Lucene search
K

348 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 4 days ago7 views

Malicious code in bt-signal-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d56152c37c3a078b771d2578dd86495783b51b886c96aa7ebb66a7ec36d72a24 During import, package exfiltrates environment variables and cloud tokens to a hardcoded location. --- Category: MALICIOUS - The campaign has clearly malicious...

5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2026/05/28 12:0 a.m.5 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the virtiobt driver. In this driver, the virtbtrxhandle function does not check whether the...

5.9AI score0.00032EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/05/11 12:0 a.m.7 views

PT-2026-39881

Name of the Vulnerable Software and Affected Versions MantisBT affected versions not specified Description An authenticated user can inject arbitrary HTML by updating the font family of their account. This leads to cross-site scripting, where the injected payload is reflected on every page of the...

7.2CVSS5.8AI score0.00056EPSS
Exploits0References10
Tenable Nessus
Tenable Nessus
added 2026/05/10 12:0 a.m.6 views

openSUSE 16 Security Update : wireshark (openSUSE-SU-2026:20685-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20685-1 advisory. This update for wireshark fixes the following issues - CVE-2026-3201: missing limit checks in USB HID protocol dissector's parsereportdescriptor...

7.8CVSS6.5AI score0.00034EPSS
Exploits34References99
OSV
OSV
added 2026/05/09 12:31 p.m.2 views

OESA-2026-2226 wireshark security update

Wireshark is an open source tool for profiling network traffic and analyzing packets. Such a tool is often referred to as a network analyzer, network protocol analyzer or sniffer. Security Fixes: ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of...

7.8CVSS5.9AI score0.00023EPSS
Exploits37References38
SUSE CVE
SUSE CVE
added 2026/05/01 2:12 a.m.4 views

SUSE CVE-2026-5408

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.3AI score0.00016EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2026/05/01 12:0 a.m.1 views

Wireshark 4.4.x < 4.4.15 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.4.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.15 advisory. - RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of servic...

7.8CVSS7AI score0.00176EPSS
Exploits39References142
NVD
NVD
added 2026/04/30 7:16 a.m.2 views

CVE-2026-5408

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS0.00016EPSS
Exploits1References3
OSV
OSV
added 2026/04/30 7:16 a.m.2 views

UBUNTU-CVE-2026-5408

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.8AI score0.00016EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/04/30 5:40 a.m.1 views

CVE-2026-5408

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.2AI score0.00016EPSS
Exploits1References3Affected Software1
EUVD
EUVD
added 2026/04/30 5:40 a.m.2 views

EUVD-2026-26321

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.2AI score0.00016EPSS
Exploits1References2
AlpineLinux
AlpineLinux
added 2026/04/30 5:40 a.m.4 views

CVE-2026-5408

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.8AI score0.00016EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2026/04/30 12:0 a.m.1 views

CVE-2026-5408

BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.8AI score0.00016EPSS
Exploits1References1
OSV
OSV
added 2026/04/28 9:54 a.m.3 views

CLSA-2026-1777370059 wireshark: Fix of 7 CVEs

CVE-2021-4181: sysdig event dissector SIGSEGV fix - CVE-2021-4182: rfc7468 file parser infinite loop fix - CVE-2021-4184: bt-dht endless loop fix - CVE-2021-4186: gryphon NULL pktinfo dereference fix - CVE-2021-4190: kafka dissector varint strictness fix - CVE-2022-0581: cms dissector...

7.5CVSS7.4AI score0.00324EPSS
Exploits7References1
CNNVD
CNNVD
added 2026/04/22 12:0 a.m.5 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an oversight in the SCO backup settings table index in the btusb driver. This oversight may lead to...

5.5CVSS5.8AI score0.00015EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/07 5:52 a.m.3 views

CVE-2025-12803

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin 'btbbtabs' shortcode in all versions up to, and including, 5.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.6AI score0.00014EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/02/07 5:52 a.m.2 views

CVE-2025-12803 Bold Builder <= 5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin 'btbbtabs' shortcode in all versions up to, and including, 5.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.7AI score0.00014EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/02/07 12:0 a.m.2 views

PT-2026-6878

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin 'bt bb tabs' shortcode in all versions up to, and including, 5.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

6.4CVSS5.7AI score0.00014EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/11/04 12:0 a.m.2 views

MantisBT 安全漏洞

MantisBT is a Web-based open source defect tracking system from the MantisBT team. The system provides project management and defect tracking services in a web-operated format. A security vulnerability exists in MantisBT version 2.27.1 and prior versions, which stems from a failure to verify...

5.4CVSS6.2AI score0.00026EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2007-5361

Malware in sbrugna...

4.3CVSS6.4AI score0.00409EPSS
Exploits0References6
Rows per page
Query Builder