
CVE-2016-6257
https://notcve.org/view.php?id=CVE-2016-6257
02 Aug 2016 — The firmware in Lenovo Ultraslim dongles, as used with Lenovo Liteon SK-8861, Ultraslim Wireless, and Silver Silk keyboards and Liteon ZTM600 and Ultraslim Wireless mice, does not enforce incrementing AES counters, which allows remote attackers to inject encrypted keyboard input into the system by leveraging proximity to the dongle, aka a "KeyJack injection attack." El firmware en Lenovo Ultraslim dongles, como se usa con teclados Lenovo Liteon SK-8861, Ultraslim Wireless y Silver Silk y ratones Liteon ZTM6... • http://www.securityfocus.com/bid/92179 • CWE-310: Cryptographic Issues •

CVE-2012-1250
https://notcve.org/view.php?id=CVE-2012-1250
04 Jun 2012 — Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attackers to obtain administrative privileges and modify settings via vectors related to PPPoE authentication. Los routers Logitec LAN-W300N/R con firmware anterior a v2.27, no restringen el acceso al login, lo que permite a atacantes remotos obtener privilegios administrativos y modificar la configuración a través de vectores relacionados con la autenticación PPPoE. • http://jvn.jp/en/jp/JVN85934986/index.html • CWE-264: Permissions, Privileges, and Access Controls •

CVE-2008-0956
https://notcve.org/view.php?id=CVE-2008-0956
12 Jun 2008 — Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the BackWeb Web Package ActiveX object in LiteInstActivator.dll in BackWeb before 8.1.1.87, as used in Logitech Desktop Manager (LDM) before 2.56, allow remote attackers to execute arbitrary code via unspecified vectors. Múltiples desbordamientos de búfer basados en pila en el control ActiveX BackWeb Lite Install Runner en el objeto BackWeb Web Package ActiveX en LiteInstActivator.dll en BackWeb antes de 8.1.1.87, ta... • http://backweb.com/news_events/press_releases/051608.php • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2007-2918 – Logitech VideoCall - ActiveX Control Buffer Overflow
https://notcve.org/view.php?id=CVE-2007-2918
01 Jun 2007 — Multiple stack-based buffer overflows in ActiveX controls (1) VibeC in (a) vibecontrol.dll, (2) CallManager and (3) ViewerClient in (b) StarClient.dll, (4) ComLink in (c) uicomlink.dll, and (5) WebCamXMP in (d) wcamxmp.dll in Logitech VideoCall allow remote attackers to cause a denial of service (browser crash) and execute arbitrary code via unspecified vectors. Múltiples desbordamientos de búfer basados en pila en los controles ActiveX (1) VibeC en el (a) vibecontrol.dll, (2) CallManager y (3) ViewerClient... • https://www.exploit-db.com/exploits/16511 •

CVE-2002-1722
https://notcve.org/view.php?id=CVE-2002-1722
31 Dec 2002 — Logitech iTouch keyboards allows attackers with physical access to the system to bypass the screen locking function and execute user-defined commands that have been assigned to a button. • http://online.securityfocus.com/archive/1/270702 •

CVE-2001-0737
https://notcve.org/view.php?id=CVE-2001-0737
12 Oct 2001 — A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via a man-in-the-middle attack. • http://www.securityfocus.com/archive/1/185003 •