Vulnerabilities

TI-2014-04373 CVE-2014-5359 · GHSA-5475-cmj8-mxwg

Directory traversal vulnerability in SafeNet Authentication Service (SAS) Outlook Web…

MEDIUM 41

Directory traversal vulnerability in SafeNet Authentication Service (SAS) Outlook Web Access Agent (formerly CRYPTOCard) before 1.03.30109 allows remote attackers to read arbitrary files via a ..

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.03849 Published 2014-12-16 No fix listed CWE-22

TI-2014-04823 CVE-2014-5872 · GHSA-wgcf-gmx2-cqrh

The SafeNetMobile Pass (aka securecomputing.devices.android.controller) application…

LOW 24

The SafeNetMobile Pass (aka securecomputing.devices.android.controller) application 8.3.7.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.00271 Published 2014-09-11 No fix listed CWE-310

TI-2011-02949 CVE-2011-3339 · GHSA-93x7-9wp8-8w2c

Cross-site scripting (XSS) vulnerability in the Admin Control Center in Sentinel HASP…

LOW 23

Cross-site scripting (XSS) vulnerability in the Admin Control Center in Sentinel HASP Run-time Environment 5.95 and earlier in SafeNet Sentinel HASP (formerly Aladdin HASP SRM) run-time installer before 6.x and SDK befor…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01338 Published 2011-12-17 No fix listed CWE-79

TI-2009-03669 CVE-2009-3861 · GHSA-vwp3-gw47-hmq2

Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6)…

LOW 37

Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions before 10.8.9, allows local users to execute arbitrary code via a long string in a (1) TREENAME or (2)…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.03727 Published 2009-11-04 No fix listed CWE-119

TI-2009-01851 CVE-2009-1943 · GHSA-9vpx-h84q-68h2

Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before…

HIGH 81

Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers to execute arbitrary code via a long request to UDP port 62514.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.7221 Published 2009-06-05 No fix listed CWE-119