Lucene search
+L

6873 matches found

OSV
OSV
added 2021/02/17 3:15 p.m.6 views

UBUNTU-CVE-2021-22174

Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.1AI score0.02747EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2021/02/17 3:15 p.m.3 views

CVE-2021-22174

Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

7.5CVSS7AI score0.02747EPSS
SaveExploits1References10Affected Software1
OSV
OSV
added 2021/02/17 3:15 p.m.5 views

UBUNTU-CVE-2021-22173

Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.1AI score0.02411EPSS
SaveExploits1References4
NVD
NVD
added 2021/02/16 5:15 p.m.19 views

CVE-2021-23841

The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field which might occur if the...

5.9CVSS0.07471EPSS
SaveExploits0References22
Cvelist
Cvelist
added 2021/02/16 4:55 p.m.45 views

CVE-2021-23841 Null pointer deref in X509_issuer_and_serial_hash()

The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field which might occur if the...

6.9AI score0.07471EPSS
SaveExploits0References22
Positive Technologies
Positive Technologies
added 2021/02/08 12:0 a.m.8 views

PT-2021-5244

Name of the Vulnerable Software and Affected Versions D-Link DIR-2640-US version 1.01B04 Description The issue is related to insufficiently protected credentials. The D-Link AC2600 DIR-2640 stores the device system account password in plain text and does not utilize Linux user management...

7.2CVSS6.7AI score0.01115EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2021/02/04 12:0 a.m.11 views

LG Mobile Devices With Android OS Resource Management Error Vulnerability

LG mobile is a line of mobile device products from LG. LG Mobile devices Google Android OS 8.0, 8.1, 9.0, and 10 software suffer from a resource management error vulnerability that stems from the USB laf gadget having a use-after-free...

9.8CVSS7.3AI score0.00549EPSS
SaveExploits0References2
Citrix
Citrix
added 2021/02/03 12:0 a.m.13 views

Diagnosing an unresponsive Citrix Hypervisor server

This article describes how to diagnose an unresponsive XenServer or Citrix Hypervisor server. If you cannot connect to your Citrix Hypervisor server from XenCenter or other orchestration tool, you can use the steps in this article to attempt to regain access to the unresponsive server and gather...

6.8AI score
SaveExploits0
CNNVD
CNNVD
added 2021/02/02 12:0 a.m.10 views

Apple IO Model Buffer Error Vulnerability

Apple IO Model is a module for handling IO operations from Apple USA. Apple IO Model suffers from a buffer error vulnerability that stems from a boundary condition when handling USB files in the Model I / O component in macOS. A local user can insert a specially crafted USB drive to trigger an...

9.3CVSS6AI score0.01089EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/02/02 12:0 a.m.12 views

Apple Model I/O Buffer Error Vulnerability

Apple IO Model is a module for handling IO operations from Apple USA. A security vulnerability exists in Apple Model I/O. The vulnerability stems from a boundary condition when handling USB files in the Model I / O component in macOS. A local user can insert a specially crafted USB drive to trigg...

7.8CVSS5.8AI score0.00922EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/02/01 12:0 a.m.12 views

Atlassian Fisheye and Crucible Information Disclosure Vulnerabilities

Atlassian Fisheye and Crucible are both products of Atlassian Australia.Atlassian Fisheye is a suite of source code deep viewing software.Crucible is a suite of code review tools. A security vulnerability exists in versions of Atlassian Fisheye and Crucible prior to 4.8.4 that allows remote...

4.3CVSS5.9AI score0.00868EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/02/01 12:0 a.m.11 views

Qualcomm Connectivity Code Issue Vulnerability

Qualcomm Connectivity is a Qualcomm Incorporated USA support component used in chips. A security vulnerability exists in Qualcomm Connectivity that originates from an untrusted pointer dereference when making USB control transfers if multiple requests are made from different standard request...

6.8CVSS6.7AI score0.00157EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/02/01 12:0 a.m.14 views

Wireshark 资源管理错误漏洞

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. Wireshark has a denial of service...

7.5CVSS7.1AI score0.02747EPSS
SaveExploits1References13
ATTACKERKB
ATTACKERKB
added 2021/01/05 6:15 p.m.5 views

CVE-2021-22492

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Broadcom Bluetooth chipsets software. The Bluetooth UART driver has a buffer overflow. The Samsung ID is SVE-2020-18731 January 2021...

8.8CVSS7.7AI score0.00252EPSS
SaveExploits0References2
NVD
NVD
added 2021/01/05 3:15 p.m.22 views

CVE-2020-7202

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 iLO 5 and Integrated Lights-Out 4 iLO 4 firmware. The vulnerability could be remotely exploited to disclose the serial number and other information...

5.3CVSS5.2AI score0.01472EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/05 3:15 p.m.8 views

CVE-2020-7202

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 iLO 5 and Integrated Lights-Out 4 iLO 4 firmware. The vulnerability could be remotely exploited to disclose the serial number and other information...

5.3CVSS6AI score0.01472EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/01/05 12:0 a.m.12 views

HPE Integrated Lights-Out and Integrated Lights-Out 5 Information Disclosure Vulnerabilities

HPE Integrated Lights-Out and HPE Integrated Lights-Out 5 iLO 5 are both products of Hewlett Packard Enterprise hpe, U.S.A. HPE Integrated Lights-Out is a remote control solution. HPE Integrated Lights-Out 5 is a remote control solution that enables remote monitoring and operation and maintenance...

5.3CVSS6AI score0.01472EPSS
SaveExploits0References3
Hacker One
Hacker One
added 2020/12/23 1:34 p.m.21 views

Myndr: No Rate Limit On dashboard.myndr.net/auth

Summary: hello team, I tested a little bit the website and went to registration page where you will give 7 digits to complete your switch serial, i didn't want to go further with brute forcing because it's forbidden how ever i gave a try with a small range of tries and have no message for limitti...

0.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:0 a.m.11 views

The vulnerability of the uvc_scan_chain_forward function in Android operating system USB drivers allows a hacker to increase their privileges.

The vulnerability of the uvcscanchainforward function in the Android operating system’s USB driver is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to enhance their privileges...

5.5CVSS6.4AI score0.00232EPSS
SaveExploits0References14Affected Software11
ThreatPost
ThreatPost
added 2020/12/17 5:30 p.m.42 views

Cryptologists Crack Zodiac Killer's 340 Cipher

A remote team of three hobbyist cryptologists have solved one of the Zodiac Killer’s cipher after a half century. And while the name of the elusive serial killer remains hidden, the breakthrough represents a triumph for cryptology and the basic building blocks of cybersecurity — access control an...

7.1AI score
SaveExploits0References10
Rows per page
Query Builder