Lucene search
+L

1702 matches found

Filippo.io
Filippo.io
β€’added 2018/09/10 4:25 a.m.β€’24 views

Touch-to-operate password-store with YubiKey 4

There are dozens of tutorials on how to fight GnuPG to use YubiKeys for everything, but my favorite overlooked feature of the YubiKey 4 is "touch to operate", where each cryptographic operation takes a physical touch of the gold surface. That pairs particularly well with password-store, a PGP...

6.9AI score
SaveExploits0
Filippo.io
Filippo.io
β€’added 2018/09/10 4:25 a.m.β€’70 views

Touch-to-operate password-store with YubiKey 4

There are dozens of tutorials on how to fight GnuPG to use YubiKeys for everything, but my favorite overlooked feature of the YubiKey 4 is "touch to operate", where each cryptographic operation takes a physical touch of the gold surface. That pairs particularly well with password-store, a PGP...

6.9AI score
SaveExploits0
CNVD
CNVD
β€’added 2018/09/10 12:00 a.m.β€’16 views

Cisco SD-WAN Solution Certificate Validation Vulnerability

Cisco vEdge 100 Series Routers and so on are the products of the United States Cisco Cisco company. cisco vEdge 100 Series Routers is a 100 series router products. vManage Network Management System is a set of network management system. SD- WAN Solution is a set of network expansion solutions...

7.4CVSS7.6AI score0.00832EPSS
SaveExploits0References1
Cisco
Cisco
β€’added 2018/09/05 4:00 p.m.β€’64 views

Cisco SD-WAN Solution Certificate Validation Vulnerability

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...

8.1CVSS1.3AI score0.00832EPSS
SaveExploits0References1
Citrix
Citrix
β€’added 2018/08/16 12:00 a.m.β€’22 views

Touch Screen Keyboard / On Screen Keyboard Minimizes On Every Key Pressed On it.

Touch screen keyboard / On-screen keyboard minimizes on every key pressed on it only on published application. It works fine for published Desktop...

7.2AI score
SaveExploits0
CNVD
CNVD
β€’added 2018/07/26 12:00 a.m.β€’11 views

Cisco SD-WAN Zero Touch Provisioning Local Command Injection Vulnerability

Cisco vEdge 100 Series Routers and others are different series of router products from Cisco. the SD-WAN Solution is a suite of network extension solutions that run on it. A command injection vulnerability exists in the Zero Touch Provisioning ZTP subsystem in Cisco SD-WAN Solution versions prior...

7.8CVSS7.9AI score0.00471EPSS
SaveExploits0References1
CNVD
CNVD
β€’added 2018/07/26 12:00 a.m.β€’13 views

Cisco SD-WAN Zero Touch Provisioning Denial of Service Vulnerability

Cisco vBond Orchestrator Software, vManage Network Management Software, and Smart Controller Software are all products of Cisco, Inc. Cisco vBond Orchestrator Software, vManage Network Management Software and Smart Controller Software are all Cisco products. cisco vBond Orchestrator Software and...

7.8CVSS7.6AI score0.01987EPSS
SaveExploits0References1
NVD
NVD
β€’added 2018/07/18 11:29 p.m.β€’27 views

CVE-2018-0346

A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to incorrect bounds checks for certain values in packets that are sent to...

7.8CVSS7.8AI score0.01987EPSS
SaveExploits0References2
OSV
OSV
β€’added 2018/07/18 11:29 p.m.β€’14 views

CVE-2018-0346

A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to incorrect bounds checks for certain values in packets that are sent to...

7.5CVSS6.1AI score0.01987EPSS
SaveExploits0References2
Prion
Prion
β€’added 2018/07/18 11:29 p.m.β€’23 views

Input validation

A vulnerability in the Zero Touch Provisioning ZTP subsystem of the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this...

7.2CVSS7.6AI score0.00471EPSS
SaveExploits0References2Affected Software7
OSV
OSV
β€’added 2018/07/18 11:29 p.m.β€’16 views

CVE-2018-0347

A vulnerability in the Zero Touch Provisioning ZTP subsystem of the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this...

7.8CVSS6AI score0.00471EPSS
SaveExploits0References2
Cvelist
Cvelist
β€’added 2018/07/18 11:00 p.m.β€’40 views

CVE-2018-0346

A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to incorrect bounds checks for certain values in packets that are sent to...

7.8AI score0.01987EPSS
SaveExploits0References2
Cisco
Cisco
β€’added 2018/07/18 4:00 p.m.β€’60 views

Cisco SD-WAN Solution Zero Touch Provisioning Denial of Service Vulnerability

A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to incorrect bounds checks for certain values in packets that are sent to...

7.5CVSS2.3AI score0.01987EPSS
SaveExploits0References1
NVD
NVD
β€’added 2018/07/06 5:29 p.m.β€’29 views

CVE-2018-5892

The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear...

7.5CVSS7.6AI score0.00847EPSS
SaveExploits0References1
Prion
Prion
β€’added 2018/07/06 5:29 p.m.β€’37 views

Code injection

The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear...

5CVSS7.7AI score0.00847EPSS
SaveExploits0References1
CVE
CVE
β€’added 2018/07/06 5:00 p.m.β€’65 views

CVE-2018-5892

CVE-2018-5892 concerns Touch Pal on Snapdragon Mobile and Snapdragon Wear where the app can collect user behavior data without user awareness. The NVD entry lists a NETWORK attack vector with low attack complexity and no user interaction required, and indicates partial confidentiality impact alon...

7.5CVSS7.5AI score0.00847EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
β€’added 2018/07/06 5:00 p.m.β€’39 views

CVE-2018-5892

The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear...

7.7AI score0.00847EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
β€’added 2018/07/06 12:00 a.m.β€’4 views

CVE-2018-5892: Exposure of Sensitive Information to an Unauthorized Actor

The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear...

7.5CVSS7.2AI score0.00847EPSS
SaveExploits0References2
Citrix
Citrix
β€’added 2018/06/25 12:00 a.m.β€’19 views

Delay with touch screen swipe in HDX session from touch screen device when using Receiver for Windows

When using a touch screen device such as Microsoft surface pro which utilizes the full receiver for windows client users notice a delay when using the touch screen swipe feature in the session. This delay is most obvious when using the finger or a stylus pen to draw in an application such as MS...

6.9AI score
SaveExploits0
Microsoft KB
Microsoft KB
β€’added 2018/06/21 12:00 a.m.β€’16 views

June 21, 2018β€”KB4284822 (OS Build 16299.522)

None None...

6.1AI score
SaveExploits0
Rows per page
Query Builder