Lucene search
+L

105 matches found

NVD
NVD
added 2022/11/20 2:15 p.m.14 views

CVE-2022-4081

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

SaveExploits0
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.18 views

Mageia: Security Advisory (MGASA-2013-0180)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS7.6AI score0.60643EPSS
SaveExploits7References9
OSV
OSV
added 2021/12/10 11:15 a.m.20 views

CVE-2021-4081

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.1CVSS6.7AI score
SaveExploits0References2
NVD
NVD
added 2021/12/10 11:15 a.m.18 views

CVE-2021-4081

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.1CVSS0.00755EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/12/10 10:20 a.m.25 views

CVE-2021-4081 Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.5CVSS6.4AI score0.00755EPSS
SaveExploits1References2
CVE
CVE
added 2021/12/10 10:20 a.m.72 views

CVE-2021-4081

CVE-2021-4081 affects pimcore/pimcore and is described as a Cross-site Scripting vulnerability due to Improper Neutralization of Input During Web Page Generation. Concrete detail in the connected data identifies the affected component as the Search Objects functionality in object.js, which enable...

6.1CVSS5.8AI score0.00755EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2021/11/19 12:15 p.m.9 views

AZL-6946 CVE-2021-3973 affecting package vim for versions less than 8.2.4081-1

vim is vulnerable to Heap-based Buffer Overflow...

7.8CVSS7.1AI score0.01669EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2012:0153-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.05679EPSS
SaveExploits10References2
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2013:1276-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6AI score0.60643EPSS
SaveExploits12References4
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.31 views

SUSE: Security Advisory (SUSE-SU-2012:0153-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.05679EPSS
SaveExploits10References2
Circl
Circl
added 2021/02/03 12:55 a.m.8 views

CVE-2020-4081

creationtimestamp| type| source ---|---|--- 2021-02-03 00:55:49+00:00| seen| https://t.me/cibsecurity/22983...

6.1CVSS6.1AI score0.00634EPSS
SaveExploits0References1
CVE
CVE
added 2021/02/02 8:08 p.m.62 views

CVE-2020-4081

CVE-2020-4081 affects HCL Digital Experience WSRP consumer in versions 8.5, 9.0, and 9.5 and is a cross-site scripting (XSS) vulnerability. Root cause cited in CNVD-2021-09494 is lack of proper validation of client-side data in the WEB application. Documented impact is XSS with no additional expl...

6.1CVSS6AI score0.00634EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2019/05/02 4:58 a.m.30 views

Denial Of Service (DoS)

Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...

7.8CVSS6.7AI score0.037EPSS
SaveExploits12References27Affected Software1
Veracode
Veracode
added 2019/05/02 4:58 a.m.33 views

Denial Of Service (DoS)

Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...

7.8CVSS6.7AI score0.037EPSS
SaveExploits12References19Affected Software1
Veracode
Veracode
added 2019/05/02 4:58 a.m.41 views

Integer Overflow

Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...

7.8CVSS6.7AI score0.037EPSS
SaveExploits12References19Affected Software1
CVE
CVE
added 2018/03/16 2:04 p.m.22 views

CVE-2017-4081

CVE-2017-4081 is rejected/not used and does not represent an active vulnerability entry.

7.3AI score
SaveExploits0
OSV
OSV
added 2016/04/25 10:59 a.m.7 views

CVE-2016-4081

epan/dissectors/packet-iax2.c in the IAX2 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses an incorrect integer data type, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...

5.9CVSS5.5AI score
SaveExploits0References6
Cvelist
Cvelist
added 2016/04/25 10:00 a.m.31 views

CVE-2016-4081

epan/dissectors/packet-iax2.c in the IAX2 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses an incorrect integer data type, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...

5.7AI score0.02006EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2016/04/25 10:00 a.m.34 views

CVE-2016-4081

epan/dissectors/packet-iax2.c in the IAX2 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses an incorrect integer data type, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...

5.9CVSS5.5AI score0.02006EPSS
SaveExploits0
CVE
CVE
added 2016/04/25 10:00 a.m.70 views

CVE-2016-4081

CVE-2016-4081 : In Wireshark, the IAX2 dissector (epan/dissectors/packet-iax2.c) uses an incorrect integer data type, enabling a remote attacker to trigger a denial-of-service via a crafted IAX2 packet. Affected: Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3. Mitigation: upgrade to a fix...

5.9CVSS5.5AI score0.02006EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder