Lucene search
K

5102 matches found

Prion
Prion
added 2021/03/05 4:15 a.m.18 views

Default configuration

SonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network, this client probing method allows a potential attacker to capture the password hash of the privileged user and potentially forces the SSO Agent to authenticate allowing an attacker to bypass firewal...

6.4CVSS8.1AI score0.00848EPSS
Exploits0References1Affected Software1
SonicWall
SonicWall
added 2021/03/04 11:48 p.m.8 views

SonicWall SSO-Agent NetAPI Vulnerability allows an attacker to force SSO Agent authentication, potentially leading to firewall access control bypass

SonicWall SSO-agent default configuration uses Microsoft NetAPI to probe the associated IP's in the network, this client probing method allows a potential attacker to capture the password hash of the privileged user and potentially forces the SSO Agent to authenticate allowing an attacker to bypa...

8.2CVSS6.8AI score0.00848EPSS
Exploits0
Gitee
Gitee
added 2021/03/02 10:7 p.m.3 views

nightmare

This repository is an open-source project for teaching binary exploitation and reverse engineering skills through a series of challenges. It is a collection of CTF Capture The Flag challenges designed to help learners develop their skills in exploiting binaries and reversing assembly code. The...

7.1AI score
Exploits0
GithubExploit
GithubExploit
added 2021/03/01 8:44 p.m.1764 views

Exploit for Improper Input Validation in Linux Linux_Kernel

Linux: Heap-Based Type Confusion in L2CAP CVE-2020-12351 L...

8.8CVSS7.6AI score0.07693EPSS
Exploits5
IBM Security Bulletins
IBM Security Bulletins
added 2021/03/01 7:11 p.m.23 views

Security Bulletin: Datacap Taskmaster Capture is affected by vulnerable to AppScan's SSLv3 Client Hello with CBC cipher suites that contain TLS_FALLBACK_SCSV

Summary The server responded with a Handshake to AppScan's SSLv3 Client Hello with CBC cipher suites that contain TLSFALLBACKSCSV Vulnerability Details CVEID: CVE-2014-3566 DESCRIPTION: Multiple products could allow a remote attacker to obtain sensitive information, caused by a design error when...

4.3CVSS0.4AI score0.99999EPSS
Exploits7Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/02/25 12:0 a.m.28 views

Fedora 32 : 1:wireshark (2021-f22ce64b3b)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-f22ce64b3b advisory. - Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file CVE-2021-22173 ...

7.5CVSS7.5AI score0.02747EPSS
Exploits2References3
CNVD
CNVD
added 2021/02/18 12:0 a.m.9 views

Wireshark Memory Disclosure Vulnerability (CNVD-2021-11314)

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. A memory leak vulnerability exist...

7.5CVSS6.7AI score0.02411EPSS
Exploits1References1
NVD
NVD
added 2021/02/17 3:15 p.m.18 views

CVE-2021-22173

Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

7.5CVSS0.02411EPSS
Exploits1References7
OSV
OSV
added 2021/02/17 3:15 p.m.17 views

CVE-2021-22173

Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

7.5CVSS9.3AI score0.02411EPSS
Exploits1References7
UbuntuCve
UbuntuCve
added 2021/02/17 3:15 p.m.26 views

CVE-2021-22173

Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.1AI score0.02411EPSS
Exploits1References3
Prion
Prion
added 2021/02/17 3:15 p.m.16 views

Input validation

Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

5CVSS7.4AI score0.02411EPSS
Exploits1References7Affected Software3
OSV
OSV
added 2021/02/17 3:15 p.m.1 views

UBUNTU-CVE-2021-22173

Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.1AI score0.02411EPSS
Exploits1References4
AlpineLinux
AlpineLinux
added 2021/02/17 2:26 p.m.32 views

CVE-2021-22173

Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.6AI score0.02411EPSS
Exploits1
Cvelist
Cvelist
added 2021/02/17 2:24 p.m.27 views

CVE-2021-22174

Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

3.7CVSS7.8AI score0.02747EPSS
Exploits1References7
CVE
CVE
added 2021/02/17 2:24 p.m.204 views

CVE-2021-22174

Wireshark CVE-2021-22174 affects Wireshark 3.4.0–3.4.2, where a crash in the USB HID dissector can cause a denial of service via crafted captures or packet injections. Remediation per connected advisories is to upgrade to a version with fixes (e.g., Wireshark 3.4.6 or later; 3.4.3–3.4.6 lines app...

7.5CVSS7.4AI score0.02747EPSS
Exploits1References7Affected Software1
AlpineLinux
AlpineLinux
added 2021/02/17 2:24 p.m.52 views

CVE-2021-22174

Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.6AI score0.02747EPSS
Exploits1
Debian CVE
Debian CVE
added 2021/02/17 2:24 p.m.21 views

CVE-2021-22174

Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

7.5CVSS2.7AI score0.02747EPSS
Exploits1
NVD
NVD
added 2021/02/11 6:15 p.m.9 views

CVE-2021-21301

Wire is an open-source collaboration platform. In Wire for iOS iPhone and iPad before version 3.75 there is a vulnerability where the video capture isn't stopped in a scenario where a user first has their camera enabled and then disables it. It's a privacy issue because video is streamed to the...

4.3CVSS0.00919EPSS
Exploits0References3
OSV
OSV
added 2021/02/11 6:15 p.m.11 views

CVE-2021-21301

Wire is an open-source collaboration platform. In Wire for iOS iPhone and iPad before version 3.75 there is a vulnerability where the video capture isn't stopped in a scenario where a user first has their camera enabled and then disables it. It's a privacy issue because video is streamed to the...

4.3CVSS6.4AI score
Exploits0References3
Prion
Prion
added 2021/02/11 6:15 p.m.13 views

Design/Logic Flaw

Wire is an open-source collaboration platform. In Wire for iOS iPhone and iPad before version 3.75 there is a vulnerability where the video capture isn't stopped in a scenario where a user first has their camera enabled and then disables it. It's a privacy issue because video is streamed to the...

4.3CVSS4.3AI score0.00919EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder