Lucene search
+L

5628 matches found

Positive Technologies
Positive Technologies
added 2024/08/30 12:00 a.m.5 views

PT-2024-6095 · Libpcap +3 · Libpcap +3

Name of the Vulnerable Software and Affected Versions: libpcap affected versions not specified Description: The issue is related to a null pointer dereference in the pcap findalldevs ex function of the libpcap library. This function becomes available when a user builds libpcap with remote packet...

4.4CVSS7.9AI score0.00242EPSS
SaveExploits0References45
BDU FSTEC
BDU FSTEC
added 2024/08/30 12:00 a.m.17 views

The vulnerability of IBM QRadar Network Packet Capture in capturing network traffic lies in the lack of data encryption measures, which allows attackers to disclose protected information.

The vulnerability of IBM QRadar Network Packet Capture relates to the lack of measures for data encryption. Exploiting this vulnerability could allow a malicious actor to disclose protected information by executing a “man-in-the-middle” attack...

5.9CVSS5.4AI score0.00303EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/08/30 12:00 a.m.6 views

libpcap 代码问题漏洞

libpcap is a portable C/C ++ library for network traffic capture from the Tcpdump team. A code issue vulnerability exists in libpcap, which stems from improper handling of filesystem paths in the pcapfindalldevsex function. When the specified path cannot be used as a directory, the function fails...

4.4CVSS6.3AI score0.00242EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2024/08/30 12:00 a.m.7 views

PT-2024-6379 · Libpcap +3 · Libpcap +3

Name of the Vulnerable Software and Affected Versions: libpcap versions affected versions not specified Description: The issue is related to the function freeaddrinfo in the libpcap library, where it is called for the same allocated memory block, potentially leading to a denial of service. During...

4.4CVSS8.1AI score0.00242EPSS
SaveExploits0References52
NVD
NVD
added 2024/08/29 12:15 a.m.22 views

CVE-2024-8250

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

7.8CVSS0.00317EPSS
SaveExploits1References3
OSV
OSV
added 2024/08/29 12:15 a.m.3 views

DEBIAN-CVE-2024-8250

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

5.5CVSS6.2AI score0.00317EPSS
SaveExploits1References1
OSV
OSV
added 2024/08/29 12:15 a.m.8 views

AZL-48338 CVE-2024-8250 affecting package wireshark 4.0.8-1

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

5.5CVSS7.1AI score0.00317EPSS
SaveExploits1References1
OSV
OSV
added 2024/08/29 12:15 a.m.10 views

AZL-48339 CVE-2024-8250 affecting package wireshark for versions less than 4.4.7-1

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

5.5CVSS7.1AI score0.00317EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/08/28 11:30 p.m.52 views

CVE-2024-8250 Expired Pointer Dereference in Wireshark

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

7.8CVSS0.00317EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2024/08/28 11:30 p.m.24 views

CVE-2024-8250

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

7.8CVSS6.2AI score0.00317EPSS
SaveExploits1
OSV
OSV
added 2024/08/28 11:30 p.m.24 views

CVE-2024-8250 Expired Pointer Dereference in Wireshark

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

7.8CVSS6.3AI score
SaveExploits0References5
OSV
OSV
added 2024/08/21 3:29 p.m.15 views

GO-2022-0889 Authentication bypass by capture-replay in github.com/cosmos/ethermint

Authentication bypass by capture-replay in github.com/cosmos/ethermint...

7.5CVSS7.5AI score0.01309EPSS
SaveExploits0References5
OSV
OSV
added 2024/08/21 3:29 p.m.42 views

GO-2022-0813 Authentication bypass by capture-replay in github.com/cosmos/ethermint

Authentication bypass by capture-replay in github.com/cosmos/ethermint...

7.5CVSS7.6AI score0.01147EPSS
SaveExploits0References5
OSV
OSV
added 2024/08/21 2:30 p.m.15 views

GO-2022-0310 Capture-replay in Gitea in code.gitea.io/gitea

Capture-replay in Gitea in code.gitea.io/gitea...

9.8CVSS9.4AI score0.02139EPSS
SaveExploits0References9
OSV
OSV
added 2024/08/20 8:29 p.m.51 views

GO-2023-1659 Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer

Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer...

9.8CVSS9.4AI score0.00837EPSS
SaveExploits1References4
OSV
OSV
added 2024/08/15 5:15 p.m.10 views

CVE-2024-31905

IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

5.9CVSS5.8AI score0.00303EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/15 5:15 p.m.28 views

CVE-2024-31905

IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

5.9CVSS0.00303EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/15 4:56 p.m.38 views

CVE-2024-31905 IBM QRadar Network Packet Capture information disclosure

IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

5.9CVSS0.00303EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/15 4:56 p.m.16 views

CVE-2024-31905 IBM QRadar Network Packet Capture information disclosure

IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

5.9CVSS6AI score0.00303EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/15 4:56 p.m.73 views

CVE-2024-31905

IBM QRadar Network Packet Capture 7.5 is affected by CVE-2024-31905 due to failure to properly enable HTTP Strict Transport Security, enabling man-in-the-middle–style access to sensitive information. The issue is network-exploitable (AV:N, AC:H, PR:N, UI:N, S:U) with confidentiality impact HIGH a...

5.9CVSS6AI score0.00303EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder