Lucene search
+L

103 matches found

Cvelist
Cvelist
added 2024/03/06 4:28 p.m.26 views

CVE-2024-20301

A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...

6.2CVSS6.5AI score0.00266EPSS
Exploits0References1
Citrix
Citrix
added 2024/02/20 12:0 a.m.12 views

PVS- 2203 CU2 || slow performance in Windows

Customer is seeing slow Windows logon and Windows is very sluggish after logon...

7.2AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/12/18 12:0 a.m.18 views

Cisco Duo Authentication For Windows Logon And RDP Installed (Windows)

Binary data ciscoduowinlogoninstalled.nbin...

7.3AI score
Exploits0References1
NVD
NVD
added 2023/04/05 7:15 p.m.18 views

CVE-2023-20123

A vulnerability in the offline access mode of Cisco Duo Two-Factor Authentication for macOS and Duo Authentication for Windows Logon and RDP could allow an unauthenticated, physical attacker to replay valid user session credentials and gain unauthorized access to an affected macOS or Windows...

6.3CVSS6.5AI score0.00247EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/04/05 12:0 a.m.11 views

CVE-2023-20123 Cisco Duo Authentication for macOS and Duo Authentication for Windows Logon Offline Credentials Replay Vulnerability

A vulnerability in the offline access mode of Cisco Duo Two-Factor Authentication for macOS and Duo Authentication for Windows Logon and RDP could allow an unauthenticated, physical attacker to replay valid user session credentials and gain unauthorized access to an affected macOS or Windows...

6.3CVSS7.5AI score0.00247EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/04/05 12:0 a.m.8 views

Cisco Duo 安全漏洞

Cisco Duo is a fully managed solution from Cisco, Inc. It provides secure access to your applications and data. A security vulnerability exists in Cisco Duo Two-Factor Authentication for macOS and Duo Authentication for Windows Logon and RDP, which stems from session credentials that have not...

6.3CVSS5.2AI score0.00247EPSS
Exploits0References3
Cvelist
Cvelist
added 2023/04/05 12:0 a.m.23 views

CVE-2023-20123 Cisco Duo Authentication for macOS and Duo Authentication for Windows Logon Offline Credentials Replay Vulnerability

A vulnerability in the offline access mode of Cisco Duo Two-Factor Authentication for macOS and Duo Authentication for Windows Logon and RDP could allow an unauthenticated, physical attacker to replay valid user session credentials and gain unauthorized access to an affected macOS or Windows...

6.3CVSS6.8AI score0.00247EPSS
Exploits0References1
F5 Networks
F5 Networks
added 2022/12/28 4:53 a.m.37 views

K10015187: BIG-IP APM client for Windows vulnerability CVE-2018-5547

Security Advisory Description Windows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by default uses Legacy logon mode which uses a SYSTEM account to establish network access. This feature displays a certificate user interface dialog box which contains the...

7.8CVSS7.5AI score0.00262EPSS
Exploits0Affected Software2
Citrix
Citrix
added 2022/11/22 12:0 a.m.8 views

Windows Auto Logon Issue with latest Windows 10,11 Updates

TheAlways-On VPN before Windows Logonformally Always On service feature enables users to establish a machine level VPN tunnel even before a user logs on to a Windows system. The tunnel remains active until the machine shuts down. After the user logs on, the machine-level VPN tunnel is taken over ...

7.2AI score
Exploits0
NVD
NVD
added 2022/02/24 7:15 p.m.20 views

CVE-2020-14480

Due to usernames/passwords being stored in plaintext in Random Access Memory RAM, a local, authenticated attacker could gain access to certain credentials, including Windows Logon credentials...

5.5CVSS0.00273EPSS
Exploits0References1
Prion
Prion
added 2022/02/24 7:15 p.m.19 views

Default credentials

Due to usernames/passwords being stored in plaintext in Random Access Memory RAM, a local, authenticated attacker could gain access to certain credentials, including Windows Logon credentials...

2.1CVSS5.9AI score0.00273EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/02/24 6:27 p.m.7 views

CVE-2020-14480

Due to usernames/passwords being stored in plaintext in Random Access Memory RAM, a local, authenticated attacker could gain access to certain credentials, including Windows Logon credentials...

5.4AI score0.00273EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/02/24 6:27 p.m.29 views

CVE-2020-14480

Due to usernames/passwords being stored in plaintext in Random Access Memory RAM, a local, authenticated attacker could gain access to certain credentials, including Windows Logon credentials...

5.4AI score0.00273EPSS
Exploits0References1
CVE
CVE
added 2022/02/24 6:27 p.m.66 views

CVE-2020-14480

CVE-2020-14480 affects Rockwell Automation’s FactoryTalk View SE . The vulnerability stems from usernames/passwords being stored in plaintext in RAM, enabling a local, authenticated attacker to access credentials, including Windows logon credentials. Affected products include FactoryTalk View SE ...

5.5CVSS5.4AI score0.00273EPSS
Exploits0References1Affected Software1
Kitploit
Kitploit
added 2022/02/16 11:30 a.m.32 views

FakeLogonScreen - Fake Windows Logon Screen To Steal Passwords

FakeLogonScreen is a utility to fake the Windows logon screen in order to obtain the user's password. The password entered is validated against the Active Directory or local machine to make sure it is correct and is then displayed to the console or saved to disk. It can either be executed by simp...

7.1AI score
Exploits0References3
OSV
OSV
added 2021/12/20 9:15 p.m.3 views

CVE-2021-42138

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine...

6.5CVSS6.6AI score0.00581EPSS
Exploits0References3
CVE
CVE
added 2021/12/20 8:19 p.m.47 views

CVE-2021-42138

CVE-2021-42138 : The vulnerability affects SafeNet Agent for Windows Logon and allows a user on a protected machine to leverage weak entropy to access the encrypted credentials of any or all other users on that machine. The available documents do not provide exploit code, specific affected versio...

7.2CVSS6.4AI score0.00581EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2021/12/20 8:19 p.m.24 views

CVE-2021-42138

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine...

7.2CVSS7.2AI score0.00581EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/12/20 12:0 a.m.5 views

SafeNet Agent for Windows 安全特征问题漏洞

SafeNet Agent for Windows is the SafeNet Authentication Service Agent for Windows Logon WLA 2.3.0. A security vulnerability exists in SafeNet Agent for Windows, which arises from a user of a machine protected by SafeNet Agent for Windows Logon who can leverage weak entropy to access the encrypted...

7.2CVSS6.5AI score0.00581EPSS
Exploits0References4
NVD
NVD
added 2021/06/10 4:15 p.m.12 views

CVE-2021-34546

An unauthenticated attacker with physical access to a computer with NetSetMan Pro before 5.0 installed, that has the pre-logon profile switch button within the Windows logon screen enabled, is able to drop to an administrative shell and execute arbitrary commands as SYSTEM via the "save log to...

7.2CVSS0.00693EPSS
Exploits3References5
Rows per page
Query Builder