Lucene search
K

11 matches found

EUVD
EUVD
added 2026/04/30 4:8 p.m.0 views

EUVD-2025-209597

Synway SMG Gateway Management Software contains an OS command injection vulnerability in the RADIUS configuration endpoint at /en/9-2radius.php where the radiusaddress POST parameter is split and interpolated directly into a sed command without sanitization. An unauthenticated remote attacker can...

9.8CVSS6.3AI score0.01341EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2024/11/12 10:32 a.m.4 views

freeradius: forgery attack

A vulnerability in the RADIUS Remote Authentication Dial-In User Service protocol allows attackers to forge authentication responses when the Message-Authenticator attribute is not enforced. This issue arises from a cryptographically insecure integrity check using MD5, enabling attackers to spoof...

9CVSS7.2AI score0.22162EPSS
Exploits2References10
RedHat Linux
RedHat Linux
added 2024/11/04 1:44 a.m.1 views

freeradius: forgery attack

A vulnerability in the RADIUS Remote Authentication Dial-In User Service protocol allows attackers to forge authentication responses when the Message-Authenticator attribute is not enforced. This issue arises from a cryptographically insecure integrity check using MD5, enabling attackers to spoof...

9CVSS7.2AI score0.22162EPSS
Exploits2References10
RedHat Linux
RedHat Linux
added 2024/07/30 8:52 a.m.5 views

freeradius: forgery attack

A vulnerability in the RADIUS Remote Authentication Dial-In User Service protocol allows attackers to forge authentication responses when the Message-Authenticator attribute is not enforced. This issue arises from a cryptographically insecure integrity check using MD5, enabling attackers to spoof...

9CVSS7.2AI score0.22162EPSS
Exploits2References10
RedHat Linux
RedHat Linux
added 2024/07/24 1:27 p.m.3 views

freeradius: forgery attack

A vulnerability in the RADIUS Remote Authentication Dial-In User Service protocol allows attackers to forge authentication responses when the Message-Authenticator attribute is not enforced. This issue arises from a cryptographically insecure integrity check using MD5, enabling attackers to spoof...

9CVSS7.2AI score0.22162EPSS
Exploits2References10
CNNVD
CNNVD
added 2023/10/10 12:0 a.m.1 views

Fortinet FortiGuest Log Information Disclosure Vulnerability

Fortinet FortiGuest is a network visitor management solution from Fortinet that helps organizations manage and control visitor access on their networks. A security vulnerability exists in Fortinet FortiGuest that stems from sensitive information being written to log files. This allows a local...

5.5CVSS6.3AI score0.00078EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/11/23 12:0 a.m.2 views

ProFTPd 安全漏洞

ProFTPd is a highly configurable open source FTP server software. A security vulnerability exists in ProFTPd versions prior to 1.3.7c, which stems from modradius copying a 16-character block that allows memory leaks to a RADIUS server...

7.5CVSS6.2AI score0.01803EPSS
Exploits1References6
OSV
OSV
added 2022/11/04 6:15 p.m.1 views

CVE-2022-20937

A vulnerability in a feature that monitors RADIUS requests on Cisco Identity Services Engine ISE Software could allow an unauthenticated, remote attacker to negatively affect the performance of an affected device. This vulnerability is due to insufficient management of system resources. An attack...

5.3CVSS5.8AI score0.00399EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2009/04/23 12:0 a.m.19 views

Ubuntu 6.06 LTS / 7.10 : gnome-screensaver vulnerabilities (USN-669-1)

It was discovered that the notify feature in gnome-screensaver could let a local attacker read the clipboard contents of a locked session by using Ctrl-V. CVE-2007-6389 Alan Matsuoka discovered that gnome-screensaver did not properly handle network outages when using a remote authentication...

4.7CVSS5.4AI score0.00239EPSS
Exploits4References3
OpenVAS
OpenVAS
added 2009/03/23 12:0 a.m.24 views

Ubuntu Update for gnome-screensaver vulnerabilities USN-669-1

Ubuntu Update for Linux kernel vulnerabilities USN-669-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6691.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for gnome-screensaver vulnerabilities USN-669-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

4.7CVSS6.5AI score0.00239EPSS
Exploits4References2
Ubuntu
Ubuntu
added 2008/11/11 6:49 p.m.51 views

USN-669-1: gnome-screensaver vulnerabilities

It was discovered that the notify feature in gnome-screensaver could let a local attacker read the clipboard contents of a locked session by using Ctrl-V. CVE-2007-6389 Alan Matsuoka discovered that gnome-screensaver did not properly handle network outages when using a remote authentication...

4.7CVSS5.4AI score0.00239EPSS
Exploits4
Rows per page
Query Builder