652 matches found
Wireshark Security Update (wnpa-sec-2024-13) - Linux
Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...
Wireshark Security Update (wnpa-sec-2024-13) - Windows
Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...
Wireshark Security Update (wnpa-sec-2024-13) - Mac OS X
Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...
Wireshark Security Update (wnpa-sec-2024-12) - Linux
Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...
Wireshark Security Update (wnpa-sec-2024-12) - Windows
Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...
Wireshark Security Update (wnpa-sec-2024-12) - Mac OS X
Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...
DEBIAN-CVE-2024-9781
AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file...
CVE-2024-9780
ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file...
PT-2024-7665
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.2.0 through 4.2.7 Wireshark version 4.4.0 Description The issue is related to incorrect handling of missing values in the AppleTalk Dissector and RELOAD Framing Dissector for Wireshark, which can lead to a denial of servic...
Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator.
This issue affects Apache Lucene's replicator module: from 4.4.0 before 9.12.0. The deprecated org.apache.lucene.replicator.http package is affected. The org.apache.lucene.replicator.nrt package is not affected. Users are recommended to upgrade to version 9.12.0, which fixes the issue. The...
WordPress Starter Templates plugin <= 4.4.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by wcraft Patchstack Alliance in WordPress Plugin Starter Templates versions = 4.4.0...
WordPress Starter Templates Plugin <= 4.4.0 is vulnerable to Cross Site Scripting (XSS)
Software Starter Templates Type Plugin Vulnerable versions = 4.4.0 Fixed in 4.4.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47345 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID faea2a68ca24 Credits wcraft Required privilege Author...
eNMS 安全漏洞
eNMS is a network automation platform from eNMS Open Source. A security vulnerability exists in eNMS versions 4.4.0 through 4.7.1, which stems from vulnerability to directory traversal attacks via uploadfiles...
CVE-2024-46644
eNMS 4.4.0 to 4.7.1 is vulnerable to Directory Traversal via editfile...
CVE-2024-46644
CVE-2024-46644 affects eNMS, versions 4.4.0–4.7.1, due to a directory traversal vulnerability in the edit_file function. The root cause allows an attacker to access sensitive files/directories, with confidentiality impact classified as High. Practical impact is limited to the listed versions; no ...
CVE-2024-46648
CVE-2024-46648 affects eNMS versions 4.4.0–4.7.1. The issue is a Directory Traversal via the scan_folder feature, allowing access to files/directories outside the intended scope. Root cause details are reported across multiple sources (eNMS releases 4.4.0–4.7.1; directory traversal via scan_folde...
PT-2024-32089 · Enms · Enms
Name of the Vulnerable Software and Affected Versions: eNMS versions 4.4.0 through 4.7.1 Description: The issue is related to Directory Traversal via edit file. This allows unauthorized access to sensitive files and directories. Recommendations: For versions 4.4.0 through 4.7.1, consider...
CVE-2024-25633 In eLabFTW, if administrators can create users, users can too
eLabFTW is an open source electronic lab notebook for research labs. In an eLabFTW system, one can configure who is allowed to create new user accounts. A vulnerability has been found starting in version 4.4.0 and prior to version 5.0.0 that allows regular users to create new, validated accounts ...
CVE-2024-37386
An issue was discovered in Stormshield Network Security SNS 4.0.0 through 4.3.25, 4.4.0 through 4.7.5, and 4.8.0. Certain manipulations allow restarting in single-user mode despite the activation of secure boot. The following versions fix this: 4.3.27, 4.7.6, and 4.8.2...
