963 matches found
CVE-2017-7143
MODE C: CVE-2017-7143 affects macOS before 10.13 in the Captive Network Assistant, where a UI state/portal handling issue can cause cleartext passwords to be transmitted over the network in opportunistic scenarios. The connected Apple security content page HT208144 confirms the vulnerable compone...
CVE-2014-8878
KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive information by sniffing the network...
CVE-2014-8878
KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive information by sniffing the network...
Information disclosure
KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive information by sniffing the network...
CVE-2014-8878
Removed by vendor...
CVE-2014-8878
KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive information by sniffing the network...
Apple macOS Information Disclosure Vulnerability (CNVD-2017-34318)
Apple macOS High Sierra is a suite of Apple's proprietary operating systems developed specifically for Mac computers.The Captive Network Assistant component is one of the network connection verification components. A security vulnerability exists in the Captive Network Assistant component of Appl...
Packet Manipulation Framework: PcapPlusPlus
PcapPlusPlus is a multiplatform C++ network sniffing and packet parsing and manipulation framework. PcapPlusPlus is meant to be lightweight, efficient and easy to use. What makes PcapPlusPlus different from similar C++ wrappers for libpcap/WinPcap? Designed to be lightweight and efficient Support...
Design/Logic Flaw
The Boozt Fashion application before 2.3.4 for Android allows remote attackers to read login credentials by sniffing the network and leveraging the lack of SSL. NOTE: the vendor response, before the application was changed to enable SSL logins, was "At the moment that is an accepted risk. We only...
CVE-2017-11706
The Boozt Fashion application before 2.3.4 for Android allows remote attackers to read login credentials by sniffing the network and leveraging the lack of SSL. NOTE: the vendor response, before the application was changed to enable SSL logins, was "At the moment that is an accepted risk. We only...
CVE-2017-11706
The CVE concerns the Boozt Fashion Android app prior to version 2.3.4. A remote attacker could read login credentials by sniffing network traffic due to the absence of SSL on login, as described in multiple sources. The vulnerability is tied to insecure credential transmission rather than a clien...
CVE-2017-11655
A memory leak was found in the way SIPcrack 0.2 handled processing of SIP traffic, because a lines array was mismanaged. A remote attacker could potentially use this flaw to crash long-running sipdump network sniffing sessions...
CVE-2017-11655
A memory leak was found in the way SIPcrack 0.2 handled processing of SIP traffic, because a lines array was mismanaged. A remote attacker could potentially use this flaw to crash long-running sipdump network sniffing sessions...
CVE-2017-11655
A memory leak was found in the way SIPcrack 0.2 handled processing of SIP traffic, because a lines array was mismanaged. A remote attacker could potentially use this flaw to crash long-running sipdump network sniffing sessions...
CVE-2017-11655
A memory leak was found in the way SIPcrack 0.2 handled processing of SIP traffic, because a lines array was mismanaged. A remote attacker could potentially use this flaw to crash long-running sipdump network sniffing sessions...
CVE-2017-11655
CVE-2017-11655 affects SIPcrack 0.2; a mismanaged lines array causes a memory leak that can crash long-running sipdump sessions (denial of service). Descriptions are consistent across NVD/Nessus/OSV/CNVD entries. No exploit specifics or patches are provided in the connected documents.
CVE-2017-11655
A memory leak was found in the way SIPcrack 0.2 handled processing of SIP traffic, because a lines array was mismanaged. A remote attacker could potentially use this flaw to crash long-running sipdump network sniffing sessions...
CVE-2017-9245
The Google News and Weather application before 3.3.1 for Android allows remote attackers to read OAuth tokens by sniffing the network and leveraging the lack of SSL...