Lucene search
+L

3917 matches found

NVD
NVD
•added 2021/02/03 4:15 p.m.•42 views

CVE-2021-25755

In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic...

2.5CVSS0.00378EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/02/03 4:15 p.m.•7 views

CVE-2021-25755

In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic...

2.5CVSS4.8AI score0.00378EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/03 12:00 a.m.•4 views

CVE-2021-25755: Undefined Security Weakness

In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic...

2.5CVSS5.8AI score0.00378EPSS
SaveExploits1References1
Prion
Prion
•added 2021/01/26 6:15 p.m.•33 views

Design/Logic Flaw

An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reolink P2P cameras outside of local network access...

4.6CVSS7.5AI score0.00293EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/01/26 12:45 p.m.•45 views

CVE-2020-25173 Reolink P2P Cameras

An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reolink P2P cameras outside of local network access...

7.5AI score0.00293EPSS
SaveExploits0References1
CVE
CVE
•added 2021/01/26 12:45 p.m.•78 views

CVE-2020-25173

CVE-2020-25173 affects Reolink P2P cameras. Multiple connected sources confirm a fixed cryptography key is exposed, enabling an attacker with local network access to potentially decrypt tokens and compromise cameras beyond the local network. Root cause: hard-coded/fixed cryptographic material. Im...

7.8CVSS7.5AI score0.00293EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/26 12:00 a.m.•6 views

CVE-2020-25173: Use of Hard-coded Cryptographic Key

An attacker with local network access can obtain a fixed cryptography key which may allow for further compromise of Reolink P2P cameras outside of local network access...

7.8CVSS5.8AI score0.00293EPSS
SaveExploits0References3
NVD
NVD
•added 2021/01/20 3:15 p.m.•19 views

CVE-2020-4983

IBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2 could allow a user on the local network who has privileges to submit LSF jobs to execute arbitrary commands. IBM X-Force ID: 192586...

7.8CVSS7.5AI score0.00437EPSS
SaveExploits1References3
Prion
Prion
•added 2021/01/20 3:15 p.m.•14 views

Code injection

IBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2 could allow a user on the local network who has privileges to submit LSF jobs to execute arbitrary commands. IBM X-Force ID: 192586...

4.6CVSS7.5AI score0.00437EPSS
SaveExploits1References3Affected Software2
Cvelist
Cvelist
•added 2021/01/20 3:00 p.m.•30 views

CVE-2020-4983

IBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2 could allow a user on the local network who has privileges to submit LSF jobs to execute arbitrary commands. IBM X-Force ID: 192586...

7.4CVSS7.6AI score0.00437EPSS
SaveExploits1References3
CVE
CVE
•added 2021/01/20 3:00 p.m.•105 views

CVE-2020-4983

CVE-2020-4983 affects IBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2. A local attacker with privileges to submit LSF jobs can execute arbitrary commands due to an authentication weakness in certain messages between binaries over the network, potentially gaining full control of the cluster....

7.8CVSS7.6AI score0.00437EPSS
SaveExploits1References3Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/20 12:00 a.m.•3 views

CVE-2020-4983: Improper Authentication

IBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2 could allow a user on the local network who has privileges to submit LSF jobs to execute arbitrary commands. IBM X-Force ID: 192586...

7.8CVSS6.3AI score0.00437EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/01/20 12:00 a.m.•55 views

Reolink P2P Cameras Trust Management Issue Vulnerability

Reolink P2P Cameras is a camera. A trust management issue vulnerability exists in Reolink P2P Cameras, which can be exploited by an attacker to obtain a fixed encryption key and access applications outside the local network access range. The vulnerability exists in the following devices or models...

7.8CVSS7AI score0.00293EPSS
SaveExploits0References3
OSV
OSV
•added 2021/01/04 10:15 p.m.•13 views

CVE-2020-29491

Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the sensitive information on the local network, leading to the potential compromise of impacted thin...

8.6CVSS5.8AI score0.0187EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/01/04 9:15 p.m.•47 views

CVE-2020-29491

Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the sensitive information on the local network, leading to the potential compromise of impacted thin...

10CVSS9.3AI score0.0187EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/01/04 12:00 a.m.•17 views

Dell Wyse ThinOS 安全漏洞

Wyse ThinOS is a highly secure, virus-resistant thin operating system. An insecure default configuration vulnerability exists in Wyse ThinOS 8.6 and earlier versions. An attacker could exploit the vulnerability to access sensitive information on the local network...

10CVSS7.5AI score0.0187EPSS
SaveExploits0References2
OSV
OSV
•added 2020/12/17 11:15 p.m.•11 views

CVE-2020-12523

On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports g...

9.1CVSS7.3AI score0.00899EPSS
SaveExploits0References1
Veracode
Veracode
•added 2020/12/10 4:09 p.m.•26 views

Denial Of Service (DoS)

SANE is vulnerable to denial of service. An attacker may connect a malicious device to the same local network as the victim and utilize a null pointer dereference in sane backend to cause a denial of service...

5.7CVSS3.4AI score0.01041EPSS
SaveExploits1References6Affected Software1
Veracode
Veracode
•added 2020/12/10 4:08 p.m.•28 views

Arbitrary Code Execution

sane is vulnerable to arbitrary code execution. A heap buffer overflow allows a malicious device connected to the same local network as the victim to execute arbitrary code...

8.8CVSS3.6AI score0.03044EPSS
SaveExploits1References7Affected Software1
Veracode
Veracode
•added 2020/12/10 4:08 p.m.•25 views

Information Disclosure

sane is vulnerable to information disclosure. An out-of-bounds read allows a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program...

4.3CVSS2.2AI score0.01077EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder