CVE-2024-8912: Inconsistent Interpretation of HTTP Requests

An HTTP Request Smuggling vulnerability in Looker allowed an unauthorized attacker to capture HTTP responses destined for legitimate users. There are two Looker versions that are hosted by Looker: Looker Google Cloud core was found to be vulnerable. This issue has already been mitigated and our...

Wireshark Security Update (wnpa-sec-2024-13) - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

CVE-2024-9781

AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file...

CVE-2024-9780

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file...

CVE-2024-9780

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file...

CVE-2024-9780

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file...

UBUNTU-CVE-2024-9781

AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file...

CVE-2024-9781 Improper Handling of Missing Values in Wireshark

AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file...

CVE-2024-9781

CVE-2024-9781 affects Wireshark: AppleTalk and RELOAD Framing dissector crashes in Wireshark 4.4.0 and 4.2.0–4.2.7, enabling denial of service via packet injection or crafted capture files. Remediation: upgrade to Wireshark 4.2.8 or later (e.g., Fedora 40 advisory FEDORA-2024-1949806a59 and relat...

CVE-2024-9781 Improper Handling of Missing Values in Wireshark

AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file...

CVE-2024-9781 Improper Handling of Missing Values in Wireshark

AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file...

CVE-2024-9780

CVE-2024-9780 affects Wireshark 4.4.0 (ITS dissector crash). The vulnerability allows denial of service via packet injection or crafted capture files, due to a crash in the ITS dissector. Several connected advisories note multiple vulnerabilities in Wireshark 4.4.x; some sources indicate fixes/up...

CVE-2024-9780 Missing Initialization of a Variable in Wireshark

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file...

CVE-2024-9780

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file...

CVE-2024-9780

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file...

CVE-2024-9781: Improper Handling of Missing Values

AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file...

CVE-2024-9780: Missing Initialization of a Variable

ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file...

CVE-2024-46041

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...

PT-2024-31883

Name of the Vulnerable Software and Affected Versions IoT Haat Smart Plug IH-IN-16A-S version 5.16.1 Description The issue is related to Authentication Bypass by Capture-replay, which allows unauthorized access. Recommendations For IoT Haat Smart Plug IH-IN-16A-S version 5.16.1, consider disablin...

CVE-2024-46041

The IoT Haat Smart Plug IH-IN-16A-S (Application Software Version v5.16.1 ) is vulnerable to an Authentication Bypass by Capture-replay . During the provisioning phase, an attacker can perform a replay attack by replacing a legitimate authentication token with an attacker-controlled token. This v...