5385 matches found
Wireshark 4.0.x < 4.0.7 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.7 advisory. - iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or...
PT-2023-26201 · Jenkins · Jenkins Mabl Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins mabl Plugin versions 0.0.46 and earlier Description: A missing permission check in the Jenkins mabl Plugin allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs...
Wireshark 4.0.x < 4.0.7 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 4.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.7 advisory. - iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted captu...
Siemens SIMATIC 安全漏洞
SIMATIC MV500 products are fixed optical readers for capturing print, laser, drill, punch and dotted line codes on a variety of different surfaces. Siemens SIMATIC MV500 Devices has an uncontrolled resource consumption vulnerability that can be exploited by attackers to cause a denial of service...
The vulnerabilities of the Ethernet modules FX3U-ENET-ADP and Ethernet FX3U-ENET(-L) of the microprogrammable logic controllers MELSEC iQ-F series, such as FX3U, FX3UC, FX3G, FX3GC-32MT, FX3GE, FX3GA, FX3S, and FX3SA, allow attackers to circumvent security restrictions and reset system settings.
The vulnerability of the Ethernet modules FX3U-ENET-ADP and Ethernet FX3U-ENET-L of the microprogrammable logic controllers MELSEC iQ-F series, such as FX3U, FX3UC, FX3G, FX3GC-32MT, FX3GE, FX3GA, FX3S, and FX3SA, stems from the ability to bypass authentication by using capture-replay techniques...
PT-2023-5382 · D Link · D-Link Dwl-6610Ap
Name of the Vulnerable Software and Affected Versions: D-LINK DWL-6610AP version FW v 4.3.0.8B003C Description: A command injection issue was found in the pcap download handler function, allowing attackers to execute arbitrary commands via the update.device.packet-capture.tftp-file-name parameter...
CVE-2023-1691
Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally...
CVE-2023-35149
A missing permission check in Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stored in Jenkins...
编号撤回
OBS Studio is an OBS Project open source software designed for efficiently capturing, compositing, encoding, recording and streaming video content. This CVE number has been withdrawn...
CVE-2023-2846
Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially crafted packets...
Authentication flaw
Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially crafted packets...
CVE-2023-2846
CVE-2023-2846 concerns an authentication bypass by capture-replay in Mitsubishi Electric MELSEC iQ-F Series main modules. Affected products include MELSEC iQ-F Series PLCs (e.g., FX3U, FX3UC, FX3G, FX3GE/FX3GA/FX3S/FX3SA and related Ethernet adapters like FX3U-ENET-ADP/FX3U-ENET(-L)). The root ca...
CVE-2023-2846 Authentication Bypass Vulnerability in MELSEC-F Series main module
Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially crafted packets...
Mitsubishi Electric MELSEC-F Series
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: MELSEC-F Series Vulnerability: Authentication Bypass by Capture-replay 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...
PT-2023-3413 · Mitsubishi · Melsec Iq-F Series
Name of the Vulnerable Software and Affected Versions: MELSEC iQ-F Series versions FX3U, FX3UC, FX3G, FX3GC-32MT, FX3GE, FX3GA, FX3S, and FX3SA Description: The issue is related to an authentication bypass vulnerability using a capture-replay attack on intercepted parameters. This could allow a...
CVE-2023-3243
CVE-2023-3243 affects Honeywell BCM-WEB version 3.3.X. The vulnerability allows an attacker to capture an authenticating hash and reuse it to create new sessions; the hash is a poorly salted MD5, enabling brute-forcing of passwords. Affected product is BCM-WEB 3.3.x, with recommendations to upgra...
The vulnerability of RPCoRDMA discoverer and traffic analyzer for computer networks by Wireshark allows a hacker to induce a service failure.
The vulnerability of RPCoRDMA discoverer and traffic analyzer in Wireshark involves uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by injecting packets or creating capture files...
SUSE CVE-2023-36192
Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capturewscheckpacket at /src/capture.c...
