Lucene search
K

10 matches found

CNNVD
CNNVD
added 2026/05/08 12:0 a.m.3 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel. This vulnerability stems from the smpcmdPairingReq function in the Bluetooth SMP protocol, which constructs a pairing...

8.8CVSS5.8AI score0.00029EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.1 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001452)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001452 advisory. Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used...

4.3CVSS7AI score0.00023EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 7:6 a.m.5 views

CVE-2024-51738

Sunshine is a self-hosted game stream host for Moonlight. In 0.23.1 and earlier, Sunshine's pairing protocol implementation does not validate request order and is thereby vulnerable to a MITM attack, potentially allowing an unauthenticated attacker to pair a client by hijacking a legitimate pairi...

8.1CVSS7AI score0.01842EPSS
Exploits0References1
CVE
CVE
added 2025/01/20 3:26 p.m.48 views

CVE-2024-51738

Sunshine (Moonlight self-hosted game stream host) prior to 2025.118.151840 is affected. In 0.23.1 and earlier, the pairing protocol does not validate request order, enabling a MITM attack that can hijack a legitimate pairing and may also be used to crash Sunshine. The vulnerability is fixed in 20...

8.1CVSS6.7AI score0.01842EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2025/01/20 3:26 p.m.11 views

CVE-2024-51738 Sunshine improperly enforces pairing protocol request order

Sunshine is a self-hosted game stream host for Moonlight. In 0.23.1 and earlier, Sunshine's pairing protocol implementation does not validate request order and is thereby vulnerable to a MITM attack, potentially allowing an unauthenticated attacker to pair a client by hijacking a legitimate pairi...

7.7CVSS0.01842EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/01/20 3:26 p.m.6 views

CVE-2024-51738 Sunshine improperly enforces pairing protocol request order

Sunshine is a self-hosted game stream host for Moonlight. In 0.23.1 and earlier, Sunshine's pairing protocol implementation does not validate request order and is thereby vulnerable to a MITM attack, potentially allowing an unauthenticated attacker to pair a client by hijacking a legitimate pairi...

7.7CVSS6.7AI score0.01842EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/01/20 12:0 a.m.1 views

PT-2025-2912 · Sunshine · Sunshine

Name of the Vulnerable Software and Affected Versions: Sunshine versions 0.23.1 and earlier Description: Sunshine is a self-hosted game stream host for Moonlight. The pairing protocol implementation does not validate request order, making it vulnerable to a MITM attack. This potentially allows an...

7.7CVSS7.5AI score0.01842EPSS
Exploits0References8
ATTACKERKB
ATTACKERKB
added 2022/12/12 1:15 p.m.2 views

CVE-2022-32537

A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with other system components. Exploitation requires nearby wireless signal proximity with the patient and the device; advanced...

4.8CVSS5.8AI score0.00064EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2022/11/17 12:0 a.m.1 views

PT-2022-21355

Name of the Vulnerable Software and Affected Versions Medtronic affected versions not specified Description A vulnerability exists that could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with other system...

4.8CVSS5.8AI score0.00064EPSS
Exploits0References6
OSV
OSV
added 2021/05/24 6:15 p.m.1 views

DEBIAN-CVE-2020-26558

Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing in the Passkey authentication procedure by reflection of the public key and the authentication evidence of the initiati...

4.2CVSS6.8AI score0.00023EPSS
Exploits0References1
Rows per page
Query Builder