Lucene search
+L

497 matches found

vulnersOsv
vulnersOsv
•added 2022/06/16 11:51 p.m.•11 views

agnes (>=0.3.0, <=0.3.2), automl (>=0.2.6, <=0.2.7) +1 more potentially affected by CVE-2021-45686 via csv-sniffer (0.1.1)

csv-sniffer CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on csv-sniffer and may be impacted: - agnes =0.3.0, =0.2.6, =0.1.7, =0.1.8 Source cves: CVE-2021-45686 Source advisory: OSV:GHSA-R67P-M7G9-GXW6...

9.8CVSS8.5AI score0.01191EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/06/14 12:00 a.m.•2 views

PT-2022-3908

Name of the Vulnerable Software and Affected Versions Robustel R1510 version 3.3.0 Description Multiple command injection vulnerabilities exist in the web server ajax endpoints functionalities. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a...

10CVSS0.04342EPSS
SaveExploits1References7
OSV
OSV
•added 2022/04/06 9:15 a.m.•12 views

CVE-2020-29013

An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to silently halt the sniffer via specifically crafted requests...

5.4CVSS5.8AI score0.00635EPSS
SaveExploits0References1
Prion
Prion
•added 2022/04/06 9:15 a.m.•22 views

Input validation

An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to silently halt the sniffer via specifically crafted requests...

5.5CVSS5.4AI score0.00635EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2022/04/06 9:05 a.m.•13 views

CVE-2020-29013

An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to silently halt the sniffer via specifically crafted requests...

5.4CVSS6.7AI score0.00635EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/04/06 9:05 a.m.•35 views

CVE-2020-29013

An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to silently halt the sniffer via specifically crafted requests...

5.4CVSS5.4AI score0.00635EPSS
SaveExploits0References1
CVE
CVE
•added 2022/04/06 9:05 a.m.•74 views

CVE-2020-29013

Fortinet FortiSandbox (before 3.2.2) contains an improper input validation vulnerability in the sniffer interface. An authenticated attacker can silence the sniffer by sending crafted requests, potentially impacting availability (CVSS 3.1/5.4). If applicable, update to FortiSandbox 3.2.2 or later...

5.5CVSS5.3AI score0.00635EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/04/06 12:00 a.m.•2 views

PT-2022-8912

Name of the Vulnerable Software and Affected Versions FortiSandbox versions prior to 3.2.2 Description An improper input validation issue in the sniffer interface may allow an authenticated attacker to silently halt the sniffer via specifically crafted requests. Recommendations For versions prior...

5.5CVSS5.8AI score0.00635EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/06 12:00 a.m.•8 views

CVE-2020-29013: Improper Input Validation

An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to silently halt the sniffer via specifically crafted requests...

5.5CVSS5.8AI score0.00635EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2022/02/06 8:30 p.m.•48 views

Espionage - A Network Packet And Traffic Interceptor For Linux. Spoof ARP And Wiretap A Network

Espionage is a network packet sniffer that intercepts large amounts of data being passed through an interface. The tool allows users to to run normal and verbose traffic analysis that shows a live feed of traffic, revealing packet direction, protocols, flags, etc. Espionage can also spoof ARP so,...

7.4AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2022/01/06 10:13 p.m.•47 views

Use of Uninitialized Resource in csv-sniffer.

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation within fn preambleskipcount. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading fro...

9.8CVSS8.9AI score0.01191EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2022/01/06 10:13 p.m.•56 views

GHSA-9783-42PM-X5JQ Use of Uninitialized Resource in csv-sniffer.

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation within fn preambleskipcount. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading fro...

9.8CVSS9.4AI score0.01191EPSS
SaveExploits0References6
vulnersOsv
vulnersOsv
•added 2022/01/06 10:13 p.m.•7 views

agnes (>=0.3.0, <=0.3.2), automl (>=0.2.6, <=0.2.7) +1 more potentially affected by CVE-2021-45686 via csv-sniffer (0.1.1)

csv-sniffer CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on csv-sniffer and may be impacted: - agnes =0.3.0, =0.2.6, =0.1.7, =0.1.8 Source cves: CVE-2021-45686 Source advisory: OSV:GHSA-9783-42PM-X5JQ...

9.8CVSS8.5AI score0.01191EPSS
SaveExploits0
Malwarebytes
Malwarebytes
•added 2021/12/30 5:12 p.m.•27 views

What is IP sniffing?

IP sniffers, also known as packet sniffers, network analyzers, or protocol analyzers, are tools which play an essential role in the monitoring of networks, and in troubleshooting network-related issues. In essence, IP sniffing is monitoring traffic over a TCP/IP network. IP sniffers intercept the...

0.8AI score
SaveExploits0
OSV
OSV
•added 2021/12/27 12:15 a.m.•21 views

CVE-2021-45686

An issue was discovered in the csv-sniffer crate through 2021-01-05 for Rust. preambleskipcount may read from uninitialized memory locations...

9.8CVSS5.8AI score0.01191EPSS
SaveExploits0References2
NVD
NVD
•added 2021/12/27 12:15 a.m.•29 views

CVE-2021-45686

An issue was discovered in the csv-sniffer crate through 2021-01-05 for Rust. preambleskipcount may read from uninitialized memory locations...

9.8CVSS0.01191EPSS
SaveExploits0References2
Prion
Prion
•added 2021/12/27 12:15 a.m.•29 views

Memory corruption

An issue was discovered in the csv-sniffer crate through 2021-01-05 for Rust. preambleskipcount may read from uninitialized memory locations...

7.5CVSS9.3AI score0.01191EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2021/12/27 12:00 a.m.•19 views

Rust csv-sniffer crate 安全漏洞

Rust csv-sniffer crate is This csv-sniffercrate provides methods to infer CSV file details delimiter selection, quoted characters, field count, field data type, etc.. Rust csv-sniffer crate A security vulnerability exists in versions prior to 2021-01-05, which stems from the fact that...

9.8CVSS8.2AI score0.01191EPSS
SaveExploits0References3
CVE
CVE
•added 2021/12/26 9:44 p.m.•87 views

CVE-2021-45686

The CVE-2021-45686 issue affects the csv-sniffer crate (Rust) and is due to preamble_skipcount reading from uninitialized memory locations. This can cause undefined behavior and memory exposure in affected builds. Multiple sources (NVD, Red Hat advisories, OSV/GHSA entries) describe the same root...

9.8CVSS9.2AI score0.01191EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2021/12/26 9:44 p.m.•2 views

CVE-2021-45686

An issue was discovered in the csv-sniffer crate through 2021-01-05 for Rust. preambleskipcount may read from uninitialized memory locations...

9.8CVSS0.01191EPSS
SaveExploits0References7
Rows per page
Query Builder