Lucene search
+L

2920 matches found

SUSE CVE
SUSE CVE
•added 2024/02/07 3:45 a.m.•9 views

SUSE CVE-2024-24859

A race condition was found in the Linux kernel's net/bluetooth in sniffmin,maxintervalset function. This can result in a bluetooth sniffing exception issue, possibly leading denial of service...

4.8CVSS6.6AI score0.00712EPSS
SaveExploits0References3
NVD
NVD
•added 2024/02/05 8:15 a.m.•19 views

CVE-2024-24859

A race condition was found in the Linux kernel's net/bluetooth in sniffmin,maxintervalset function. This can result in a bluetooth sniffing exception issue, possibly leading denial of service...

4.8CVSS5AI score0.00712EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2024/02/05 8:15 a.m.•54 views

CVE-2024-24859

A race condition was found in the Linux kernel's net/bluetooth in sniffmin,maxintervalset function. This can result in a bluetooth sniffing exception issue, possibly leading denial of service...

4.8CVSS6.3AI score0.00712EPSS
SaveExploits0References25
Cvelist
Cvelist
•added 2024/02/05 7:28 a.m.•43 views

CVE-2024-24859 Race condition vulnerability in Linux kernel bluetooth sniff_{min,max}_interval_set()

A race condition was found in the Linux kernel's net/bluetooth in sniffmin,maxintervalset function. This can result in a bluetooth sniffing exception issue, possibly leading denial of service...

4.6CVSS5.6AI score0.00712EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2024/02/05 7:28 a.m.•34 views

CVE-2024-24859

A race condition was found in the Linux kernel's net/bluetooth in sniffmin,maxintervalset function. This can result in a bluetooth sniffing exception issue, possibly leading denial of service...

4.8CVSS6.8AI score0.00712EPSS
SaveExploits0
Prion
Prion
•added 2024/01/29 1:15 p.m.•55 views

Design/Logic Flaw

In Apache Kylin version 2.0.0 to 4.0.3, there is a Server Config web interface that displays the content of file 'kylin.properties', that may contain serverside credentials. When the kylin service runs over HTTP or other plain text protocol, it is possible for network sniffers to hijack the HTTP...

5CVSS7.1AI score0.01149EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2024/01/29 12:20 p.m.•99 views

CVE-2023-29055

CVE-2023-29055 affects Apache Kylin 2.0.0–4.0.3, where the Server Config web interface can display the contents of kylin.properties. When accessed over HTTP (or other plaintext protocols), network sniffers may intercept the payload and access potential server-side credentials. The root cause is t...

7.5CVSS7.6AI score0.01149EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/29 12:00 a.m.•4 views

CVE-2023-29055: Insufficiently Protected Credentials

In Apache Kylin version 2.0.0 to 4.0.3, there is a Server Config web interface that displays the content of file 'kylin.properties', that may contain serverside credentials. When the kylin service runs over HTTP or other plain text protocol, it is possible for network sniffers to hijack the HTTP...

7.5CVSS5.9AI score0.01149EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2023/12/15 11:30 a.m.•59 views

PacketSpy - Powerful Network Packet Sniffing Tool Designed To Capture And Analyze Network Traffic

PacketSpy is a powerful network packet sniffing tool designed to capture and analyze network traffic. It provides a comprehensive set of features for inspecting HTTP requests and responses, viewing raw payload data, and gathering information about network devices. With PacketSpy, you can gain...

7.2AI score
SaveExploits0References2
attackerkb
attackerkb
•added 2023/12/05 12:15 a.m.•16 views

CVE-2022-46480

Incorrect Session Management and Credential Re-use in the Bluetooth LE stack of the Ultraloq UL3 2nd Gen Smart Lock Firmware 02.27.0012 allows an attacker to sniff the unlock code and unlock the device whilst within Bluetooth range...

