CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 07/06/2019 |
| CVE-2019-9158 | MITTEL5.7 | Gemalto DS3 Authentication Server 2.6.1-SP01 has Broken Access Control. | 05/06/2019 |
| CVE-2019-9157 | MITTEL5.7 | Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure. | 05/06/2019 |
| CVE-2019-9156 | HOCH8.0 | Gemalto DS3 Authentication Server 2.6.1-SP01 allows OS Command Injection. | 05/06/2019 |
| CVE-2019-6534 | HOCH7.8 | The uncontrolled search path element vulnerability in Gemalto Sentinel UltraPro Client Library ux32w.dll Versions 1.3.0, 1.3.1, and 1.3.2 enables an attacker to load and execute a malicious file. | 11/04/2019 |
| CVE-2018-15492 | HOCH7.5 | A vulnerability in the lservnt.exe component of Sentinel License Manager version 8.5.3.35 (fixed in 8.5.3.2403) causes UDP amplification. | 18/08/2018 |
| CVE-2018-8900 | MITTEL6.1 | The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to inject malicious web script in the logs page of Admin Control Center (ACC) for cross-site scripting (XSS) vulnerability. | 02/05/2018 |
| CVE-2018-6305 | HOCH7.5 | Denial of service in Gemalto's Sentinel LDK RTE version before 7.65 | 13/03/2018 |
| CVE-2018-6304 | HOCH7.5 | Stack overflow in custom XML-parser in Gemalto's Sentinel LDK RTE version before 7.65 leads to remote denial of service | 13/03/2018 |
| CVE-2017-11498 | HOCH7.5 | Buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to shut down the remote process (a denial of service) via a language pack (ZIP file) with invalid HTML files. | 03/10/2017 |
| CVE-2017-11497 | KRITISCH9.8 | Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via language packs containing filenames longer than 1024 characters. | 03/10/2017 |
| CVE-2017-11496 | KRITISCH9.8 | Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via malformed ASN.1 streams in V2C and similar input files. | 03/10/2017 |
| CVE-2017-6953 | HOCH7.8 | Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via long "Register a new card" input fields. There may be a risk of local code execution with untrusted input to SmartDiag.exe or SymDiag.exe. | 08/05/2017 |