CVE-2026-15170

creationtimestamp| type| source ---|---|--- 2026-07-09 14:35:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mq7u64nhfe25...

CVE-2026-15170 Heap-based Buffer Overflow in Wireshark

Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

CVE-2025-15170

creationtimestamp| type| source ---|---|--- 2025-12-29 04:32:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb3yxpnnp22r...

CVE-2020-15170

apollo-adminservice before version 1.7.1 does not implement access controls. If users expose apollo-adminservice to internetwhich is not recommended, there are potential security issues since apollo-adminservice is designed to work in intranet and it doesn't have access control built-in. Maliciou...

CVE-2017-15170

...

CVE-2017-15170

CVE-2017-15170 is rejected/not used per the Initial Description.

cc.jweb:jweb-boot (>=1.0.0 <=1.0.1), cn.zzq0324:feature-flag (=1.0.1) +222 more potentially affected by CVE-2020-15170 via com.ctrip.framework.apollo:apollo-core (>=1.0.0 <=1.7.0)

com.ctrip.framework.apollo:apollo-core MAVEN version =1.0.0, =1.0.0, =0.1.1, =0.1.1, =0.2.3, =0.2.3, =0.2.3, =0.2.3, =0.2.3, =0.4.0, =0.2.3, =0.2.3, =0.2.3, =0.4.0, =0.2.3, =0.4.2 and more Source cves: CVE-2020-15170 Source advisory: OSV:GHSA-XPMX-H7XQ-XFFH...

CVE-2020-15170

apollo-adminservice before version 1.7.1 does not implement access controls. If users expose apollo-adminservice to internetwhich is not recommended, there are potential security issues since apollo-adminservice is designed to work in intranet and it doesn't have access control built-in. Maliciou...

CVE-2020-15170

apollo-adminservice before version 1.7.1 does not implement access controls. If users expose apollo-adminservice to internetwhich is not recommended, there are potential security issues since apollo-adminservice is designed to work in intranet and it doesn't have access control built-in. Maliciou...

CVE-2020-15170

CVE-2020-15170 affects apollo-adminservice prior to version 1.7.1, which does not implement access controls. Several trusted sources indicate that exposing apollo-adminservice to the Internet can allow direct access to APIs, enabling reading/editing of application configurations. The root cause i...