that are sent to...

7.8CVSS7.8AI score0.01987EPSS
SaveExploits0References2
OSV
OSV
β€’added 2018/07/18 11:29 p.m.β€’14 views

CVE-2018-0346

A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to incorrect bounds checks for certain values in packets that are sent to...

7.5CVSS6.1AI score0.01987EPSS
SaveExploits0References2
Prion
Prion
β€’added 2018/07/18 11:29 p.m.β€’23 views

Input validation

A vulnerability in the Zero Touch Provisioning ZTP subsystem of the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this...

7.2CVSS7.6AI score0.00471EPSS
SaveExploits0References2Affected Software7
OSV
OSV
β€’added 2018/07/18 11:29 p.m.β€’17 views

CVE-2018-0347

A vulnerability in the Zero Touch Provisioning ZTP subsystem of the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this...

7.8CVSS6AI score0.00471EPSS
SaveExploits0References2
Cvelist
Cvelist
β€’added 2018/07/18 11:00 p.m.β€’41 views

CVE-2018-0346

A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to incorrect bounds checks for certain values in packets that are sent to...

7.8AI score0.01987EPSS
SaveExploits0References2
Cisco
Cisco
β€’added 2018/07/18 4:00 p.m.β€’60 views

Cisco SD-WAN Solution Zero Touch Provisioning Denial of Service Vulnerability

A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to incorrect bounds checks for certain values in packets that are sent to...

7.5CVSS2.3AI score0.01987EPSS
SaveExploits0References1
NVD
NVD
β€’added 2018/07/06 5:29 p.m.β€’29 views

CVE-2018-5892

The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear...

7.5CVSS7.6AI score0.00847EPSS
SaveExploits0References1
Prion
Prion
β€’added 2018/07/06 5:29 p.m.β€’37 views

Code injection

The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear...

5CVSS7.7AI score0.00847EPSS
SaveExploits0References1
Rows per page
Query Builder