CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 07/06/2019 |
| CVE-2019-9158 | 中危5.7 | Gemalto DS3 Authentication Server 2.6.1-SP01 has Broken Access Control. | 05/06/2019 |
| CVE-2019-9157 | 中危5.7 | Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure. | 05/06/2019 |
| CVE-2019-9156 | 高危8.0 | Gemalto DS3 Authentication Server 2.6.1-SP01 allows OS Command Injection. | 05/06/2019 |
| CVE-2019-6534 | 高危7.8 | The uncontrolled search path element vulnerability in Gemalto Sentinel UltraPro Client Library ux32w.dll Versions 1.3.0, 1.3.1, and 1.3.2 enables an attacker to load and execute a malicious file. | 11/04/2019 |
| CVE-2018-15492 | 高危7.5 | A vulnerability in the lservnt.exe component of Sentinel License Manager version 8.5.3.35 (fixed in 8.5.3.2403) causes UDP amplification. | 18/08/2018 |
| CVE-2018-8900 | 中危6.1 | The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to inject malicious web script in the logs page of Admin Control Center (ACC) for cross-site scripting (XSS) vulnerability. | 02/05/2018 |
| CVE-2018-6305 | 高危7.5 | Denial of service in Gemalto's Sentinel LDK RTE version before 7.65 | 13/03/2018 |
| CVE-2018-6304 | 高危7.5 | Stack overflow in custom XML-parser in Gemalto's Sentinel LDK RTE version before 7.65 leads to remote denial of service | 13/03/2018 |
| CVE-2017-11498 | 高危7.5 | Buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to shut down the remote process (a denial of service) via a language pack (ZIP file) with invalid HTML files. | 03/10/2017 |
| CVE-2017-11497 | 严重9.8 | Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via language packs containing filenames longer than 1024 characters. | 03/10/2017 |
| CVE-2017-11496 | 严重9.8 | Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via malformed ASN.1 streams in V2C and similar input files. | 03/10/2017 |
| CVE-2017-6953 | 高危7.8 | Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via long "Register a new card" input fields. There may be a risk of local code execution with untrusted input to SmartDiag.exe or SymDiag.exe. | 08/05/2017 |