Lucene search
+L

112 matches found

CNVD
CNVD
added 2022/02/16 12:00 a.m.58 views

Wireshark has an unspecified vulnerability (CNVD-2022-11192)

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The software's function is to intercept network packets and display detailed data for analysis.A security vulnerability exists in Wireshark that stems from an unaligned access in the CSN.1 protocol...

9.8CVSS2.6AI score0.01992EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/02/10 12:00 a.m.6 views

Wireshark 输入验证错误漏洞

Wireshark formerly known as Ethereal is a set of network packet analysis software from the Wireshark team. The software's function is to intercept network packets and display detailed data for analysis.Wireshark is vulnerable to input validation errors, which can be exploited by attackers to...

6.5CVSS5.5AI score0.02391EPSS
SaveExploits1References9
CNVD
CNVD
added 2022/01/03 12:00 a.m.50 views

Wireshark input validation error vulnerability

Wireshark formerly Ethereal is a set of network packet analysis software from the Wireshark team. Gryphon dissector is one of the Gryphon protocol parsers. An input validation error vulnerability exists in Wireshark, which stems from the product's failure to process Kafka messages effectively. An...

7.5CVSS3.9AI score0.031EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/12/17 12:00 a.m.11 views

Nec Platforms Univerge Dt 安全漏洞

Nec Platforms Univerge Dt is a series of desktop phones from Nec Platforms Japan. A security vulnerability exists in Univerge Dt that originates from the possibility of obtaining phone configuration information when analyzing packets using IP Phone Manager or data maintenance tools. The following...

5.3CVSS5.2AI score0.01066EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/11/22 12:00 a.m.34 views

Wireshark Input Validation Error Vulnerability (CNVD-2022-11205)

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from an input validation error vulnerability that can be exploited by...

7.5CVSS7.3AI score0.05347EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/11/21 12:00 a.m.49 views

Wireshark Input Validation Error Vulnerability (CNVD-2021-91421)

Wireshark is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.Wireshark suffers from an input validation error vulnerability that stems from insufficient validation in the Modbu...

7.5CVSS5.4AI score0.03373EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/11/19 12:00 a.m.39 views

Wireshark null pointer dereference vulnerability (CNVD-2021-94899)

Wireshark is a network packet analysis software. Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card.A null pointer dereference vulnerability exists in the IPPUSB parser in Wireshark versions 3.4.0 - 3.4.9. An attacker could exploit this vulnerability to...

7.5CVSS4.3AI score0.03289EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/10/08 12:00 a.m.57 views

Netscaut nGeniusONE UploadFile Function Cross-Site Scripting Vulnerability

Netscout NgeniusOne is a centralized application and network performance management solution from Netscout, Inc. A cross-site scripting vulnerability exists in Netscaut nGeniusONE in version 6.3.0 build 1196 and earlier, which stems from a lack of user input validation and filtering of input data...

5.4CVSS5.1AI score0.00466EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/06 6:15 p.m.30 views

CVE-2021-25486

Exposure of information vulnerability in ipcdump prior to SMR Oct-2021 Release 1 allows an attacker detect device information via analyzing packet in log...

3.3CVSS0.00098EPSS
SaveExploits0References1
CVE
CVE
added 2021/10/06 5:10 p.m.55 views

CVE-2021-25486

CVE-2021-25486 concerns an information-disclosure vulnerability in the Samsung ipcdump module, present before SMR Oct-2021 Release 1. The issue allows an attacker to detect device information by analyzing log-packet data. Documents describe vulnerable component (ipcdump) and impact as information...

3.3CVSS4AI score0.00098EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2021/09/30 6:15 p.m.8 views

CVE-2021-35198

NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting XSS in the Packet Analysis module...

5.4CVSS6.1AI score0.00466EPSS
SaveExploits0References1
NVD
NVD
added 2021/09/30 6:15 p.m.23 views

CVE-2021-35198

NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting XSS in the Packet Analysis module...

5.4CVSS0.00466EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/09/30 6:15 p.m.6 views

CVE-2021-35198

NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting XSS in the Packet Analysis module...

5.4CVSS6.1AI score0.00466EPSS
SaveExploits0References2
Prion
Prion
added 2021/09/30 6:15 p.m.23 views

Cross site scripting

NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting XSS in the Packet Analysis module...

3.5CVSS5.2AI score0.00466EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/09/30 5:52 p.m.63 views

CVE-2021-35198

NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the Packet Analysis module. The root cause is improper input validation/filtering, enabling an attacker to inject JavaScript and perform stored XSS. Public references (NVD, CVE lis...

5.4CVSS5.2AI score0.00466EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/09/30 5:52 p.m.34 views

CVE-2021-35198

NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting XSS in the Packet Analysis module...

5.5AI score0.00466EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/09/30 12:00 a.m.12 views

Netscout NgeniusOne 跨站脚本漏洞

Netscout NgeniusOne is a centralized application and network performance management solution from Netscout, Inc. A cross-site scripting vulnerability exists in Netscaut nGeniusONE in version 6.3.0 build 1196 and earlier, which stems from a lack of user input validation and filtering of input data...

5.4CVSS5.3AI score0.00466EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/06/08 12:00 a.m.112 views

Wireshark infinite loop vulnerability (CNVD-2022-11207)

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. An infinite loop vulnerability...

7.5CVSS7.4AI score0.01914EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2021/05/07 1:20 p.m.197 views

6 Unpatched Flaws Disclosed in Remote Mouse App for Android and iOS

As many as six zero-days have been uncovered in an application called Remote Mouse, allowing a remote attacker to achieve full code execution without any user interaction. The unpatched flaws, collectively named 'Mouse Trap,' were disclosed on Wednesday by security researcher Axel Persinger, who...

9.8CVSS2.4AI score0.03643EPSS
SaveExploits6
OSS-Fuzz
OSS-Fuzz
added 2020/05/30 2:41 p.m.27 views

pcapplusplus:FuzzTarget: Use-of-uninitialized-value in pcpp::NullLoopbackLayer::parseNextLayer

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5696447256461312 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

6.8AI score
SaveExploits0Affected Software1
Rows per page
Query Builder