Lucene search
K

18 matches found

EUVD
EUVD
added 2026/04/30 5:39 a.m.5 views

EUVD-2026-26320

SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.2AI score0.00014EPSS
Exploits1References2
EUVD
EUVD
added 2026/04/30 5:39 a.m.1 views

EUVD-2026-26318

TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution...

8.8CVSS5.9AI score0.00057EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/04/30 12:0 a.m.1 views

PT-2026-36075

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.4 Wireshark versions 4.4.0 through 4.4.14 Description A crash in the BEEP protocol dissector allows for a denial of service. Recommendations Update Wireshark versions 4.6.0 through 4.6.4 to a version newer...

8.8CVSS6AI score0.00057EPSS
Exploits43References51
Cvelist
Cvelist
added 2026/04/26 1:19 p.m.29 views

CVE-2018-25280 Infiltrator Network Security Scanner 4.6 Denial of Service

Infiltrator Network Security Scanner 4.6 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a 6000-byte payload into the Scan Target field and trigger a denial of service condition when the Scan...

6.8CVSS0.00018EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/04/01 12:18 p.m.2 views

CVE-2026-22768

Dell AppSync, versions 4.6.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.3CVSS5.9AI score0.00006EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/20 12:0 a.m.0 views

PT-2026-36256

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.4 Wireshark versions 4.4.0 through 4.4.14 Description A crash in the RDP protocol dissector allows for denial of service and possible code execution. Recommendations At the moment, there is no information...

7.8CVSS6.1AI score0.00032EPSS
Exploits21References103
UbuntuCve
UbuntuCve
added 2026/02/25 3:20 p.m.1 views

CVE-2026-3203

RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service...

7.5CVSS5.9AI score0.00026EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/07/21 12:0 a.m.2 views

Dell AppSync 代码问题漏洞

Dell AppSync is a data backup and recovery management software from Dell. An XML External Entity Reference Improper Restriction vulnerability exists in Dell AppSync version 4.6.0.0, which stems from improper handling of XML external entity parsing. An attacker could exploit this vulnerability to...

4.8CVSS6.2AI score0.00039EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2025/06/20 3:3 p.m.4 views

CVE-2025-52793

Cross-Site Request Forgery CSRF vulnerability in Esselink.nu Esselink.nu Settings esselinknu-settings allows Reflected XSS.This issue affects Esselink.nu Settings: from n/a through = 4.5...

7.1CVSS5.1AI score0.0008EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/02/04 12:0 a.m.4 views

WordPress plugin DSGVO All in one for WP 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

6.5CVSS8.7AI score0.00169EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/09/10 12:0 a.m.3 views

Loftware Spectrum 安全漏洞

Loftware Spectrum is an enterprise label printing solution from Loftware, a comprehensive, cloud-based label printing platform for companies of all sizes. A security vulnerability exists in Loftware Spectrum prior to version 4.6 that stems from HF13 deserialization of untrusted data...

9.8CVSS6.8AI score0.00256EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/07/09 12:0 a.m.2 views

WordPress plugin Generate PDF using Contact Form security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

8.8CVSS6.7AI score0.02806EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.3 views

Micro Focus NetIQ Client Login Extension Security Vulnerability

Micro Focus NetIQ Client Login Extension is a client login extension from Micro Focus UK. A security vulnerability exists in Micro Focus NetIQ Client Login Extension version 4.6, which originates from an authorized bypass of the user control key, allowing privilege escalation, code injection...

7.8CVSS7.2AI score0.00013EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/02/20 12:0 a.m.3 views

PT-2024-18074 · Netiq · Netiq Client Login Extension

Name of the Vulnerable Software and Affected Versions: NetIQ Client Login Extension version 4.6 Description: The issue allows for Authorization Bypass Through User-Controlled Key, enabling Privilege Escalation and Code Injection in the NetIQ OpenText Client Login Extension on Windows...

7.8CVSS7.5AI score0.00013EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/07/06 12:0 a.m.19 views

OpenITCOCKPIT 安全漏洞

It-novum OpenITCOCKPIT is an open source system monitoring tool from It-novum, Germany. A security vulnerability exists in OpenITCOCKPIT prior to version 4.6.6, which stems from the absence of the "Secure" attribute on sensitive cookies in HTTPS sessions...

4.6CVSS5AI score0.00047EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/03/28 12:0 a.m.2 views

Cynet Client Agent 安全漏洞

Cynet Client Agent is a client agent from Cynet Corporation. A security vulnerability exists in Cynet Client Agent version 4.6.0.8010, which stems from a vulnerability that allows EDR protection to be disabled via a process's privilege token...

4.4CVSS5AI score0.00059EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:59 a.m.3 views

SUSE CVE-2016-6608

XSS issues were discovered in phpMyAdmin. This affects the database privilege check and the "Remove partitioning" functionality. Specially crafted database names can trigger the XSS attack. All 4.6.x versions prior to 4.6.4 are affected...

6.1CVSS6.6AI score0.00317EPSS
Exploits0References4
CNVD
CNVD
added 2017/02/06 12:0 a.m.1 views

EMC Documentum D2 Cross-Site Scripting Vulnerability (CNVD-2017-01159)

EMC Documentum D2 is an enterprise-class content management system from EMC. The system manages the entire information lifecycle through creation, modification, tracking and other functions, and it includes a number of extensions, such as Documentum Web Publisher Web Content Management, Documentu...

6.1CVSS6AI score0.0028EPSS
Exploits0References1
Rows per page
Query Builder