Lucene search
+L

968 matches found

OSV
OSV
•added 2020/11/27 5:23 a.m.•13 views

OPENSUSE-SU-2020:2059-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: Security issue fixed: - CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass bsc1150934. Non-security issues fixed: - Enable SAE support jscSLE-14992. - Limit P2PDEVICE name to appropriate ifname size. - Fix wicked wlan...

8.1CVSS6.7AI score0.04989EPSS
SaveExploits1References38
OSV
OSV
•added 2020/09/30 6:15 p.m.•10 views

CVE-2019-18989

A partial authentication bypass vulnerability exists on Mediatek MT7620N 1.06 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sent back as an encrypted frame, which wou...

5.4CVSS6.3AI score0.00751EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2020/09/30 6:15 p.m.•5 views

CVE-2019-18991

A partial authentication bypass vulnerability exists on Atheros AR9132 3.60AMX.8, AR9283 1.85, and AR9285 1.0.0.12NA devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sen...

6.1CVSS6AI score0.0046EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/09/24 5:53 p.m.•48 views

CVE-2020-3429 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability

A vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause denial of service DoS condition on an affected device. The vulnerability is due to incorrect pack...

7.4CVSS6.7AI score0.00726EPSS
SaveExploits0References1
Cisco
Cisco
•added 2020/09/24 4:00 p.m.•60 views

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability

A vulnerability in the WPA2 and WPA3 security implementation of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause denial of service DoS condition on an affected device. The vulnerability is due to incorrect pack...

7.4CVSS6.9AI score0.00726EPSS
SaveExploits0References1
NVD
NVD
•added 2020/09/08 10:15 a.m.•27 views

CVE-2020-3667

u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired...

10CVSS9.6AI score0.01071EPSS
SaveExploits0References1
Prion
Prion
•added 2020/09/08 10:15 a.m.•30 views

Buffer overflow

u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired...

10CVSS9.4AI score0.01071EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/09/08 9:31 a.m.•43 views

CVE-2020-3667

u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired...

9.6AI score0.01071EPSS
SaveExploits0References1
CVE
CVE
•added 2020/09/08 9:31 a.m.•60 views

CVE-2020-3667

CVE-2020-3667 : Buffer overflow in MIC calculation for WPA due to copying data into a buffer without validating its length, affecting Qualcomm Snapdragon platforms (e.g., Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, etc.). Root cause is unchecked buffer length dur...

10CVSS9.4AI score0.01071EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
•added 2020/09/04 9:30 p.m.•99 views

H4Rpy - Automated WPA/WPA2 PSK Attack Tool

h4rpy is an automated WPA/WPA2 PSK attack tool, wrapper of aircrack-ng framework. h4rpy provides clean interface for automated cracking of WPA/WPA2 PSK networks. h4rpy enables monitor mode on selected wireless interface, scans the wireless space for access points, tries to capture WPA/WPA2 4-way...

7.2AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/08/17 12:00 a.m.•26 views

Debian: Security Advisory (DLA-2318-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.15193EPSS
SaveExploits4References4
Tenable Nessus
Tenable Nessus
•added 2020/08/10 12:00 a.m.•40 views

Debian DLA-2318-1 : wpa security update

The following CVEs have been reported against src:wpa. CVE-2019-10064 hostapd before 2.6, in EAP mode, makes calls to the rand and random standard library functions without any preceding srand or srandom call, which results in inappropriate use of deterministic values. This was fixed in conjuncti...

7.8CVSS6.7AI score0.15193EPSS
SaveExploits4References5
OSV
OSV
•added 2020/08/09 12:00 a.m.•35 views

DLA-2318-1 wpa - security update

Bulletin has no description...

7.8CVSS7.8AI score0.15193EPSS
SaveExploits4
Debian
Debian
•added 2020/08/08 8:43 p.m.•133 views

[SECURITY] [DLA 2318-1] wpa security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2318-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta August 09, 2020 https://wiki.debian.org/LTS -...

7.8CVSS8.3AI score0.15193EPSS
SaveExploits4
OSV
OSV
•added 2020/07/06 10:15 p.m.•12 views

CVE-2020-9395

An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based buffer overflow exists in the client code that takes care of WPA2's 4-way-handshake via a malformed EAPOL-Key packet with a long keydata buffer...

8CVSS6.1AI score0.00778EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2020/06/17 12:00 a.m.•77 views

EulerOS 2.0 SP2 : kernel (EulerOS-SA-2020-1674)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the...

10CVSS8.2AI score0.72105EPSS
SaveExploits52References79
NVD
NVD
•added 2020/05/14 5:15 p.m.•29 views

CVE-2019-13023

An issue was discovered in all versions of Bond JetSelect. Within the JetSelect Application, the web interface hides RADIUS secrets, WPA passwords, and SNMP strings from 'non administrative' users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to chan...

6.5CVSS6.4AI score0.00828EPSS
SaveExploits0References1
Prion
Prion
•added 2020/05/14 5:15 p.m.•26 views

Hardcoded credentials

An issue was discovered in all versions of Bond JetSelect. Within the JetSelect Application, the web interface hides RADIUS secrets, WPA passwords, and SNMP strings from 'non administrative' users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to chan...

4CVSS6.4AI score0.00828EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2020/05/14 4:20 p.m.•40 views

CVE-2019-13023

An issue was discovered in all versions of Bond JetSelect. Within the JetSelect Application, the web interface hides RADIUS secrets, WPA passwords, and SNMP strings from 'non administrative' users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to chan...

6.4AI score0.00828EPSS
SaveExploits0References1
OSV
OSV
•added 2020/03/24 7:15 p.m.•15 views

CVE-2019-20575

An issue was discovered on Samsung mobile devices with P9.0 software. The WPA3 handshake feature allows a downgrade or dictionary attack. The Samsung ID is SVE-2019-14204 August 2019...

5.4CVSS6.1AI score0.00121EPSS
SaveExploits0References1
Rows per page
Query Builder