CVE-2023-3648

Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or crafted capture file...

CVE-2023-3648

CVE-2023-3648 affects Wireshark’s Kafka dissector, with crashes and potential DoS when processing crafted packets or captures in Wireshark 4.0.0–4.0.6 and 3.6.0–3.6.14. The provided documents confirm the affected versions and the denial-of-service impact but do not specify a fixed, patched versio...

Wireshark 3.6.x < 3.6.15 A Vulnerability

The version of Wireshark installed on the remote Windows host is prior to 3.6.15. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.6.15 advisory. - Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or...

Wireshark 4.0.x < 4.0.7 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.7 advisory. - iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or...

Wireshark 3.6.x < 3.6.15 A Vulnerability (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.6.15. It is, therefore, affected by a vulnerability as referenced in the wireshark-3.6.15 advisory. - Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet...

KLA61757 Multiple vulnerabilities in Wireshark

Multiple vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in iSCSI dissector can be exploited to cause denial of service. 2. Denial of service...

Debian: Security Advisory (DSA-2345-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-3648

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none...

SUSE CVE-2010-3648

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service memory corruption via unknown vectors, a different vulnerability...

SUSE: Security Advisory (SUSE-SU-2022:4277-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:4146-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-3648

creationtimestamp| type| source ---|---|--- 2022-07-01 18:39:39+00:00| seen| https://t.me/cibsecurity/45478...

CVE-2014-3648

The simplepush server iterates through the application installations and pushes a notification to the server provided by deviceToken. But this is user controlled. If a bogus applications is registered with bad deviceTokens, one can generate endless exceptions when those endpoints can't be reached...

CVE-2014-3648

The CVE-2014-3648 issue concerns the simplepush server, where notifications are pushed for each registered installation using a deviceToken supplied by the user. The vulnerability arises because a bogus application can register with bad deviceTokens or point to arbitrary HTTP endpoints. This can ...

CVE-2021-3648

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3530. Reason: This candidate is a reservation duplicate of CVE-2021-3530. Notes: All CVE users should reference CVE-2021-3530 instead of this...

SUSE: Security Advisory (SUSE-SU-2017:2290-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-3648

CVE-2020-3648 affects Qualcomm MSM8909W DSP driver code (Snapdragon lines) where a lack of validation of data from user can cause an out-of-bounds write. The Red Hat/PRION/CVE records align on the same underlying issue in the DSP driver, with descriptions indicating an out-of-bounds write stemmin...

CVE-2017-3648

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Charsets. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple...

CVE-2019-3648

creationtimestamp| type| source ---|---|--- 2019-11-13 10:46:27+00:00| seen| Telegram/RXHhu4vFzLzqtuN4H7irgvuWLhrl5xuuMSXbv-3jWzWo 2019-11-14 15:03:51+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6138 2020-01-21 08:41:45+00:00| seen| https://t.me/truesecator/55 2024-10-11...

CVE-2019-3648

A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission...