İçeriğe atla
Noroxi

Yubico kayıtları

yubico üreticisine ait 27 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%51,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

27 kayıt
  • CVE-2011-4120
    40Planlayın

    Yubico PAM Module before 2.10 performed user authentication when 'use_first_pass' PAM configuration option was not used and the module was c

    KritikCVSS 9,8İstismar yokEPSS %2

    yubico · pam module26 Kas 2019

  • CVE-2020-10185
    35İzleyin

    The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP.

    YüksekCVSS 8,6İstismar yokEPSS %1

    yubico · yubikey one time password validation server5 Mar 2020

  • CVE-2015-3298
    35İzleyin

    Yubico ykneo-openpgp before 1.0.10 has a typo in which an invalid PIN can be used.

    YüksekCVSS 8,8İstismar yokEPSS %0

    yubico · ykneo-openpgp29 Mar 2022

  • CVE-2024-31498
    35İzleyin

    Yubico ykman-gui (aka YubiKey Manager GUI) before 1.2.6 on Windows, when Edge is not used, allows privilege escalation because browser windo

    YüksekCVSS 8,8İstismar yokEPSS %0

    4 Nis 2024

  • CVE-2019-12210
    33İzleyin

    In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set using debug_file, that file descriptor is not closed

    YüksekCVSS 8,1İstismar yokEPSS %2

    yubico · pam-u2f4 Haz 2019

  • CVE-2018-9275
    32İzleyin

    In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25, successful logins can leak file descriptors to th

    YüksekCVSS 8,2İstismar yokEPSS %1

    yubico · yubico pam4 Nis 2018

  • CVE-2019-12209
    31İzleyin

    Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile (default $HOME/.config/Yubico/u2f_keys) as root (unless openasuser was enab

    YüksekCVSS 7,5İstismar yokEPSS %2

    yubico · pam-u2f4 Haz 2019

  • CVE-2019-9578
    31İzleyin

    In devs.c in Yubico libu2f-host before 1.1.8, the response to init is misparsed, leaking uninitialized stack memory back to the device.

    YüksekCVSS 7,5İstismar yokEPSS %2

    yubico · libu2f-host5 Mar 2019

  • CVE-2020-24388
    31İzleyin

    An issue was discovered in the _send_secure_msg() function of yubihsm-shell through 2.0.2.

    YüksekCVSS 7,5İstismar yokEPSS %1

    yubico · yubihsm-shell19 Eki 2020

  • CVE-2020-24387
    31İzleyin

    An issue was discovered in the yh_create_session() function of yubihsm-shell through 2.0.2.

    YüksekCVSS 7,5İstismar yokEPSS %1

    yubico · yubihsm-shell19 Eki 2020

  • CVE-2021-28484
    30İzleyin

    An issue was discovered in the /api/connector endpoint handler in Yubico yubihsm-connector before 3.0.1 (in YubiHSM SDK before 2021.04).

    YüksekCVSS 7,5İstismar yokEPSS %1

    yubico · yubihsm connector14 Nis 2021

  • CVE-2020-10184
    30İzleyin

    The verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL queries, which allows remote attackers to caus

    YüksekCVSS 7,5İstismar yokEPSS %1

    yubico · yubikey one time password validation server5 Mar 2020

  • CVE-2021-43399
    30İzleyin

    The Yubico YubiHSM YubiHSM2 library 2021.08, included in the yubihsm-shell project, does not properly validate the length of some operations

    YüksekCVSS 7,5İstismar yokEPSS %1

    yubico · yubihsm 2 software development kit8 Ara 2021

  • CVE-2023-39908
    30İzleyin

    The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read operations on object metadata.

    YüksekCVSS 7,5İstismar yokEPSS %0

    yubico · yubihsm 2 sdk14 Ağu 2023

  • CVE-2018-20340
    27İzleyin

    Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow.

    OrtaCVSS 6,8İstismar yokEPSS %0

    yubico · libu2f-host21 Mar 2019

  • CVE-2018-14779
    27İzleyin

    A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver.

    OrtaCVSS 6,8İstismar yokEPSS %0

    yubico · piv manager15 Ağu 2018

  • CVE-2021-31924
    27İzleyin

    Yubico pam-u2f before 1.1.1 has a logic issue that, depending on the pam-u2f configuration and the application used, could lead to a local P

    OrtaCVSS 6,8İstismar yokEPSS %0

    yubico · pam-u2f25 May 2021

  • CVE-2022-24584
    26İzleyin

    Incorrect access control in Yubico OTP functionality of the YubiKey hardware tokens along with the Yubico OTP validation server.

    OrtaCVSS 6,5İstismar yokEPSS %1

    yubico · otp11 May 2022

  • CVE-2020-15000
    23İzleyin

    A PIN management problem was discovered on Yubico YubiKey 5 devices 5.2.0 to 5.2.6.

    OrtaCVSS 5,9İstismar yokEPSS %0

    yubico · yubikey 5 nfc firmware9 Tem 2020

  • CVE-2020-15001
    21İzleyin

    An information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and 5.3.0 to 5.3.1.

    OrtaCVSS 5,3İstismar yokEPSS %0

    yubico · yubikey 5 nfc firmware9 Tem 2020

  • CVE-2020-13132
    18İzleyin

    An issue was discovered in Yubico libykpiv before 2.1.0.

    OrtaCVSS 4,6İstismar yokEPSS %0

    yubico · libykpiv9 Tem 2020

  • CVE-2018-14780
    18İzleyin

    An out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver.

    OrtaCVSS 4,6İstismar yokEPSS %0

    yubico · piv manager15 Ağu 2018

  • CVE-2021-27217
    17İzleyin

    An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3.

    OrtaCVSS 4,4İstismar yokEPSS %1

    yubico · yubihsm-shell4 Mar 2021

  • CVE-2021-32489
    17İzleyin

    An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3.

    OrtaCVSS 4,4İstismar yokEPSS %0

    yubico · yubihsm-shell10 May 2021

  • CVE-2020-13131
    17İzleyin

    An issue was discovered in Yubico libykpiv before 2.1.0.

    OrtaCVSS 4,3İstismar yokEPSS %0

    yubico · libykpiv9 Tem 2020