İçeriğe atla
Noroxi

Gemalto kayıtları

gemalto üreticisine ait 26 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%3,8
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

26 kayıt
  • CVE-2017-11496
    40Planlayın

    Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows

    KritikCVSS 9,8İstismar yokEPSS %4

    gemalto · sentinel ldk rte2 Eki 2017

  • CVE-2017-11497
    40Planlayın

    Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows

    KritikCVSS 9,8İstismar yokEPSS %4

    gemalto · sentinel ldk rte2 Eki 2017

  • CVE-2019-9156
    33İzleyin

    Gemalto DS3 Authentication Server 2.6.1-SP01 allows OS Command Injection.

    YüksekCVSS 8,0İstismar yokEPSS %3

    gemalto · ezio ds3 server5 Haz 2019

  • CVE-2017-11498
    31İzleyin

    Buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remot

    YüksekCVSS 7,5İstismar yokEPSS %2

    gemalto · sentinel ldk rte2 Eki 2017

  • CVE-2018-6304
    31İzleyin

    Stack overflow in custom XML-parser in Gemalto's Sentinel LDK RTE version before 7.65 leads to remote denial of service

    YüksekCVSS 7,5İstismar yokEPSS %1

    gemalto · sentinel ldk rte13 Mar 2018

  • CVE-2019-6534
    31İzleyin

    The uncontrolled search path element vulnerability in Gemalto Sentinel UltraPro Client Library ux32w.dll Versions 1.3.0, 1.3.1, and 1.3.2 en

    YüksekCVSS 7,8İstismar yokEPSS %1

    gemalto · sentinel ultrapro client library11 Nis 2019

  • CVE-2017-6953
    31İzleyin

    Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via long "Register a new card" input fields.

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    gemalto · smartdiag diagnosis tool8 May 2017

  • CVE-2019-18232
    31İzleyin

    SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected) is vulnerable when configure

    YüksekCVSS 7,8İstismar yokEPSS %0

    microsoft · windows11 Ara 2019

  • CVE-2015-7962
    31İzleyin

    SafeNet Authentication Service for Outlook Web App Agent uses a weak ACL for unspecified installation directories and executable modules, wh

    YüksekCVSS 7,8İstismar yokEPSS %0

    gemalto · safenet authentication service for outlook web app agent2 Mar 2018

  • CVE-2015-7966
    31İzleyin

    SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which al

    YüksekCVSS 7,8İstismar yokEPSS %0

    gemalto · safenet authentication service windows logon agent2 Mar 2018

  • CVE-2015-7967
    31İzleyin

    SafeNet Authentication Service for Citrix Web Interface Agent uses a weak ACL for unspecified installation directories and executable module

    YüksekCVSS 7,8İstismar yokEPSS %0

    gemalto · safenet authentication service for citrix web interface agent2 Mar 2018

  • CVE-2015-7597
    31İzleyin

    SafeNet Authentication Service IIS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local

    YüksekCVSS 7,8İstismar yokEPSS %0

    gemalto · safenet authentication service iis agent2 Mar 2018

  • CVE-2015-7598
    31İzleyin

    SafeNet Authentication Service TokenValidator Proxy Agent uses a weak ACL for unspecified installation directories and executable modules, w

    YüksekCVSS 7,8İstismar yokEPSS %0

    gemalto · safenet authentication service tokenvalidator proxy agent2 Mar 2018

  • CVE-2015-7964
    31İzleyin

    SafeNet Authentication Service for NPS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows l

    YüksekCVSS 7,8İstismar yokEPSS %0

    gemalto · safenet authentication service for nps agent2 Mar 2018

  • CVE-2015-7963
    31İzleyin

    SafeNet Authentication Service for AD FS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows

    YüksekCVSS 7,8İstismar yokEPSS %0

    gemalto · safenet authentication service for ad fs agent2 Mar 2018

  • CVE-2015-7965
    31İzleyin

    SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which al

    YüksekCVSS 7,8İstismar yokEPSS %0

    gemalto · safenet authentication service windows logon agent2 Mar 2018

  • CVE-2015-7961
    31İzleyin

    SafeNet Authentication Service Remote Web Workplace Agent uses a weak ACL for unspecified installation directories and executable modules, w

    YüksekCVSS 7,8İstismar yokEPSS %0

    gemalto · safenet authentication service remote web workplace agent2 Mar 2018

  • CVE-2015-7596
    31İzleyin

    SafeNet Authentication Service End User Software Tools for Windows uses a weak ACL for unspecified installation directories and executable m

    YüksekCVSS 7,8İstismar yokEPSS %0

    gemalto · safenet authentication service end user software tools for windows2 Mar 2018

  • CVE-2018-6305
    30İzleyin

    Denial of service in Gemalto's Sentinel LDK RTE version before 7.65

    YüksekCVSS 7,5İstismar yokEPSS %1

    gemalto · sentinel ldk rte13 Mar 2018

  • CVE-2018-15492
    30İzleyin

    A vulnerability in the lservnt.exe component of Sentinel License Manager version 8.5.3.35 (fixed in 8.5.3.2403) causes UDP amplification.

    YüksekCVSS 7,5İstismar yokEPSS %1

    gemalto · sentinel license manager17 Ağu 2018

  • CVE-2019-8283
    26İzleyin

    Hasplm cookie in Gemalto Admin Control Center, all versions prior to 7.92, does not have 'HttpOnly' flag.

    OrtaCVSS 6,5İstismar yokEPSS %1

    gemalto · sentinel ldk7 Haz 2019

  • CVE-2018-8900
    24İzleyin

    The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to i

    OrtaCVSS 6,1İstismar yokEPSS %0

    gemalto · sentinel ldk rte2 May 2018

  • CVE-2019-9158
    22İzleyin

    Gemalto DS3 Authentication Server 2.6.1-SP01 has Broken Access Control.

    OrtaCVSS 5,7İstismar yokEPSS %0

    gemalto · ezio ds3 server5 Haz 2019

  • CVE-2019-9157
    22İzleyin

    Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure.

    OrtaCVSS 5,7İstismar yokEPSS %0

    gemalto · ezio ds3 server5 Haz 2019

  • CVE-2019-8282
    21İzleyin

    Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language pa

    OrtaCVSS 5,3İstismar yokEPSS %0

    gemalto · sentinel ldk7 Haz 2019