1019 matches found
Wireshark Security Updates (wnpa-sec-2018-42_wnpa-sec-2018-43) - Mac OS X
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...
Wireshark Security Updates (wnpa-sec-2018-34 to wnpa-sec-2018-41) - Windows
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...
Design/Logic Flaw
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the HTTP2 dissector could crash. This was addressed in epan/dissectors/packet-http2.c by verifying that header data was found before proceeding to header decompression...
CVE-2018-14367
In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by properly checking for a NULL condition...
CVE-2018-14343
In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. This was addressed in epan/dissectors/packet-ber.c by ensuring that length values do not exceed the maximum signed integer...
Wireshark DICOM Parser Grand Loop Vulnerability
Wireshark formerly known as Ethereal is a set of network packet analysis software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.DICOM dissector is one of the DICOM communication protocol parser. A macrocycle...
Wireshark Bazaar protocol parser infinite loop vulnerability
Wireshark formerly Ethereal is a suite of network packet analysis software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.Bazaar protocol dissector is one of the Bazaar protocol parsers. An infinite loop...
Fedora 27 : knot-resolver (2018-50d055a5af)
Knot Resolver 2.4.0 2018-07-03 ================================ Incompatible changes -------------------- - minimal libknot version is now 2.6.7 to pull in latest fixes 366 Security -------- - fix a rare case of zones incorrectly dowgraded to insecure status !576 New features ------------ - TLS...
CVE-2018-13794
A heap-based buffer overflow exists in stbibmploadcont in stbimage.h in catimg 2.4.0...
DEBIAN-CVE-2018-13794
A heap-based buffer overflow exists in stbibmploadcont in stbimage.h in catimg 2.4.0...
CVE-2018-13794
A heap-based buffer overflow exists in stbibmploadcont in stbimage.h in catimg 2.4.0...
Heap overflow
A heap-based buffer overflow exists in stbibmploadcont in stbimage.h in catimg 2.4.0...
CVE-2018-13794
A heap-based buffer overflow exists in stbibmploadcont in stbimage.h in catimg 2.4.0...
CVE-2018-13794
A heap-based buffer overflow exists in stbibmploadcont in stbimage.h in catimg 2.4.0...
CVE-2018-13794
CVE-2018-13794 affects catimg 2.4.0 due to a heap-based buffer overflow in the function stbi__bmp_load_cont in stb_image.h. The issue is described across multiple connected entries as a heap overflow in the BMP loader, with no explicit exploitation details provided in the documents. The CVSS info...
Balbooa Gridbox Extension Cross-Site Scripting Vulnerability in Joomla!
Joomla! is an American Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features . Balbooa Gridbox extension is used in which a drag-and-drop site building extension . A cross-site scripting vulnerability...
Design/Logic Flaw
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory. This was addressed in epan/tvbuff.c by rejecting negative lengths...
UBUNTU-CVE-2018-11359
In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by avoiding a NULL pointer dereference...
DiliCMS Cross-Site Scripting Vulnerability
DiliCMS aka DiligentCMS is a content management system CMS based on Codelgniter. A cross-site scripting vulnerability exists in the System Settings - Site Settings filing number field of the admin/index.php file in DiliCMS version 2.4.0. A remote attacker can exploit this vulnerability to inject...
Wordpress Activity Log 2.4.0 Plugin - Stored Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title : Activity Log Wordpress Plugin Stored Cross Site Scripting XSS Exploit Author : Stefan Broeder Vendor Homepage: https://pojo.me Software Link: https://wordpress.org/plugins/aryo-activity-log/ Version: 2.4.0 CVE : CVE-2018-8729...