Lucene search
+L

674 matches found

CNNVD
CNNVD
added 2024/03/26 12:00 a.m.18 views

Eclipse ThreadX NetX Duo 输入验证错误漏洞

Eclipse ThreadX NetX Duo is an IPv4 and IPv6 dual network stack for Eclipse ThreadX open source. A security vulnerability exists in Eclipse ThreadX NetX Duo versions prior to 6.4.0, which stems from a vulnerability that allows attackers to cause a buffer overflow via the function...

9.8CVSS7AI score0.00902EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2024/03/14 12:00 a.m.12 views

The vulnerability of the cloud platform for protecting applications from unauthorized users and Cisco Duo devices for Windows lies in the lack of protection for service data, allowing a intruder to disclose the protected information.

The vulnerability of the cloud platform for protecting applications from unauthorized users and Cisco Duo devices for Windows is related to the lack of protection for sensitive data. Exploiting this vulnerability could allow a hacker to disclose the protected information...

4.4CVSS5.5AI score0.00109EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/12 12:00 a.m.15 views

The vulnerability of the cloud platform for protecting applications from unauthorized users and Cisco Duo devices for Windows, related to authentication procedures that allow a intruder to gain access to the vulnerable device.

The vulnerability of the cloud platform for protecting applications from unauthorized users and Cisco Duo devices for Windows is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a hacker to gain access to the vulnerable device...

6.5CVSS6.4AI score0.00266EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2024/03/12 12:00 a.m.12 views

Cisco Duo Authentication Bypass Vulnerability

Cisco Duo is a fully managed solution from Cisco, Inc. Provides secure access to your applications and data. An authentication bypass vulnerability exists in Cisco Duo that stems from the inability to disable locally created trusted sessions after an affected device reboots, which can be exploite...

6.2CVSS6.9AI score0.00266EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/06 5:15 p.m.7 views

CVE-2024-20292

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

5.5CVSS5.8AI score0.00109EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/06 5:15 p.m.26 views

CVE-2024-20301

A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...

6.2CVSS6.3AI score0.00266EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/06 5:15 p.m.8 views

CVE-2024-20301

A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...

6.2CVSS5.8AI score0.00266EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/06 5:15 p.m.43 views

Authentication flaw

A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...

4CVSS7.1AI score0.00266EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/06 5:15 p.m.24 views

Input validation

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

1.4CVSS6.4AI score0.00109EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/06 4:32 p.m.31 views

CVE-2024-20292

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

4.4CVSS4.8AI score0.00109EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/06 4:32 p.m.15 views

CVE-2024-20292

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

4.4CVSS6.2AI score0.00109EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/06 4:32 p.m.91 views

CVE-2024-20292

Cisco Duo Authentication for Windows Logon and RDP contains a local, authenticated-information disclosure vulnerability in its logging component. The issue stems from improper storage of an unencrypted registry key in logs, allowing a local attacker to read sensitive data in clear text on the aff...

5.5CVSS4.5AI score0.00109EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/06 4:28 p.m.40 views

CVE-2024-20301

A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...

6.2CVSS6.5AI score0.00266EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/06 4:28 p.m.94 views

CVE-2024-20301

Cisco Duo Authentication for Windows Logon and RDP is affected by an authentication bypass vulnerability. The issue stems from failure to invalidate locally created trusted sessions after reboot, allowing an authenticated, physical attacker to bypass secondary authentication and access the Window...

6.2CVSS6.3AI score0.00266EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/06 4:28 p.m.22 views

CVE-2024-20301

A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...

6.2CVSS6.9AI score0.00266EPSS
SaveExploits0References1
Cisco
Cisco
added 2024/03/06 4:00 p.m.58 views

Cisco Duo Authentication for Windows Logon and RDP Information Disclosure Vulnerability

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

4.4CVSS4.7AI score0.00109EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/06 12:00 a.m.11 views

Cisco Duo 安全漏洞

Cisco Duo is a fully managed solution from Cisco, Inc. Provides secure access to your applications and data. An authentication bypass vulnerability exists in Cisco Duo that stems from the inability to disable locally created trusted sessions after an affected device reboots, which can be exploite...

6.2CVSS6.9AI score0.00266EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/06 12:00 a.m.13 views

Cisco Duo Security Vulnerability

Cisco Duo is a fully managed solution from Cisco, Inc. providing secure access to your applications and data. A security vulnerability exists in Cisco Duo that stems from a flaw in the logging component that could allow an authenticated, local attacker to view sensitive information in plaintext o...

5.5CVSS6.1AI score0.00109EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:00 a.m.20 views

The vulnerabilities of the My Cloud OS, cloud storage services My Cloud Home and My Cloud Home Duo, as well as SanDisk iBI, are related to insufficiently checked incoming requests. This allows attackers to perform SSRF attacks.

The vulnerabilities of the My Cloud OS for network storage devices, as well as the My Cloud Home and My Cloud Home Duo cloud storage services, and the SanDisk iBeacon device, are related to insufficiently checked incoming requests. Exploiting these vulnerabilities can allow attackers to execute...

5.5CVSS6.3AI score0.00241EPSS
SaveExploits0References3Affected Software13
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:00 a.m.33 views

The vulnerabilities of the operating systems of network storage devices My Cloud OS, cloud storage services My Cloud Home, and My Cloud Home Duo, as well as SanDisk iBI, are related to uncontrolled resource consumption. This allows attackers to cause service interruptions.

The vulnerabilities of the My Cloud OS, My Cloud Home, and My Cloud Home Duo network storage systems, as well as the SanDisk iBI device, are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow an attacker to cause service interruptions...

6.1CVSS5.8AI score0.00822EPSS
SaveExploits0References3Affected Software13
Rows per page
Query Builder