7245 matches found
CISA Releases Two Industrial Control Systems Advisories
CISA released two Industrial Control Systems ICS advisories on March 11, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-070-01 Schneider Electric Uni-Telway Driver ICSA-25-070-02 Optigo Networks Visual BACnet...
UBUNTU-CVE-2025-2176
A vulnerability classified as critical has been found in libzvbi up to 0.2.43. This affects the function vbicapturesimloadcaption of the file src/io-sim.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and...
Image Capture macOS Unauthorized Access
The vulnerability of the Image Capture application in macOS operating systems relates to a flaw in the data protection mechanism. Exploiting this vulnerability can allow attackers to circumvent security restrictions and gain unauthorized access to protected information...
PT-2025-10998
Name of the Vulnerable Software and Affected Versions: Optigo Networks Visual BACnet Capture Tool version 3.1.2rc11 Optigo Visual Networks Capture Tool version 3.1.2rc11 Description: The issue allows an attacker to impersonate the web application service, potentially misleading victim clients...
PT-2025-10997
Name of the Vulnerable Software and Affected Versions: Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 Description: The issue concerns an exposed web management service that could allow an attacker to bypass authentication measures and gain...
Babel 安全漏洞
Babel is a compiler for JavaScript in the Babel open source. A security vulnerability exists in Babel versions prior to 7.26.10 and prior to 8.0.0-alpha.17, which stems from a .replace method generated when compiling regular expression named capture groups that has a quadratic complexity on certa...
CVE-2025-1887: Authentication Bypass by Capture-replay
SMB forced authentication vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to obtain NTLMv2-SSP Hash by changing any of the paths to a UNC path pointing to a server controlled by the attacker...
Linux Distros Unpatched Vulnerability : CVE-2024-8006
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions tha...
Linux Distros Unpatched Vulnerability : CVE-2017-6472
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an RTMPT dissector infinite loop, triggered by packet injection or a malformed capture file. This was...
Linux Distros Unpatched Vulnerability : CVE-2017-5596
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file...
Linux Distros Unpatched Vulnerability : CVE-2017-7745
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SIGCOMP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file...
Linux Distros Unpatched Vulnerability : CVE-2017-11410
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture...
Linux Distros Unpatched Vulnerability : CVE-2017-7705
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed captur...
[SECURITY] Fedora 40 Update: wireshark-4.2.11-1.fc40
Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...
CVE-2021-47650
In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-compress: prevent the potentially use of null pointer There is one call trace that sndsocregistercard -sndsocbindcard-socinitpcmruntime -sndsocdaicompressnew-sndsocnewcompress. In the trace the 'codecdai' transfers from...
DEBIAN-CVE-2022-49165
In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers If the application queues an NV12M jpeg as output buffer, but then queues a single planar capture buffer, the kernel will crash with "Unable to handle kerne...
CVE-2025-26201: Authentication Bypass by Capture-replay
Credential disclosure vulnerability via the /staff route in GreaterWMS = 2.1.49 allows a remote unauthenticated attackers to bypass authentication and escalate privileges...
BIT-CASSANDRA-2024-27137 Apache Cassandra: unrestricted deserialization of JMX authentication credentials
In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these...
