Browse CVEs

CRITICAL 9.8 CVE-2024-2537 Improper Control of Dynamically-Managed Code Resources vulnerability in Logitech Logi Tune on MacOS allows Local Code Inclusion. Logi Tune Mitigation only Fix from $2,3002024-03-15 HIGH 7.3 CVE-2022-36263 StreamLabs Desktop Application 1.9.0 is vulnerable to Incorrect Access Control via obs64.exe. An attacker can execute arbitrary code via a crafted .e… Streamlabs Desktop No fix yet Fix from $1,9502022-08-19 MEDIUM 6.8 CVE-2021-20638 LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors. Lan W300n\/pgrb Firmware Mitigation only Fix from $1,6002021-02-12 MEDIUM 6.8 CVE-2021-20639 LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors. Lan W300n\/pgrb Firmware Mitigation only Fix from $1,6002021-02-12 MEDIUM 6.8 CVE-2021-20640 Buffer overflow vulnerability in LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute an arbitrary OS command via unspe… Lan W300n\/pgrb Firmware Mitigation only Fix from $1,6002021-02-12 MEDIUM 6.5 CVE-2021-20635 Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an attacker in the wireless range of the device to recover … Lan Wh450n\/gr Firmware Mitigation only Fix from $1,6002021-02-12 MEDIUM 6.5 CVE-2021-20636 Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/PR5B allows remote attackers to hijack the authentication of administrators via … Lan W300n\/pr5b Firmware Mitigation only Fix from $1,6002021-02-12 MEDIUM 6.5 CVE-2021-20637 Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/PR5B allows a remote attacker to cause a denial-of-service (DoS) condition … Lan W300n\/pr5b Firmware Mitigation only Fix from $1,6002021-02-12 MEDIUM 6.5 CVE-2021-20641 Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/RS allows remote attackers to hijack the authentication of administrators via a … Lan W300n\/rs Firmware Mitigation only Fix from $1,6002021-02-12 MEDIUM 6.5 CVE-2021-20642 Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/RS allows a remote attacker to cause a denial-of-service (DoS) condition by… Lan W300n\/rs Firmware Mitigation only Fix from $1,6002021-02-12 MEDIUM 6.5 CVE-2016-10761 Logitech Unifying devices before 2016-02-26 allow keystroke injection, bypassing encryption, aka MouseJack. K400r Firmware Mitigation only Fix from $1,6002019-06-29 MEDIUM 6.5 CVE-2019-13052 Logitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is sniffed. Unifying Receiver Firmware No fix yet Fix from $1,6002019-06-29 MEDIUM 6.5 CVE-2019-13053 Logitech Unifying devices allow keystroke injection, bypassing encryption. The attacker must press a "magic" key combination while sniffing cryptogra… Unifying Receiver Firmware No fix yet Fix from $1,6002019-06-29 MEDIUM 6.5 CVE-2019-13054 The Logitech R500 presentation clicker allows attackers to determine the AES key, leading to keystroke injection. On Windows, any text may be injecte… R500 Firmware No fix yet Fix from $1,6002019-06-29 MEDIUM 6.5 CVE-2019-13055 Certain Logitech Unifying devices allow attackers to dump AES keys and addresses, leading to the capability of live decryption of Radio Frequency tra… Unifying Receiver Firmware No fix yet Fix from $1,6002019-06-29 HIGH 8.8 CVE-2019-12506 Due to unencrypted and unauthenticated data communication, the wireless presenter Logitech R700 Laser Presentation Remote R-R0010 is prone to keystro… R700 Laser Presentation Remote Firmware No fix yet Fix from $1,9502019-06-07 MEDIUM 5.4 CVE-2017-16567 Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Favorites" feature. This vulnerability allows remo… Media Server No fix yet Fix from $1,6002017-11-10 MEDIUM 5.4 CVE-2017-16568 Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Radio" functionality. This vulnerability allows at… Media Server No fix yet Fix from $1,6002017-11-10 MEDIUM 6.1 CVE-2017-15687 DOM Based Cross Site Scripting (XSS) exists in Logitech Media Server 7.7.1, 7.7.2, 7.7.3, 7.7.5, 7.7.6, 7.9.0, and 7.9.1 via a crafted URI. Media Server No fix yet Fix from $1,6002017-10-23 MEDIUM 6.8 CVE-2007-2918EPSS 34% Multiple stack-based buffer overflows in ActiveX controls (1) VibeC in (a) vibecontrol.dll, (2) CallManager and (3) ViewerClient in (b) StarClient.dl… Videocall Mitigation only Fix from $1,6002007-06-01 HIGH 7.5 CVE-2001-0737 A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via a man-in-the-middle attack. Cordless Freedom No fix yet Fix from $1,9502001-10-18