查看最新发布的CVE列表 (117556)

CVE-2016-6542(发布:2018-07-13 16:29:00)NMS
CVSSN/A

[原文]The iTrack device tracking ID number, also called "LosserID" in the web API, can be obtained by being in the range of an iTrack device. The tracker ID is the device's BLE MAC address.

CVE-2016-6543(发布:2018-07-13 16:29:00)NM
CVSSN/A

[原文]A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data, which can allow unauthenticated parties to track the device.

CVE-2016-6544(发布:2018-07-13 16:29:00)NM
CVSSN/A

[原文]getgps data in iTrack Easy can be modified without authentication by setting the data using the parametercmd:setothergps. This vulnerability can be exploited to alter the GPS data of a lost device.

CVE-2018-8847(发布:2018-07-13 15:29:00)NMS
CVSSN/A

[原文]Eaton 9000X DriveA versions 2.0.29 and prior has a stack-based buffer overflow vulnerability, which may allow remote code execution.

CVE-2018-1245(发布:2018-07-13 13:29:00)NMP
CVSSN/A

[原文]RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains an authorization bypass vulnerability within the workflow architect component (ACM). A remote authenticated malicious user with non-admin privileges could potentially bypass the Java Security Policies. Once bypassed, a malicious user could potentially run arbitrary system commands at the OS level with application owner privileges on the affected system.

CVE-2018-1255(发布:2018-07-13 13:29:00)NMP
CVSSN/A

[原文]RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to a vulnerable web application, which is then reflected back to the victim and executed by the web browser.

首页上一页678910111213下一页尾页 第8页 / 共19593页

关于SCAP中文社区

SCAP中文社区是国内第一个以SCAP为主题的中文开放社区。了解更多信息,请查阅[关于本站]

版权声明

CVE/CWE/OVAL均为MITRE公司的注册商标,它们的官方数据源均保存在MITRE公司的相关网站