Lucene search
+L

745 matches found

NVD
NVD
added 2017/01/30 9:59 p.m.29 views

CVE-2015-8140

The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network...

5.8CVSS6AI score0.04643EPSS
SaveExploits0References14
Prion
Prion
added 2017/01/30 9:59 p.m.28 views

Code injection

The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network...

5.8CVSS6.9AI score0.04643EPSS
SaveExploits0References14Affected Software1
UbuntuCve
UbuntuCve
added 2017/01/30 9:59 p.m.30 views

CVE-2015-8140

The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network...

5.8CVSS6.8AI score0.04643EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2017/01/30 9:59 p.m.1 views

CVE-2015-7973

NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network...

6.5CVSS5.5AI score0.03362EPSS
SaveExploits2References24
Prion
Prion
added 2017/01/30 9:59 p.m.25 views

Code injection

NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network...

5.8CVSS6.7AI score0.03362EPSS
SaveExploits2References22Affected Software3
OSV
OSV
added 2017/01/30 9:59 p.m.13 views

CVE-2015-8140

The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network...

4.8CVSS6AI score
SaveExploits0References15
OSV
OSV
added 2017/01/30 9:59 p.m.5 views

UBUNTU-CVE-2015-8140

The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by sniffing the network...

4.8CVSS6.9AI score0.04643EPSS
SaveExploits0References4
CVE
CVE
added 2017/01/30 9:00 p.m.161 views

CVE-2015-8140

CVE-2015-8140 : The ntpq protocol in NTP before 4.2.8p7 allows remote replay of authenticated commands by sniffing the network. The connected documents confirm this vulnerability within the NTP daemon and reference related advisories (e.g., F5 and Cisco) that group CVE-2015-8140 with other NTP is...

5.8CVSS5.9AI score0.04643EPSS
SaveExploits0References14Affected Software1
CVE
CVE
added 2017/01/30 9:00 p.m.186 views

CVE-2015-7973

CVE-2015-7973 affects the NTP reference implementation (ntpd) prior to 4.2.8p6 and 4.3.x prior to 4.3.90. When configured in broadcast mode, authenticated broadcast packets can be recorded and replayed by an on‑path or MITM attacker, enabling a replay attack and unauthorized time updates. Public ...

6.5CVSS6.7AI score0.03362EPSS
SaveExploits2References22Affected Software1
Debian CVE
Debian CVE
added 2017/01/30 9:00 p.m.29 views

CVE-2015-7973

Removed by vendor...

6.5CVSS6.3AI score0.03362EPSS
SaveExploits2
OSV
OSV
added 2017/01/23 9:59 p.m.22 views

CVE-2016-6582

The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token Revocation specification...

9.1CVSS7.1AI score
SaveExploits0References6
Prion
Prion
added 2017/01/23 9:59 p.m.20 views

Session fixation

The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token Revocation specification...

6.4CVSS7.3AI score0.04723EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2017/01/23 9:59 p.m.7 views

UBUNTU-CVE-2016-6582

The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token Revocation specification...

9.1CVSS7.4AI score0.04723EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2017/01/23 9:59 p.m.28 views

CVE-2016-6582

The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token Revocation specification...

9.1CVSS7.3AI score0.04723EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2017/01/23 9:00 p.m.33 views

CVE-2016-6582

The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token Revocation specification...

9.3AI score0.04723EPSS
SaveExploits0References6
CVE
CVE
added 2017/01/23 9:00 p.m.98 views

CVE-2016-6582

The CVE-2016-6582 entry concerns the Doorkeeper gem for Ruby, with versions prior to 4.2.0. The underlying issue is a failure to implement the OAuth 2.0 Token Revocation specification, which could allow remote attackers to conduct replay attacks or revoke arbitrary tokens. The available connected...

9.1CVSS9.1AI score0.04723EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
added 2017/01/23 9:00 p.m.43 views

CVE-2016-6582

The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token Revocation specification...

9.1CVSS9.3AI score0.04723EPSS
SaveExploits0
Veracode
Veracode
added 2017/01/13 10:20 a.m.53 views

Unsafe Encryption Scheme

bouncycastle unsafely uses an electronic code book ECB when using the Diffie-Hellman Integrated Encryption Scheme DHIES. ECB is known to be unsafe, particularly against replay attacks...

7.4CVSS7.5AI score0.02208EPSS
SaveExploits0References7Affected Software224
Veracode
Veracode
added 2017/01/13 8:55 a.m.52 views

Unsafe Encryption Scheme

bouncycastle allows for the use of electronic code book ECB mode with Elliptical Curve Integrated Encryption Scheme ECIES. The use of ECB is generally unsafe because it is susceptible to replay attacks...

7.4CVSS7.5AI score0.02208EPSS
SaveExploits0References7Affected Software223
zdt
zdt
added 2016/10/11 12:00 a.m.54 views

Wireless Keyboard Set LX901 GK900 Replay Attack

Exploit for multiple platform in category local exploits Product: Wireless Keyboard Set LX901 Manufacturer: Fujitsu Affected Versions: Model No. GK900 Tested Versions: Model No. GK900 Vulnerability Type: Cryptographic Issues CWE-310 Missing Protection against Replay Attacks Risk Level: Medium...

6.9AI score
SaveExploits0
Rows per page
Query Builder