8.1CVSS6.8AI score0.00466EPSS
SaveExploits2References3
Prion
Prion
•added 2023/12/05 12:15 a.m.•36 views

Session fixation

Incorrect Session Management and Credential Re-use in the Bluetooth LE stack of the Ultraloq UL3 2nd Gen Smart Lock Firmware 02.27.0012 allows an attacker to sniff the unlock code and unlock the device whilst within Bluetooth range...

4.8CVSS7.3AI score0.00466EPSS
SaveExploits4References2Affected Software1
Packet Storm
Packet Storm
•added 2023/11/28 12:00 a.m.•382 views

Loytec LINX Configurator 7.4.10 Insecure Transit / Cleartext Secrets

CVE : CVE-2023-46383, CVE-2023-46384, CVE-2023-46385 + Title : Multiple vulnerabilities in Loytec LINX Configurator + Vendor : LOYTEC electronics GmbH + Affected Products : LINX Configurator 7.4.10 + Affected Components : LINX Configurator + Discovery Date : 01-Sep-2021 + Publication date :...

7.4AI score0.01522EPSS
SaveExploits2
zdt
zdt
•added 2023/11/14 12:00 a.m.•524 views

LOYTEC Electronics Insecure Transit / Insecure Permissions / Unauthenticated Access Vulnerabilities

Products from LOYTEC electronics such as Loytec LWEB-802, L-INX Automation Servers, L-IOB I/O Controllers, and L-VIS Touch Panels suffer from improper access control and insecure transit vulnerabilities. + CVE : CVE-2023-46380, CVE-2023-46381, CVE-2023-46382 + Title : Multiple vulnerabilities in...

8.2CVSS7.5AI score0.07381EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2023/09/07 12:00 a.m.•37 views

Oracle Linux 7 : python-requests (ELSA-2019-2035)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-2035 advisory. 2.6.0-5 - Fix CVE-2018-18074 Resolves: rhbz1647368 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

7.5CVSS6.9AI score0.07443EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2023/09/07 12:00 a.m.•40 views

Oracle Linux 8 : python27:2.7 (ELSA-2020-1605)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1605 advisory. - The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect...

9.8CVSS6.5AI score0.07443EPSS
SaveExploits4References7
Tenable Nessus
Tenable Nessus
•added 2023/09/07 12:00 a.m.•38 views

Oracle Linux 7 : kernel (ELSA-2019-2029)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2029 advisory. - scsi scsi: megaraidsas: return error when create DMA pool failed Tomas Henzl 1712861 CVE-2019-11810 - net tcp: enforce tcpminsndmss in tcpmtuprobing...

8.4CVSS7.2AI score0.98745EPSS
SaveExploits16References26
Kitploit
Kitploit
•added 2023/09/06 11:30 a.m.•41 views

ICMPWatch - ICMP Packet Sniffer

ICMP Packet Sniffer is a Python program that allows you to capture and analyze ICMP Internet Control Message Protocol packets on a network interface. It provides detailed information about the captured packets, including source and destination IP addresses, MAC addresses, ICMP type, payload data,...

7AI score
SaveExploits0References1
osv_cve
osv_cve
•added 2023/09/05 5:15 p.m.•17 views

CVE-2023-34998

An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to arbitrary authentication. An attacker can sniff network traffic to trigger this vulnerability...

8.1CVSS5.9AI score0.01197EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/09/05 5:15 p.m.•22 views

CVE-2023-34353

An authentication bypass vulnerability exists in the OAS Engine authentication functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted network sniffing can lead to decryption of sensitive information. An attacker can sniff network traffic to trigger this...

7.5CVSS5.8AI score0.01211EPSS
SaveExploits1References2
NVD
NVD
•added 2023/09/05 5:15 p.m.•45 views

CVE-2023-34353

An authentication bypass vulnerability exists in the OAS Engine authentication functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted network sniffing can lead to decryption of sensitive information. An attacker can sniff network traffic to trigger this...

7.5CVSS7.7AI score0.01211EPSS
SaveExploits1References2
Rows per page
Query Builder