Lucene search
+L

5582 matches found

OSV
OSV
added 2024/08/29 12:15 a.m.8 views

AZL-48338 CVE-2024-8250 affecting package wireshark 4.0.8-1

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

5.5CVSS7.1AI score0.00317EPSS
SaveExploits1References1
OSV
OSV
added 2024/08/29 12:15 a.m.10 views

AZL-48339 CVE-2024-8250 affecting package wireshark for versions less than 4.4.7-1

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

5.5CVSS7.1AI score0.00317EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2024/08/28 11:30 p.m.24 views

CVE-2024-8250

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

7.8CVSS6.2AI score0.00317EPSS
SaveExploits1
Cvelist
Cvelist
added 2024/08/28 11:30 p.m.51 views

CVE-2024-8250 Expired Pointer Dereference in Wireshark

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

7.8CVSS0.00317EPSS
SaveExploits1References2
OSV
OSV
added 2024/08/28 11:30 p.m.24 views

CVE-2024-8250 Expired Pointer Dereference in Wireshark

NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or crafted capture file...

7.8CVSS6.3AI score
SaveExploits0References5
OSV
OSV
added 2024/08/21 3:29 p.m.14 views

GO-2022-0889 Authentication bypass by capture-replay in github.com/cosmos/ethermint

Authentication bypass by capture-replay in github.com/cosmos/ethermint...

7.5CVSS7.5AI score0.01309EPSS
SaveExploits0References5
OSV
OSV
added 2024/08/21 3:29 p.m.41 views

GO-2022-0813 Authentication bypass by capture-replay in github.com/cosmos/ethermint

Authentication bypass by capture-replay in github.com/cosmos/ethermint...

7.5CVSS7.6AI score0.01147EPSS
SaveExploits0References5
OSV
OSV
added 2024/08/21 2:30 p.m.15 views

GO-2022-0310 Capture-replay in Gitea in code.gitea.io/gitea

Capture-replay in Gitea in code.gitea.io/gitea...

9.8CVSS9.4AI score0.02139EPSS
SaveExploits0References9
OSV
OSV
added 2024/08/20 8:29 p.m.50 views

GO-2023-1659 Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer

Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer...

9.8CVSS9.4AI score0.00837EPSS
SaveExploits1References4
OSV
OSV
added 2024/08/15 5:15 p.m.9 views

CVE-2024-31905

IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

5.9CVSS5.8AI score0.00303EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/15 5:15 p.m.27 views

CVE-2024-31905

IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

5.9CVSS0.00303EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/15 4:56 p.m.37 views

CVE-2024-31905 IBM QRadar Network Packet Capture information disclosure

IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

5.9CVSS0.00303EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/15 4:56 p.m.16 views

CVE-2024-31905 IBM QRadar Network Packet Capture information disclosure

IBM QRadar Network Packet Capture 7.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

5.9CVSS6AI score0.00303EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/15 4:56 p.m.70 views

CVE-2024-31905

IBM QRadar Network Packet Capture 7.5 is affected by CVE-2024-31905 due to failure to properly enable HTTP Strict Transport Security, enabling man-in-the-middle–style access to sensitive information. The issue is network-exploitable (AV:N, AC:H, PR:N, UI:N, S:U) with confidentiality impact HIGH a...

5.9CVSS6AI score0.00303EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/08/15 12:00 a.m.6 views

IBM QRadar Network Packet Capture 安全漏洞

IBM QRadar Network Packet Capture is an optional QRadar appliance from International Business Machines IBM that can be used to store and manage data when no other network packet capture is available. A security vulnerability exists in IBM QRadar Network Packet Capture version 7.5 that stems from ...

5.9CVSS6.3AI score0.00303EPSS
SaveExploits0References4
OSV
OSV
added 2024/08/12 1:38 p.m.11 views

CVE-2024-7408

This vulnerability exists in Airveda Air Quality Monitor PM2.5 PM10 due to transmission of sensitive information in plain text during AP pairing mode. An attacker in close proximity could exploit this vulnerability by capturing Wi-Fi traffic of Airveda-AP. Successful exploitation of this...

6.5CVSS5.8AI score0.00255EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/08/09 12:00 a.m.12 views

The vulnerability of the Screen Capture function in browsers such as Google Chrome and Microsoft Edge allows a malicious actor to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the Screen Capture function in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information, execute arbitrary code, o...

10CVSS5.8AI score0.00477EPSS
SaveExploits1References9Affected Software6
OSV
OSV
added 2024/08/02 3:16 p.m.7 views

CVE-2024-38890

An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...

8.4CVSS5.8AI score0.00214EPSS
SaveExploits0References2
NVD
NVD
added 2024/08/02 3:16 p.m.43 views

CVE-2024-38890

An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...

8.4CVSS0.00214EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/08/02 12:00 a.m.8 views

PT-2024-28262 · Horizon Business Services Inc. · Caterease

Name of the Vulnerable Software and Affected Versions: Horizon Business Services Inc. Caterease Software versions 16.0.1.1663 through 24.0.1.2405 Description: The issue allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against...

8.4CVSS6.4AI score0.00214EPSS
SaveExploits0References7
Rows per page
Query Builder