Lucene search
+L

1227 matches found

RedhatCVE
RedhatCVE
added 2021/05/19 12:26 a.m.84 views

CVE-2020-26141

A vulnerability was found in Linux kernel's WiFi implementation. An attacker within wireless range can inject a control packet fragment where the kernel does not verify the Message Integrity Check authenticity of fragmented TKIP frames. Mitigation Mitigation for this issue is either not available...

6.5CVSS1.5AI score0.03072EPSS
SaveExploits0References4
OSV
OSV
added 2021/05/11 8:15 p.m.10 views

CVE-2020-26141

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check authenticity of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the...

6.5CVSS8.3AI score
SaveExploits0References6
Prion
Prion
added 2021/05/11 8:15 p.m.38 views

Information disclosure

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check authenticity of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the...

3.3CVSS7AI score0.03072EPSS
SaveExploits0References6Affected Software49
UbuntuCve
UbuntuCve
added 2021/05/11 6:00 p.m.45 views

CVE-2020-26141

An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message Integrity Check authenticity of fragmented TKIP frames. An adversary can abuse this to inject and possibly decrypt packets in WPA or WPA2 networks that support the...

6.5CVSS7AI score0.03072EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2021/05/07 12:00 a.m.19 views

PT-2021-5203 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to a lack of integrity check in Microsoft SharePoint Server packages. This can be exploited by a remote attacker to gain unauthorized access to...

6.3CVSS6AI score0.06086EPSS
SaveExploits0References8
OSV
OSV
added 2021/04/26 1:15 a.m.6 views

CVE-2021-20709

Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker with an administrative privilege to execute arbitrary OS commands by...

7.2CVSS7.4AI score0.0066EPSS
SaveExploits0References2
NVD
NVD
added 2021/04/26 1:15 a.m.28 views

CVE-2021-20709

Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker with an administrative privilege to execute arbitrary OS commands by...

9CVSS0.0066EPSS
SaveExploits0References2
Prion
Prion
added 2021/04/26 1:15 a.m.19 views

Input validation

Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker with an administrative privilege to execute arbitrary OS commands by...

9CVSS7.8AI score0.0066EPSS
SaveExploits0References2Affected Software3
ICS
ICS
added 2021/04/13 12:00 a.m.56 views

Schneider Electric SoMachine Basic

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: SoMachine Basic Vulnerability: Improper Restriction of XML External Entity Reference 2. RISK EVALUATION Successful exploitation of this vulnerability may result in...

7.5CVSS7.8AI score0.0156EPSS
SaveExploits0References4
OSV
OSV
added 2021/04/01 2:15 p.m.10 views

CVE-2021-28545

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are missing support for an integrity check. An unauthenticated attacker would have the ability to completely manipulate data in a certified PDF without invalidating the origin...

8.1CVSS5.8AI score0.02267EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/01 2:15 p.m.27 views

CVE-2021-28545

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are missing support for an integrity check. An unauthenticated attacker would have the ability to completely manipulate data in a certified PDF without invalidating the origin...

8.1CVSS0.02267EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/01 2:15 p.m.29 views

CVE-2021-28546

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are missing support for an integrity check. An unauthenticated attacker could leverage this vulnerability to modify content in a certified PDF without invalidating the...

6.5CVSS0.01421EPSS
SaveExploits0References1
Prion
Prion
added 2021/04/01 2:15 p.m.27 views

Design/Logic Flaw

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are missing support for an integrity check. An unauthenticated attacker would have the ability to completely manipulate data in a certified PDF without invalidating the origin...

5.8CVSS8.1AI score0.02267EPSS
SaveExploits0References1Affected Software4
Prion
Prion
added 2021/04/01 2:15 p.m.27 views

Design/Logic Flaw

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are missing support for an integrity check. An unauthenticated attacker could leverage this vulnerability to modify content in a certified PDF without invalidating the...

4.3CVSS7.2AI score0.01421EPSS
SaveExploits0References1Affected Software4
Cvelist
Cvelist
added 2021/04/01 1:35 p.m.33 views

CVE-2021-28546 Acrobat Reader DC Missing Support for Integrity Check

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are missing support for an integrity check. An unauthenticated attacker could leverage this vulnerability to modify content in a certified PDF without invalidating the...

6.5CVSS7.3AI score0.01421EPSS
SaveExploits0References1
CVE
CVE
added 2021/04/01 1:35 p.m.89 views

CVE-2021-28546

CVE-2021-28546 affects Adobe Acrobat Reader DC. Affected builds (e.g., 2020.013.20074 and earlier; 2020.001.30018 and earlier; 2017.011.30188 and earlier) lack support for an integrity check, allowing an unauthenticated attacker to modify content in a certified PDF without invalidating the certif...

6.5CVSS6.8AI score0.01421EPSS
SaveExploits0References1Affected Software4
Cvelist
Cvelist
added 2021/04/01 1:35 p.m.30 views

CVE-2021-28545 Acrobat Reader DC Missing Support for Integrity Check

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are missing support for an integrity check. An unauthenticated attacker would have the ability to completely manipulate data in a certified PDF without invalidating the origin...

8.1CVSS8.3AI score0.02267EPSS
SaveExploits0References1
CVE
CVE
added 2021/04/01 1:35 p.m.103 views

CVE-2021-28545

CVE-2021-28545 affects Adobe Acrobat Reader DC (versions up to 2020.013.20074, 2020.001.30018, 2017.011.30188 and earlier) where missing support for an integrity check lets an unauthenticated attacker manipulate data in a certified PDF without invalidating the signature; exploitation requires use...

8.1CVSS7.8AI score0.02267EPSS
SaveExploits0References1Affected Software4
OSV
OSV
added 2021/03/05 5:15 p.m.7 views

CVE-2020-29032

Upload of Code Without Integrity Check vulnerability in firmware archive of Secomea GateManager allows authenticated attacker to execute malicious code on server. This issue affects: Secomea GateManager all versions prior to 9.4.621054022...

7.2CVSS7.3AI score0.00477EPSS
SaveExploits0References2
NVD
NVD
added 2021/03/05 5:15 p.m.31 views

CVE-2020-29032

Upload of Code Without Integrity Check vulnerability in firmware archive of Secomea GateManager allows authenticated attacker to execute malicious code on server. This issue affects: Secomea GateManager all versions prior to 9.4.621054022...

8.4CVSS0.00477EPSS
SaveExploits0References2
Rows per page
Query Builder