Lucene search
+L

1457 matches found

OSV
OSV
added 2024/04/08 3:10 p.m.33 views

CVE-2024-31221 Clients removed during unpairing process may regain access if Sunshine was not restarted

Sunshine is a self-hosted game stream host for Moonlight. Starting in version 0.10.0 and prior to version 0.23.0, after unpairing all devices in the web UI interface and then pairing only one device, all of the previously devices will be temporarily paired. Version 0.23.0 contains a patch for the...

5.9CVSS6.8AI score
SaveExploits0References6
CNNVD
CNNVD
added 2024/04/08 12:00 a.m.9 views

Sunshine 安全漏洞

Sunshine is a Moonlight self-hosted live game host. A security vulnerability exists in Sunshine version 0.10.0 up to and including version 0.23.0, which stems from the fact that after unpairing all devices in the Web UI interface, and then after pairing only one device, all previous devices are...

5.9CVSS6.7AI score0.00509EPSS
SaveExploits1References5
NVD
NVD
added 2024/03/15 5:15 p.m.29 views

CVE-2023-7003

The AES key utilized in the pairing process between a lock using Sciener firmware and a wireless keypad is not unique, and can be reused to compromise other locks using the Sciener firmware...

6.8CVSS6.5AI score0.0028EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/03/15 5:09 p.m.19 views

CVE-2023-7003 CVE-2023-7003

The AES key utilized in the pairing process between a lock using Sciener firmware and a wireless keypad is not unique, and can be reused to compromise other locks using the Sciener firmware...

6.9AI score0.0028EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/15 5:09 p.m.45 views

CVE-2023-7003 CVE-2023-7003

The AES key utilized in the pairing process between a lock using Sciener firmware and a wireless keypad is not unique, and can be reused to compromise other locks using the Sciener firmware...

6.8AI score0.0028EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/15 12:00 a.m.16 views

Sciener firmware security vulnerability

Sciener is a smart lock firmware from Sciener. The Sciener firmware has a security vulnerability that stems from the fact that the AES key for the pairing between the lock and the wireless keypad is not unique and can be reused...

6.8CVSS6.8AI score0.0028EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/04 12:00 a.m.5 views

Dell Display Manager and Dell Peripheral Manager Permission License and Access Control Issues Vulnerability

Dell Peripheral Manager and Dell Display Manager are both products of Dell, Inc.Dell Peripheral Manager is a software application that provides on-screen instructions on how to pair other devices with your computer via Bluetooth. Dell Peripheral Manager is a software application that provides...

7.8CVSS6.8AI score0.00235EPSS
SaveExploits0References2
OSV
OSV
added 2024/01/18 2:05 p.m.7 views

SUSE-SU-2024:0154-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unauthenticated nearby device to spoof the...

7.8CVSS7AI score0.01657EPSS
SaveExploits4References17
OSV
OSV
added 2024/01/16 12:32 p.m.14 views

SUSE-SU-2024:0120-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unauthenticated nearby device to spoof the...

7.8CVSS7.1AI score0.10458EPSS
SaveExploits11References18
GithubExploit
GithubExploit
added 2024/01/16 7:44 a.m.227 views

Exploit for Improper Authentication in Google Android

BluetoothDucky CVE-2023-45866 - BluetoothDucky implementation...

6.3CVSS8.1AI score0.07879EPSS
SaveExploits9
NVD
NVD
added 2024/01/12 11:15 p.m.42 views

CVE-2024-0230

A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...

2.4CVSS2.7AI score0.01223EPSS
SaveExploits3References3
OSV
OSV
added 2024/01/12 11:15 p.m.11 views

CVE-2024-0230

A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...

2.4CVSS5.7AI score0.01223EPSS
SaveExploits3References2
CVE
CVE
added 2024/01/12 11:10 p.m.123 views

CVE-2024-0230

Summary (CVE-2024-0230): A session management issue in Apple Magic Keyboard is addressed by firmware update 2.0.6. With physical access to the accessory, an attacker may extract the Bluetooth pairing key and monitor Bluetooth traffic. Provided sources consistently cite the fix in Magic Keyboard F...

2.4CVSS2.9AI score0.01223EPSS
SaveExploits3References3Affected Software1
Cvelist
Cvelist
added 2024/01/12 11:10 p.m.54 views

CVE-2024-0230

A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...

2.9AI score0.01223EPSS
SaveExploits3References1
Vulnrichment
Vulnrichment
added 2024/01/12 11:10 p.m.11 views

CVE-2024-0230

A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.0.6. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...

2.7AI score0.01223EPSS
SaveExploits3References1
Positive Technologies
Positive Technologies
added 2024/01/11 12:00 a.m.17 views

PT-2024-1415

Name of the Vulnerable Software and Affected Versions Magic Keyboard versions prior to 2.0.6 Description A session management issue was addressed with improved checks. An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic...

2.4CVSS6AI score0.01223EPSS
SaveExploits3References29
CNNVD
CNNVD
added 2024/01/09 12:00 a.m.16 views

Apple Magic Keyboard Security Flaw

The Apple Magic Keyboard is a wireless keyboard from Apple, Inc. A security vulnerability exists in Apple Magic Keyboard, which stems from a session management issue that allows an attacker with access to the physical accessory to extract its Bluetooth pairing key and monitor Bluetooth...

2.4CVSS6.2AI score0.01223EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
added 2024/01/09 12:00 a.m.10 views

PT-2024-1122

Name of the Vulnerable Software and Affected Versions: Microsoft Bluetooth Driver affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in the Microsoft Bluetooth Driver. It allows a remote attacker to conduct spoofi...

6.1CVSS7.1AI score0.0583EPSS
SaveExploits3References20
NVD
NVD
added 2024/01/04 1:15 a.m.24 views

CVE-2024-20803

Improper authentication vulnerability in Bluetooth pairing process prior to SMR Jan-2024 Release 1 allows remote attackers to establish pairing process without user interaction...

6.8CVSS6.7AI score0.00277EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/04 1:15 a.m.14 views

CVE-2024-20803

Improper authentication vulnerability in Bluetooth pairing process prior to SMR Jan-2024 Release 1 allows remote attackers to establish pairing process without user interaction...

6.5CVSS5.8AI score0.00277EPSS
SaveExploits0References1
Rows per page
Query Builder