Wireshark 安全漏洞

Wireshark is a network packet analysis software from Wireshark team. A denial of service vulnerability exists in Wireshark, which stems from an infinite loop in the Bluetooth DHT parser. An attacker could use this vulnerability to send carefully crafted packets through the application, consuming...

Wireshark 输入验证错误漏洞

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from an input validation error vulnerability that exists due to...

Wireshark 代码问题漏洞

Wireshark is a network packet analysis software. Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card.A null pointer dereference vulnerability exists in the IPPUSB parser in Wireshark versions 3.4.0 - 3.4.9. An attacker could exploit this vulnerability to...

Wireshark 输入验证错误漏洞

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from an input validation error vulnerability that can be exploited by...

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco IOS and Cisco IOS XE operating systems allows a attacker to cause a service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco IOS and Cisco IOS XE operating systems is related to initialization errors. Exploiting this vulnerability allows a malicious actor to cause service failures through the command line interface or by sending special...

The vulnerability of the SSL/TLS message processor in microprogramming network devices from Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense allows attackers to induce service failures.

The vulnerability of SSL/TLS message processors in microprogramming network interface devices from Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense involves an operation that goes beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to caus...

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco Small Business 220 router software allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco Small Business 220 router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary...

The vulnerability of the Wi-Fi Aruba Instant deployment application, related to the operation that occurs outside the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of the Wi-Fi Aruba Instant deployment application relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted packets to port 8211, using the Protocol Applicatio...

PT-2021-7229 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers affected versions not specified Description: A vulnerability in the Application Visibility and Control AVC-FNF feature could allow an unauthenticated, remote attacker t...

Office Server Document Converter 缓冲区错误漏洞

Antenna House Office Server Document Converter Osdc is an office server document converter from Antenna House USA. It is used to batch convert Word, Excel, and Powerpoint into high-quality Pdf or image formats that are easy to share and look accurate on any screen. A buffer error vulnerability...

Cisco Products Snort 安全漏洞

Cisco Products Snort is a Snort engine for Cisco Products from Cisco USA. A security vulnerability exists in Cisco Products Snort that results from improper handling of Block with Reset or Interactive Block with Reset operations when configuring rules without proper constraints. An attacker can...

Cisco Firepower Threat Defense 资源管理错误漏洞

Cisco Firepower Threat Defense FTD is a suite of unified software from Cisco that provides next-generation firewall services. A resource management error vulnerability exists in Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software SSL/TLS Denial, which...

ALPINE-CVE-2021-41105

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. When handling SRTP calls, FreeSWITCH prior to version 1.10.7 is susceptible to a DoS where calls can be terminated...

CVE-2021-41105

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. When handling SRTP calls, FreeSWITCH prior to version 1.10.7 is susceptible to a DoS where calls can be terminated...

CVE-2021-3746

A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue when the state of the TPM2's volatile state is written. The highest threat from this vulnerabili...

CVE-2021-31383

In Point to MultiPoint P2MP scenarios within established sessions between network or adjacent neighbors the improper use of a source to destination copy write operation combined with a Stack-based Buffer Overflow on certain specific packets processed by the routing protocol daemon RPD of Juniper...

Design/Logic Flaw

A vulnerability has been identified in SINUMERIK 808D All versions, SINUMERIK 828D All versions V4.95. Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial-of-service in the device...

Siemens Sinumerik 808D 缓冲区错误漏洞

SINUMERIK CNCs provide automation solutions for shop floor, workshop and large volume production environments. a denial of service vulnerability exists in Siemens SINUMERIK Controllers. the vulnerability stems from the fact that the affected device fails to properly handle certain specially craft...

PT-2021-7670 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: Adobe ColdFusion versions Update 14 and earlier Adobe ColdFusion versions Update 4 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user...

Security Bulletin: Vulnerability in GnuTLS affects Power Hardware Management Console ( CVE-2018-10845 CVE-2018-10844)

Summary It was found that GnuTLS's implementation of HMAC-SHA-384 and HMAC-SHA-256 was vulnerable to a Lucky Thirteen-style attack. A remote attacker could use this flaw to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing data using crafted packets...