Lucene search
+L

118 matches found

CNVD
CNVD
•added 2022/03/25 12:00 a.m.•67 views

Wireshark Input Validation Error Vulnerability (CNVD-2022-55072)

Wireshark formerly known as Ethereal is a set of network packet analysis software from the Wireshark team. The software's function is to intercept network packets and display detailed data for analysis.Wireshark is vulnerable to input validation errors, which can be exploited by attackers to...

6.5CVSS3.8AI score0.02391EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/02/16 12:00 a.m.•74 views

Wireshark has an unspecified vulnerability (CNVD-2022-11193)

Wireshark formerly Ethereal is a set of network packet analysis software from the Wireshark team. The software's function is to intercept network packets and display detailed data for analysis.A security vulnerability exists in Wireshark, which stems from an infinite loop in the RTMPT protocol...

7.8CVSS2.4AI score0.02003EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/02/16 12:00 a.m.•68 views

Wireshark Denial of Service Vulnerability (CNVD-2022-11189)

Wireshark is a set of network packet analysis software from the Wireshark team. A denial of service vulnerability exists in Wireshark. The vulnerability is caused by the CMS dissector component, which can be exploited by an attacker to cause a denial of service by injecting malformed packets or...

7.5CVSS3AI score0.01789EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/02/16 12:00 a.m.•59 views

Wireshark has an unspecified vulnerability (CNVD-2022-11192)

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The software's function is to intercept network packets and display detailed data for analysis.A security vulnerability exists in Wireshark that stems from an unaligned access in the CSN.1 protocol...

9.8CVSS2.6AI score0.01992EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/02/10 12:00 a.m.•9 views

Wireshark 输入验证错误漏洞

Wireshark formerly known as Ethereal is a set of network packet analysis software from the Wireshark team. The software's function is to intercept network packets and display detailed data for analysis.Wireshark is vulnerable to input validation errors, which can be exploited by attackers to...

6.5CVSS5.5AI score0.02391EPSS
SaveExploits1References9
CNVD
CNVD
•added 2022/01/03 12:00 a.m.•55 views

Wireshark input validation error vulnerability

Wireshark formerly Ethereal is a set of network packet analysis software from the Wireshark team. Gryphon dissector is one of the Gryphon protocol parsers. An input validation error vulnerability exists in Wireshark, which stems from the product's failure to process Kafka messages effectively. An...

7.5CVSS3.9AI score0.031EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/12/17 12:00 a.m.•14 views

Nec Platforms Univerge Dt 安全漏洞

Nec Platforms Univerge Dt is a series of desktop phones from Nec Platforms Japan. A security vulnerability exists in Univerge Dt that originates from the possibility of obtaining phone configuration information when analyzing packets using IP Phone Manager or data maintenance tools. The following...

5.3CVSS5.2AI score0.01066EPSS
SaveExploits0References3
CNVD
CNVD
•added 2021/11/22 12:00 a.m.•38 views

Wireshark Input Validation Error Vulnerability (CNVD-2022-11205)

Wireshark formerly known as Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from an input validation error vulnerability that can be exploited by...

7.5CVSS7.3AI score0.05563EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/11/21 12:00 a.m.•53 views

Wireshark Input Validation Error Vulnerability (CNVD-2021-91421)

Wireshark is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.Wireshark suffers from an input validation error vulnerability that stems from insufficient validation in the Modbu...

7.5CVSS5.4AI score0.03373EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/11/19 12:00 a.m.•44 views

Wireshark null pointer dereference vulnerability (CNVD-2021-94899)

Wireshark is a network packet analysis software. Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card.A null pointer dereference vulnerability exists in the IPPUSB parser in Wireshark versions 3.4.0 - 3.4.9. An attacker could exploit this vulnerability to...

7.5CVSS4.3AI score0.03289EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/10/08 12:00 a.m.•63 views

Netscaut nGeniusONE UploadFile Function Cross-Site Scripting Vulnerability

Netscout NgeniusOne is a centralized application and network performance management solution from Netscout, Inc. A cross-site scripting vulnerability exists in Netscaut nGeniusONE in version 6.3.0 build 1196 and earlier, which stems from a lack of user input validation and filtering of input data...

5.4CVSS5.1AI score0.00466EPSS
SaveExploits0References1
NVD
NVD
•added 2021/10/06 6:15 p.m.•34 views

CVE-2021-25486

Exposure of information vulnerability in ipcdump prior to SMR Oct-2021 Release 1 allows an attacker detect device information via analyzing packet in log...

3.3CVSS0.00098EPSS
SaveExploits0References1
CVE
CVE
•added 2021/10/06 5:10 p.m.•62 views

CVE-2021-25486

CVE-2021-25486 concerns an information-disclosure vulnerability in the Samsung ipcdump module, present before SMR Oct-2021 Release 1. The issue allows an attacker to detect device information by analyzing log-packet data. Documents describe vulnerable component (ipcdump) and impact as information...

3.3CVSS4AI score0.00098EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2021/09/30 6:15 p.m.•12 views

CVE-2021-35198

NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting XSS in the Packet Analysis module...

5.4CVSS6.1AI score0.00466EPSS
SaveExploits0References1
NVD
NVD
•added 2021/09/30 6:15 p.m.•27 views

CVE-2021-35198

NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting XSS in the Packet Analysis module...

5.4CVSS0.00466EPSS
SaveExploits0References1
Prion
Prion
•added 2021/09/30 6:15 p.m.•25 views

Cross site scripting

NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting XSS in the Packet Analysis module...

3.5CVSS5.2AI score0.00466EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/09/30 6:15 p.m.•9 views

CVE-2021-35198

NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting XSS in the Packet Analysis module...

5.4CVSS6.1AI score0.00466EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/09/30 5:52 p.m.•38 views

CVE-2021-35198

NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting XSS in the Packet Analysis module...

5.5AI score0.00466EPSS
SaveExploits0References1
CVE
CVE
•added 2021/09/30 5:52 p.m.•68 views

CVE-2021-35198

NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the Packet Analysis module. The root cause is improper input validation/filtering, enabling an attacker to inject JavaScript and perform stored XSS. Public references (NVD, CVE lis...

5.4CVSS5.2AI score0.00466EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/09/30 12:00 a.m.•4 views

PT-2021-20830

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE version 6.3.0 build 1004 and earlier Description: The issue allows Stored Cross-Site Scripting XSS in the Packet Analysis module. This means an attacker can inject malicious scripts into the system, which can then be...

5.4CVSS0.00466EPSS
SaveExploits0References4
Rows per page
Query Builder