Lucene search
+L

26 matches found

NVD
NVD
•added 2025/10/31 10:15 p.m.•23 views

CVE-2025-12464

A stack-based buffer overflow was found in the QEMU e1000 network device. The code for padding short frames was dropped from individual network devices and moved to the net core code. The issue stems from the device's receive code still being able to process a short frame in loopback mode. This...

6.2CVSS0.00181EPSS
SaveExploits0References3
OSV
OSV
•added 2025/10/31 10:15 p.m.•19 views

AZL-69631 CVE-2025-12464 affecting package qemu for versions less than 8.2.0-25

A stack-based buffer overflow was found in the QEMU e1000 network device. The code for padding short frames was dropped from individual network devices and moved to the net core code. The issue stems from the device's receive code still being able to process a short frame in loopback mode. This...

6.2CVSS7AI score0.00181EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/10/29 12:00 a.m.•15 views

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Sensitive Information in Resource Not Removed Before Reuse (CVE-2024-49997)

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiqetop: fix memory disclosure When applying padding, the buffer is not zeroed, which results in memory disclosure. The mentioned data is observed on the wire. This patch uses skbputpadto to pad Ethernet frames...

7.5CVSS6.6AI score0.01064EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2020-4796

Malware in sbrugna...

5.3CVSS6AI score0.01014EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•26 views

EUVD-2017-7899

Malware in sbrugna...

7.5CVSS7.3AI score0.01681EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/06/23 12:00 a.m.•21 views

PT-2025-33811

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue in the staging/gpib subsystem where an uninitialized padding field within the gpib board info ioctl structure is copied back to userspace via the boa...

5.5CVSS6.8AI score0.00141EPSS
SaveExploits0References17
Tenable Nessus
Tenable Nessus
•added 2023/08/02 12:00 a.m.•21 views

Moxa NPort 5110, 5130, and 5150 Exposure of Sensitive Information to an Unauthorized Actor (CVE-2017-16715)

An Information Exposure issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exploit a flaw in the handling of Ethernet frame...

8.6CVSS7.3AI score0.01681EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2023/06/09 7:32 p.m.•32 views

Denial of service via HTTP/2 HEADERS frames padding

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.2. It is fixed in 1.20.0 and later releases. This vulnerability is caused by a logica...

7.8CVSS6.7AI score0.01299EPSS
SaveExploits0References4Affected Software1
SUSE CVE
SUSE CVE
•added 2023/02/15 6:21 a.m.•14 views

SUSE CVE-2003-0001

Multiple ethernet Network Interface Card NIC device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak...

5CVSS6.5AI score0.72511EPSS
SaveExploits15References3
attackerkb
attackerkb
•added 2021/01/13 5:00 p.m.•16 views

CVE-2021-3031

Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random information from the firewall memory into the...

4.3CVSS6.1AI score0.00549EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2017/11/16 9:29 p.m.•38 views

CVE-2017-16715

An Information Exposure issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exploit a flaw in the handling of Ethernet frame...

8.6CVSS7.2AI score0.01681EPSS
SaveExploits0References2
OSV
OSV
•added 2017/11/16 9:29 p.m.•17 views

CVE-2017-16715

An Information Exposure issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exploit a flaw in the handling of Ethernet frame...

7.5CVSS5.7AI score0.01681EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2017/11/16 9:00 p.m.•18 views

CVE-2017-16715

An Information Exposure issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exploit a flaw in the handling of Ethernet frame...

7.1AI score0.01681EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2017/11/16 9:00 p.m.•48 views

CVE-2017-16715

An Information Exposure issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exploit a flaw in the handling of Ethernet frame...

7.2AI score0.01681EPSS
SaveExploits0References2
ICS
ICS
•added 2017/11/16 12:00 a.m.•132 views

Moxa NPort 5110, 5130, and 5150

CVSS v3 8.6 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Moxa Equipment: NPort 5110, 5130, 5150 Vulnerabilities: Injection, Information Exposure, Resource Exhaustion AFFECTED PRODUCTS The following versions of NPort, a serial network interface, are affected: NPort 5110...

8.6CVSS8.3AI score0.02218EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2017/11/16 12:00 a.m.•9 views

PT-2017-14529

Name of the Vulnerable Software and Affected Versions Moxa NPort 5110 versions 2.2 through 2.7 Moxa NPort 5130 versions prior to 3.7 Moxa NPort 5150 versions prior to 3.7 Description An Information Exposure issue was discovered, allowing an attacker to exploit a flaw in the handling of Ethernet...

8.6CVSS0.01681EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/16 12:00 a.m.•8 views

CVE-2017-16715: Exposure of Sensitive Information to an Unauthorized Actor

An Information Exposure issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NPort 5130 Version 3.7 and prior, and NPort 5150 Version 3.7 and prior. An attacker may be able to exploit a flaw in the handling of Ethernet frame...

8.6CVSS7.2AI score0.01681EPSS
SaveExploits0References6
OpenVAS
OpenVAS
•added 2017/06/08 12:00 a.m.•63 views

Cisco NX-OS Software Fibre Channel over Ethernet Denial of Service Vulnerability (cisco-sa-20170607-nxos)

A vulnerability in the Fibre Channel over Ethernet FCoE protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition when an FCoE-related process unexpectedly reloads. Copyright C 2017 Greenbone Networks GmbH Some tex...

6.5CVSS6.4AI score0.00683EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2017/06/07 12:00 a.m.•6 views

PT-2017-17220

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software versions 8.30CV0.833 Description A vulnerability in the Fibre Channel over Ethernet FCoE protocol implementation could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition when an...

6.5CVSS0.00683EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/10/28 12:00 a.m.•12 views

CVE-2015-7836: Exposure of Sensitive Information to an Unauthorized Actor

Siemens RUGGEDCOM ROS before 4.2.1 allows remote attackers to obtain sensitive information by sniffing the network for VLAN data within the padding section of an Ethernet frame...

3.3CVSS5.8AI score0.00927EPSS
SaveExploits0References2
Rows per page
Query Builder