Lucene search
K

8 matches found

OSV
OSV
added 2022/10/12 9:15 p.m.1 views

DEBIAN-CVE-2021-36369

An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2...

7.5CVSS8.2AI score0.0021EPSS
Exploits0References1
NVD
NVD
added 2021/06/16 12:15 p.m.21 views

CVE-2021-32033

Protectimus SLIM NFC 70 10.01 devices allow a Time Traveler attack in which attackers can predict TOTP passwords in certain situations. The time value used by the device can be set independently from the used seed value for generating time-based one-time passwords, without authentication. Thus, a...

4.6CVSS0.00154EPSS
Exploits1References3
Prion
Prion
added 2021/06/16 12:15 p.m.14 views

Code injection

Protectimus SLIM NFC 70 10.01 devices allow a Time Traveler attack in which attackers can predict TOTP passwords in certain situations. The time value used by the device can be set independently from the used seed value for generating time-based one-time passwords, without authentication. Thus, a...

1.9CVSS4.7AI score0.00154EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2021/06/16 11:35 a.m.25 views

CVE-2021-32033

Protectimus SLIM NFC 70 10.01 devices allow a Time Traveler attack in which attackers can predict TOTP passwords in certain situations. The time value used by the device can be set independently from the used seed value for generating time-based one-time passwords, without authentication. Thus, a...

4.9AI score0.00154EPSS
Exploits1References3
The Hacker News
The Hacker News
added 2010/12/31 1:23 a.m.7 views

India to Increase Phone Banking Security Starting Next Month !

Starting with January 1st, 2011, Indian banks will require an additional security code in order to authorise phone banking transactions, according to regulatory guidelines issued by the Reserve Bank of India RBI. Known as one-time passwords OTP, these codes are part of what is known as two-factor...

7AI score
Exploits0
NVD
NVD
added 2006/03/30 11:2 a.m.5 views

CVE-2006-1538

The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus...

4.9CVSS6AI score0.00072EPSS
Exploits0References4
CVE
CVE
added 2006/03/30 11:0 a.m.45 views

CVE-2006-1538

The CVE-2006-1538 case concerns the Enova X-Wall ASIC, where a key is obtained via Microwire from a serial EEPROM that stores the key in cleartext. This enables local users with physical access to extract the key by reading/duplicating the EEPROM on a hardware token, or by sniffing the Microwire ...

4.9CVSS6AI score0.00072EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2006/03/30 11:0 a.m.11 views

CVE-2006-1538

The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus...

6AI score0.00072EPSS
Exploits0References4
Rows per page
Query Builder