51 matches found
MiracleLinux 7 : wireshark-1.10.14-7.el7 (AXSA:2015-660:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-660:01 advisory. Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library,...
CVE-2025-8712
creationtimestamp| type| source ---|---|--- 2025-09-09 15:31:51+00:00| seen| Telegram/1kSz9jXoheQbHg2TX9rmzSAkOUvlTXlE4zzaKCpsCSCeksk...
MAL-2025-8712 Malicious code in @malware-test-heuch-gowls-tholi-serra/test-mlw3-heuch-gowls-tholi-serra (npm)
The package @malware-test-heuch-gowls-tholi-serra/test-mlw3-heuch-gowls-tholi-serra was found to contain malicious code...
CVE-2018-8712
An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data...
Linux Distros Unpatched Vulnerability : CVE-2014-8712
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The buildexpertdata function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 does not...
Linux Distros Unpatched Vulnerability : CVE-2015-8712
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dissecthsdschchannelinfo function in epan/dissectors/packet-umtsfp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does not validate the number...
WordPress GTM Server Side Plugin <= 2.1.19 is vulnerable to Cross Site Scripting (XSS)
Software GTM Server Side Type Plugin Vulnerable versions = 2.1.19 Fixed in 2.1.20 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8712 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID cddfd6eae0a1 Credits vgo0 Required...
CVE-2024-8712
creationtimestamp| type| source ---|---|--- 2024-09-28 11:58:42+00:00| seen| https://t.me/cvedetector/6605...
CVE-2024-8712 GTM Server Side <= 2.1.19 - Reflected Cross-Site Scripting
The GTM Server Side plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.19. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in page...
CVE-2024-8712 GTM Server Side <= 2.1.19 - Reflected Cross-Site Scripting
The GTM Server Side plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.19. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in page...
CVE-2024-8712
CVE-2024-8712 affects GTM Server Side plugin for WordPress; it is a Reflected XSS due to unsafe use of add_query_arg in URLs in all versions ≤ 2.1.19, enabling unauthenticated attackers to inject scripts if a user is tricked into clicking a crafted link. The vulnerability is mitigated by upgradin...
Mageia: Security Advisory (MGASA-2014-0471)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2014:1520-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2016:0109-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-8712
creationtimestamp| type| source ---|---|--- 2020-10-27 23:36:45+00:00| seen| https://t.me/cibsecurity/15634...
CVE-2019-8712
CVE-2019-8712 is a memory corruption vulnerability reported in Apple OS kernels that could allow an app to execute arbitrary code with system privileges. The description notes a fix through improved memory handling, with patches in watchOS 6, iOS 13, and tvOS 13. Connected documents corroborate k...
CVE-2020-8712
CVE-2020-8712 describes a buffer overflow in the verification path of Intel® Server Boards, Server Systems and Compute Modules that may allow an authenticated user to escalate privileges via local access, affecting several Intel hardware families. The Intel advisory (INTEL-SA-00384) lists multipl...
Stack-Based Buffer Overflow
Wireshark, previously known as Ethereal, is a network protocol analyzer, which is used to capture and browse the traffic running on a computer network. Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or...
Denial Of Service (DoS)
Wireshark, previously known as Ethereal, is a network protocol analyzer, which is used to capture and browse the traffic running on a computer network. Several denial of service flaws were found in Wireshark. Wireshark could crash or stop responding if it read a malformed packet off a network, or...
Webmin 1.840 / 1.880 Local File Inclusion Vulnerability
According to its self-reported version, the Webmin install hosted on the remote host is 1.840 or 1.880. It is, therefore, affected by a local file inclusion vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid108563; scriptversion"1.3"; scriptcvsdate"Date:...