44 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-76920
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76920 Note that Nessus relies on the presence of the...
CVE-2026-76920
3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76920
Wireshark versions 4.6.0–4.6.7 and 4.4.0–4.4.18 contain an out-of-bounds write in the 3GPP phone log file parser, triggered by a crafted log file, causing a denial-of-service crash. CVSS 4.7 (Medium) requires local access and user interaction. No in-the-wild exploitation is reported; upgrade to a...
PT-2026-78856
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A crash in the 3gpp phone log file parser allows for a denial of service. This is caused by an out-of-bounds write, which occurs when the software write...
EUVD-2026-43563
luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address from log lines regardless of field position, allowing attackers to inject arbitrary IPs via attacker-controlled fields like usernames. An unauthenticated remote attacker can inject an IP...
CVE-2026-62184
luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address from log lines regardless of field position, allowing attackers to inject arbitrary IPs via attacker-controlled fields like usernames. An unauthenticated remote attacker can inject an IP...
CVE-2026-62184 luci-app-banip Log Monitor IP Extraction Bypass
luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address from log lines regardless of field position, allowing attackers to inject arbitrary IPs via attacker-controlled fields like usernames. An unauthenticated remote attacker can inject an IP...
[SECURITY] Fedora 42 Update: rust-crypto-auditing-log-parser-0.2.3-3.fc42
Event log parser for crypto-auditing project...
MiracleLinux 9 : wireshark-3.4.10-6.el9 (AXSA:2023-6852:02)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6852:02 advisory. wireshark: RTPS dissector crash CVE-2023-0666 wireshark: IEEE C37.118 Synchrophasor dissector crash CVE-2023-0668 wireshark: Candump log file parser...
Improper Validation of Specified Quantity in Input
Overview Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via the Syslog parser or the Dissect configuration processor. An attacker can cause a denial of service by sending a malformed Syslog message or crafting a malicious tokenizer pattern...
CVE-2025-68383
CVE-2025-68383 affects Filebeat Syslog parser and the Libbeat Dissect processor. A malformed Syslog message or a malicious tokenizer pattern in the Dissect configuration can trigger a Buffer Overflow (CAPEC-100) and cause a denial of service (panic/crash) of the Filebeat process. Exploitation det...
EUVD-2019-7516
Malware in sbrugna...
EUVD-2022-5844
Malicious code in bioql PyPI...
EUVD-2023-34305
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2019-17042
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap overflow in the parser for Cisco log messages. The parser tries to...
Linux Distros Unpatched Vulnerability : CVE-2023-2855
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file CVE-2023-2855 Note that Nessus relies...
Linux Distros Unpatched Vulnerability : CVE-2019-17041
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Rsyslog v8.1908.0. contrib/pmaixforwardedfrom/pmaixforwardedfrom.c has a heap overflow in the parser for AIX log messages. The parser...
dji-log-parser (>=0.5.0, <=0.5.7) potentially affected by unknown CVE via tsify-next (0.5.6)
tsify-next CARGO version 0.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on tsify-next and may be impacted: - dji-log-parser =0.5.0, =0.5.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0048...
