Lucene search
+L

363 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/09 12:00 a.m.•10 views

CVE-2022-21203: Improper Preservation of Permissions

Improper permissions in the SafeNet Sentinel driver for IntelR QuartusR Prime Standard Edition before version 21.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.3AI score0.00223EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/02/09 12:00 a.m.•5 views

PT-2022-14921

Name of the Vulnerable Software and Affected Versions IntelR QuartusR Prime Standard Edition versions prior to 21.1 Description The issue is related to improper permissions in the SafeNet Sentinel driver, which may allow an authenticated user to potentially enable escalation of privilege via loca...

7.8CVSS0.00223EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2022/01/19 5:12 p.m.•38 views

CVE-2021-42810 Safenet Authentication Service Remote Desktop Gateway prior to 2.0.3 may allow privilege escilation to authenticated users

A flaw in the previous versions of the product may allow an authenticated attacker the ability to execute code as a privileged user on a system where the agent is installed...

7.8CVSS7.7AI score0.00315EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/12/20 9:15 p.m.•10 views

CVE-2021-42138

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine...

7.2CVSS6.6AI score0.00581EPSS
SaveExploits0References4
NVD
NVD
•added 2021/12/20 9:15 p.m.•25 views

CVE-2021-42138

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine...

7.2CVSS0.00581EPSS
SaveExploits0References3
OSV
OSV
•added 2021/12/20 9:15 p.m.•13 views

CVE-2021-42138

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine...

6.5CVSS6.6AI score0.00581EPSS
SaveExploits0References3
Prion
Prion
•added 2021/12/20 9:15 p.m.•22 views

Code injection

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine...

3.5CVSS6.5AI score0.00581EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2021/12/20 8:19 p.m.•34 views

CVE-2021-42138

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine...

7.2CVSS7.2AI score0.00581EPSS
SaveExploits0References3
CVE
CVE
•added 2021/12/20 8:19 p.m.•64 views

CVE-2021-42138

CVE-2021-42138 : The vulnerability affects SafeNet Agent for Windows Logon and allows a user on a protected machine to leverage weak entropy to access the encrypted credentials of any or all other users on that machine. The available documents do not provide exploit code, specific affected versio...

7.2CVSS6.4AI score0.00581EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/20 12:00 a.m.•7 views

CVE-2021-42138: Insufficient Entropy

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine...

7.2CVSS5.8AI score0.00581EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/12/20 12:00 a.m.•16 views

SafeNet Agent for Windows 安全特征问题漏洞

SafeNet Agent for Windows is the SafeNet Authentication Service Agent for Windows Logon WLA 2.3.0. A security vulnerability exists in SafeNet Agent for Windows, which arises from a user of a machine protected by SafeNet Agent for Windows Logon who can leverage weak entropy to access the encrypted...

7.2CVSS6.5AI score0.00581EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/12/20 12:00 a.m.•4 views

PT-2021-23556

Name of the Vulnerable Software and Affected Versions SafeNet Agent for Windows Logon affected versions not specified Description A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine...

7.2CVSS0.00581EPSS
SaveExploits0References5
GithubExploit
GithubExploit
•added 2021/11/18 2:27 p.m.•18 views

Exploit for Link Following in Thalesgroup Safenet_Authentication_Client

Safenet Authentication Client Privilege Escalation CVE-2021-42...

7.2CVSS7.7AI score0.01025EPSS
SaveExploits2
NVD
NVD
•added 2021/06/16 12:15 p.m.•28 views

CVE-2021-28979

SafeNet KeySecure Management Console 8.12.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked...

6.5CVSS0.01178EPSS
SaveExploits0References2
Prion
Prion
•added 2021/06/16 12:15 p.m.•22 views

Design/Logic Flaw

SafeNet KeySecure Management Console 8.12.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked...

4.3CVSS6.4AI score0.01178EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
•added 2021/06/16 12:15 p.m.•15 views

CVE-2021-28979

SafeNet KeySecure Management Console 8.12.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked...

6.5CVSS5.4AI score0.01178EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2021/06/16 11:32 a.m.•36 views

CVE-2021-28979

SafeNet KeySecure Management Console 8.12.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked...

6.6AI score0.01178EPSS
SaveExploits0References1
CVE
CVE
•added 2021/06/16 11:32 a.m.•61 views

CVE-2021-28979

CVE-2021-28979 affects SafeNet KeySecure Management Console 8.12.0. The issue is HTTP response splitting, where a remote attacker can exploit a specially-crafted URL to cause the server to return a split HTTP response when the link is clicked. This summary is based on the provided CVE entry and r...

6.5CVSS6.4AI score0.01178EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/16 12:00 a.m.•5 views

CVE-2021-28979: Improper Neutralization of Special Elements in Output Used by a Downstream Component

SafeNet KeySecure Management Console 8.12.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked...

6.5CVSS5.9AI score0.01178EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/06/16 12:00 a.m.•21 views

SafeNet KeySecure Management Console 注入漏洞

SafeNet KeySecure Management is a secure software package from SafeNet USA. A security vulnerability exists in SafeNet KeySecure Management Console that stems from the vulnerability of version 8.12.0 of SafeNet KeySecure Management Console to HTTP response splitting attacks. A remote attacker can...

6.5CVSS6.6AI score0.01178EPSS
SaveExploits0References4
Rows per page
Query Builder