Lucene search
+L

7891 matches found

osv_debian
osv_debian
•added 2021/02/17 3:15 p.m.•6 views

DEBIAN-CVE-2021-22174

Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.5AI score0.02747EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/02/17 3:15 p.m.•10 views

CVE-2021-22174

Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

7.5CVSS7AI score0.02747EPSS
SaveExploits1References10Affected Software1
osv_ubuntu
osv_ubuntu
•added 2021/02/17 3:15 p.m.•16 views

UBUNTU-CVE-2021-22173

Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.1AI score0.02411EPSS
SaveExploits1References4
osv_ubuntu
osv_ubuntu
•added 2021/02/17 3:15 p.m.•13 views

UBUNTU-CVE-2021-22174

Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file...

7.5CVSS7.1AI score0.02747EPSS
SaveExploits1References4
NVD
NVD
•added 2021/02/16 5:15 p.m.•27 views

CVE-2021-23841

The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field which might occur if the...

5.9CVSS0.0741EPSS
SaveExploits0References22
Cvelist
Cvelist
•added 2021/02/16 4:55 p.m.•53 views

CVE-2021-23841 Null pointer deref in X509_issuer_and_serial_hash()

The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field which might occur if the...

6.9AI score0.0741EPSS
SaveExploits0References22
Positive Technologies
Positive Technologies
•added 2021/02/15 12:00 a.m.•4 views

PT-2021-3611

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.1.1i and below OpenSSL versions 1.0.2x and below Description The issue is related to the X509 issuer and serial hash function, which attempts to create a unique hash value based on the issuer and serial number data contained...

5.9CVSS5.5AI score0.0741EPSS
SaveExploits0References411
attackerkb
attackerkb
•added 2021/02/09 2:15 p.m.•14 views

CVE-2021-21140

Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB device...

6.8CVSS6.8AI score0.0076EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/02/08 12:00 a.m.•14 views

PT-2021-5244

Name of the Vulnerable Software and Affected Versions D-Link DIR-2640-US version 1.01B04 Description The issue is related to insufficiently protected credentials. The D-Link AC2600 DIR-2640 stores the device system account password in plain text and does not utilize Linux user management...

7.2CVSS6.7AI score0.01115EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2021/02/04 12:00 a.m.•23 views

LG Mobile Devices With Android OS Resource Management Error Vulnerability

LG mobile is a line of mobile device products from LG. LG Mobile devices Google Android OS 8.0, 8.1, 9.0, and 10 software suffer from a resource management error vulnerability that stems from the USB laf gadget having a use-after-free...

9.8CVSS7.3AI score0.00549EPSS
SaveExploits0References2
Citrix
Citrix
•added 2021/02/03 12:00 a.m.•21 views

Diagnosing an unresponsive Citrix Hypervisor server

This article describes how to diagnose an unresponsive XenServer or Citrix Hypervisor server. If you cannot connect to your Citrix Hypervisor server from XenCenter or other orchestration tool, you can use the steps in this article to attempt to regain access to the unresponsive server and gather...

6.8AI score
SaveExploits0
CNNVD
CNNVD
•added 2021/02/02 12:00 a.m.•18 views

Apple IO Model Buffer Error Vulnerability

Apple IO Model is a module for handling IO operations from Apple USA. Apple IO Model suffers from a buffer error vulnerability that stems from a boundary condition when handling USB files in the Model I / O component in macOS. A local user can insert a specially crafted USB drive to trigger an...

9.3CVSS6AI score0.01087EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/02/02 12:00 a.m.•22 views

Apple Model I/O Buffer Error Vulnerability

Apple IO Model is a module for handling IO operations from Apple USA. A security vulnerability exists in Apple Model I/O. The vulnerability stems from a boundary condition when handling USB files in the Model I / O component in macOS. A local user can insert a specially crafted USB drive to trigg...

7.8CVSS5.8AI score0.0092EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/02/01 12:00 a.m.•21 views

Qualcomm Connectivity Code Issue Vulnerability

Qualcomm Connectivity is a Qualcomm Incorporated USA support component used in chips. A security vulnerability exists in Qualcomm Connectivity that originates from an untrusted pointer dereference when making USB control transfers if multiple requests are made from different standard request...

6.8CVSS6.7AI score0.00174EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/02/01 12:00 a.m.•30 views

Wireshark resource management error vulnerability

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. Wireshark has a denial of service...

7.5CVSS7.1AI score0.02747EPSS
SaveExploits1References13
CNNVD
CNNVD
•added 2021/02/01 12:00 a.m.•22 views

Atlassian Fisheye and Crucible Information Disclosure Vulnerabilities

Atlassian Fisheye and Crucible are both products of Atlassian Australia.Atlassian Fisheye is a suite of source code deep viewing software.Crucible is a suite of code review tools. A security vulnerability exists in versions of Atlassian Fisheye and Crucible prior to 4.8.4 that allows remote...

4.3CVSS5.9AI score0.00868EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/01/05 6:15 p.m.•15 views

CVE-2021-22492

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Broadcom Bluetooth chipsets software. The Bluetooth UART driver has a buffer overflow. The Samsung ID is SVE-2020-18731 January 2021...

8.8CVSS7.7AI score0.00255EPSS
SaveExploits0References2
NVD
NVD
•added 2021/01/05 3:15 p.m.•33 views

CVE-2020-7202

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 iLO 5 and Integrated Lights-Out 4 iLO 4 firmware. The vulnerability could be remotely exploited to disclose the serial number and other information...

5.3CVSS5.2AI score0.0149EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/01/05 3:15 p.m.•24 views

CVE-2020-7202

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 iLO 5 and Integrated Lights-Out 4 iLO 4 firmware. The vulnerability could be remotely exploited to disclose the serial number and other information...

5.3CVSS6AI score0.0149EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/01/05 3:15 p.m.•13 views

CVE-2020-7202

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 iLO 5 and Integrated Lights-Out 4 iLO 4 firmware. The vulnerability could be remotely exploited to disclose the serial number and other information...

5.3CVSS5.5AI score0.0149EPSS
SaveExploits0References2
Rows per page
Query Builder