7326 matches found
CVE-2024-29851: Authentication Bypass by Capture-replay
Veeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise manager service account...
CVE-2024-35110
A reflected XSS vulnerability has been found in YzmCMS 7.1. The vulnerability exists in yzmphp/core/class/application.class.php: when logged-in users access a malicious link, their cookies can be captured by an attacker...
CVE-2024-35110
A reflected XSS vulnerability has been found in YzmCMS 7.1. The vulnerability exists in yzmphp/core/class/application.class.php: when logged-in users access a malicious link, their cookies can be captured by an attacker...
SUSE CVE-2024-4853
Memory handling issue in editcap could cause denial of service via crafted capture file...
SUSE CVE-2024-4855
Use after free issue in editcap could cause denial of service via crafted capture file...
CVE-2024-4854
A flaw was found in the MONGO and ZigBee TLV dissectors of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing an infinite loop, resulting in a denial of service. Mitigation Mitigation for this issue is either not available or the currently...
CVE-2024-4853
A flaw was found in the editcap program distributed by Wireshark. A buffer over-read may be triggered when a crafted packet trace file is processed with the editcap program, causing an application crash and resulting in a denial of service. Mitigation Do not process untrusted packet trace files...
CVE-2024-4855
A flaw was found in the editcap program distributed by Wireshark. A use-after-free may be triggered when a crafted packet trace file is processed with the editcap program using the --inject-secrets command line option, causing an application crash and resulting in a denial of service. Mitigation ...
Wireshark 4.0.x < 4.0.15 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.0.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.15 advisory. - Use after free issue in editcap could cause denial of service via crafted capture file CVE-2024-4855 ...
CVE-2024-4855
Use after free issue in editcap could cause denial of service via crafted capture file...
CVE-2024-4855
Use after free issue in editcap could cause denial of service via crafted capture file...
DEBIAN-CVE-2024-4855
Use after free issue in editcap could cause denial of service via crafted capture file...
AZL-43498 CVE-2024-4853 affecting package wireshark 4.0.8-1
Memory handling issue in editcap could cause denial of service via crafted capture file...
CVE-2024-4853
Memory handling issue in editcap could cause denial of service via crafted capture file...
CVE-2024-4854
MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...
DEBIAN-CVE-2024-4853
Memory handling issue in editcap could cause denial of service via crafted capture file...
AZL-44073 CVE-2024-4853 affecting package wireshark for versions less than 4.4.7-1
Memory handling issue in editcap could cause denial of service via crafted capture file...
CVE-2024-4854
MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file...