Lucene search
+L

6641 matches found

osv_debian
osv_debian
•added 2021/12/23 8:15 p.m.•9 views

DEBIAN-CVE-2021-44541

A vulnerability was found in Privoxy which was fixed in processencryptedrequestheaders by freeing header memory when failing to get the request destination...

7.5CVSS7.2AI score0.01439EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/12/23 8:15 p.m.•13 views

CVE-2021-44541

A vulnerability was found in Privoxy which was fixed in processencryptedrequestheaders by freeing header memory when failing to get the request destination...

7.5CVSS7AI score0.01439EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2021/12/23 5:21 p.m.•48 views

CVE-2021-45100

An unexpected, non-encrypted communication flaw in the Linux kernel's ksmbd Samba 3 protocol implementation subsystem was found in the way when user set flag SMB2GLOBALCAPENCRYPTION using the SMB 3.1.1 protocol. If during connection flag SMB2GLOBALCAPENCRYPTION being used by remote user, then for...

7.5CVSS1.2AI score0.00909EPSS
SaveExploits0References3
CNVD
CNVD
•added 2021/12/21 12:00 a.m.•28 views

Unspecified Vulnerability in Parallels Remote Application Server

Parallels Remote Application Server RAS is an application delivery and VDI Virtual Desktop Infrastructure solution from Parallels, Inc. A security vulnerability exists in Parallels Remote Application Server RAS that originated from a vulnerability that allows a local attacker to retrieve certain...

7.1CVSS6.8AI score0.00281EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/12/20 9:15 p.m.•14 views

CVE-2021-42138

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine...

6.5CVSS6.6AI score0.006EPSS
SaveExploits0References3
NVD
NVD
•added 2021/12/20 9:15 p.m.•25 views

CVE-2021-42138

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine...

7.2CVSS0.006EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/12/20 9:15 p.m.•10 views

CVE-2021-42138

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine...

7.2CVSS6.6AI score0.006EPSS
SaveExploits0References4
Prion
Prion
•added 2021/12/20 9:15 p.m.•22 views

Code injection

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine...

3.5CVSS6.5AI score0.006EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2021/12/20 8:19 p.m.•65 views

CVE-2021-42138

CVE-2021-42138 : The vulnerability affects SafeNet Agent for Windows Logon and allows a user on a protected machine to leverage weak entropy to access the encrypted credentials of any or all other users on that machine. The available documents do not provide exploit code, specific affected versio...

7.2CVSS6.4AI score0.006EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2021/12/20 8:19 p.m.•35 views

CVE-2021-42138

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine...

7.2CVSS7.2AI score0.006EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/12/20 12:00 a.m.•4 views

PT-2021-23556

Name of the Vulnerable Software and Affected Versions SafeNet Agent for Windows Logon affected versions not specified Description A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine...

7.2CVSS0.006EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/20 12:00 a.m.•9 views

CVE-2021-42138: Insufficient Entropy

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine...

7.2CVSS5.8AI score0.006EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/12/20 12:00 a.m.•17 views

SafeNet Agent for Windows 安全特征问题漏洞

SafeNet Agent for Windows is the SafeNet Authentication Service Agent for Windows Logon WLA 2.3.0. A security vulnerability exists in SafeNet Agent for Windows, which arises from a user of a machine protected by SafeNet Agent for Windows Logon who can leverage weak entropy to access the encrypted...

7.2CVSS6.5AI score0.006EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2021/12/17 9:00 a.m.•11 views

CVE-2020-8968

Parallels Remote Application Server RAS allows a local attacker to retrieve certain profile password in clear text format by uploading a previously stored cyphered file by Parallels RAS. The confidentiality, availability and integrity of the information of the user could be compromised if an...

7.1CVSS7.1AI score0.00281EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2021/12/17 12:00 a.m.•18 views

Parallels Remote Application Server 安全漏洞

Parallels Remote Application Server RAS is an application delivery and VDI Virtual Desktop Infrastructure solution from Parallels, Inc. A security vulnerability exists in Parallels Remote Application Server RAS that originated from a vulnerability that allows a local attacker to retrieve certain...

7.1CVSS5.6AI score0.00281EPSS
SaveExploits0References2
Lenovo
Lenovo
•added 2021/12/14 5:00 p.m.•22 views

TLB Poisoning Attacks on AMD Secure Encrypted Virtualization (SEV) - Lenovo Support US

No description provided...

8.4CVSS7.3AI score0.00247EPSS
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2021/12/13 12:00 a.m.•29 views

UBUNTU-CVE-2021-4093

A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State SEV-ES. A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction for example, outs or ins using the exit...

8.8CVSS6.8AI score0.00419EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2021/12/10 2:57 p.m.•63 views

CVE-2021-4093

A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State SEV-ES. A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction for example, outs or ins using the exit...

8.8CVSS0.6AI score0.00419EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2021/12/10 12:00 a.m.•18 views

Privoxy 输入验证错误漏洞

Privoxy is a proxy server from the Privoxy team in the USA that does not cache web pages and comes with its own filtering features. It has advanced filtering features to enhance privacy, modify web data and HTTP headers, control access and remove advertisements and other annoying Internet...

7.5CVSS7.2AI score0.01439EPSS
SaveExploits0References5
FreeBSD
FreeBSD
•added 2021/12/09 12:00 a.m.•33 views

Privoxy -- Multiple vulnerabilities (memory leak, XSS)

Privoxy reports: cgierrornotemplate: Encode the template name to prevent XSS cross-site scripting when Privoxy is configured to servce the user-manual itself. Commit 0e668e9409c. OVE-20211102-0001. CVE-2021-44543. Reported by: Artem Ivanov geturlspecparam: Free memory of compiled pattern spec...

7.5CVSS1.1AI score0.01439EPSS
SaveExploits0References1
Rows per page
Query Builder