Lucene search
+L

1400 matches found

NCSC
NCSC
•added 2021/11/25 12:00 a.m.•19 views

Vulnerability fixed in VxWorks

A vulnerability has been fixed in Wind River VxWorks 6.9 and 7. A malicious party could potentially exploit the vulnerability to cause a Denial-of-Service by sending a specially prepared network packet to the IKE service. Wind River has released updates to fix the vulnerability fix in VxWorks. Fo...

6.5CVSS6.8AI score0.00876EPSS
SaveExploits0
CNVD
CNVD
•added 2021/11/22 12:00 a.m.•42 views

Wireshark Input Validation Error Vulnerability (CNVD-2022-11205)

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from an input validation error vulnerability that can be exploited by...

7.5CVSS7.3AI score0.05563EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/11/21 12:00 a.m.•58 views

Wireshark Input Validation Error Vulnerability (CNVD-2021-91421)

Wireshark is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.Wireshark suffers from an input validation error vulnerability that stems from insufficient validation in the Modbu...

7.5CVSS5.4AI score0.03373EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/11/19 12:00 a.m.•46 views

Wireshark null pointer dereference vulnerability (CNVD-2021-94899)

Wireshark is a network packet analysis software. Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card.A null pointer dereference vulnerability exists in the IPPUSB parser in Wireshark versions 3.4.0 - 3.4.9. An attacker could exploit this vulnerability to...

7.5CVSS4.3AI score0.03289EPSS
SaveExploits1References1
Veracode
Veracode
•added 2021/11/17 10:37 p.m.•66 views

Network Packet Injection

kernel-rt is vulnerable to network package injection. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 i.e., LLC/SNAP header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent...

6.5CVSS2.8AI score0.04913EPSS
SaveExploits0References10Affected Software2
Tenable Nessus
Tenable Nessus
•added 2021/11/12 12:00 a.m.•64 views

Oracle Linux 8 : virt:ol / and / virt-devel:rhel (ELSA-2021-1762)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1762 advisory. - Resolves: bz1917451 CVE-2020-29443 virt:rhel/qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands rhel-8.4.0 - Resolves: bz1919111...

8.2CVSS7AI score0.01888EPSS
SaveExploits3References10
AlmaLinux
AlmaLinux
•added 2021/11/02 7:46 a.m.•30 views

iptables bug fix and enhancement update

The iptables utility controls the network packet filtering code in the Linux kernel. Bug Fixes and Enhancements: iptables-nft returns incorrect result for -C when concurrently running BZ1990016...

7.2AI score
SaveExploits0
Rockylinux
Rockylinux
•added 2021/11/02 7:46 a.m.•22 views

iptables bug fix and enhancement update

An update is available for iptables. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The iptables utility controls the network packet filtering code in the Linux...

1.8AI score
SaveExploits0
CNNVD
CNNVD
•added 2021/10/27 12:00 a.m.•18 views

Cisco Firepower Threat Defense Access Control Vulnerability

Cisco Firepower Threat Defense FTD is a suite of unified software from Cisco that provides next-generation firewall services. A security vulnerability exists in Cisco Firepower Threat Defense that results from incomplete processing during deep packet inspection of ENIP packets. An attacker could...

7.5CVSS7.4AI score0.01007EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
•added 2021/10/14 8:23 p.m.•121 views

Security Bulletin: Kernel as used by IBM QRadar Network Packet Capture contains multiple vulnerabilities

Summary Kernel as used by IBM QRadar Network Packet Capture contains multiple vulnerabilities Vulnerability Details CVEID: CVE-2020-12362 DESCRIPTION: Intel Graphics Drivers could allow a local authenticated attacker to gain elevated privileges on the system, caused by an integer overflow in the...

8.8CVSS7.4AI score0.01365EPSS
SaveExploits2Affected Software1
NVD
NVD
•added 2021/10/12 2:15 p.m.•42 views

CVE-2021-21940

A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted network packet can lead to a heap buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

10CVSS0.01335EPSS
SaveExploits1References1
Prion
Prion
•added 2021/10/12 2:15 p.m.•39 views

Heap overflow

A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted network packet can lead to a heap buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

7.5CVSS9.5AI score0.01335EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/10/12 1:35 p.m.•55 views

CVE-2021-21940

A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted network packet can lead to a heap buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

10CVSS9.8AI score0.01335EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/12 12:00 a.m.•9 views

CVE-2021-21940: Heap-based Buffer Overflow

A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted network packet can lead to a heap buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

10CVSS6.4AI score0.01335EPSS
SaveExploits1References3
NVD
NVD
•added 2021/09/29 8:15 p.m.•26 views

CVE-2021-35945

Couchbase Server 6.5.x, 6.6.0 through 6.6.2, and 7.0.0, has a Buffer Overflow. A specially crafted network packet sent from an attacker can crash memcached...

7.5CVSS0.01093EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/09/29 8:15 p.m.•19 views

CVE-2021-35945

Couchbase Server 6.5.x, 6.6.0 through 6.6.2, and 7.0.0, has a Buffer Overflow. A specially crafted network packet sent from an attacker can crash memcached...

7.5CVSS7.1AI score0.01093EPSS
SaveExploits0References2
Prion
Prion
•added 2021/09/29 8:15 p.m.•24 views

Buffer overflow

Couchbase Server 6.5.x, 6.6.x through 6.6.2, and 7.0.0 has a Buffer Overflow. A specially crafted network packet sent from an attacker can crash memcached...

5CVSS7.5AI score0.01093EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2021/09/29 8:15 p.m.•30 views

Buffer overflow

Couchbase Server 6.5.x, 6.6.0 through 6.6.2, and 7.0.0, has a Buffer Overflow. A specially crafted network packet sent from an attacker can crash memcached...

5CVSS7.5AI score0.01093EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/09/29 8:15 p.m.•15 views

CVE-2021-35944

Couchbase Server 6.5.x, 6.6.x through 6.6.2, and 7.0.0 has a Buffer Overflow. A specially crafted network packet sent from an attacker can crash memcached...

7.5CVSS7.1AI score0.01093EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/09/29 7:11 p.m.•40 views

CVE-2021-35945

Couchbase Server 6.5.x, 6.6.0 through 6.6.2, and 7.0.0, has a Buffer Overflow. A specially crafted network packet sent from an attacker can crash memcached...

7.7AI score0.01093EPSS
SaveExploits0References2
Rows per page
Query Builder