Lucene search
+L

15308 matches found

OSV
OSV
added 2020/02/10 9:51 p.m.11 views

CVE-2019-17520

The Bluetooth Low Energy implementation on Texas Instruments SDK through 3.30.00.20 for CC2640R2 devices does not properly restrict the SM Public Key packet on reception, allowing attackers in radio range to cause a denial of service crash via crafted packets...

6.5CVSS6.9AI score0.0181EPSS
SaveExploits1References3
Prion
Prion
added 2020/02/10 9:51 p.m.28 views

Cross site request forgery (csrf)

The Bluetooth Low Energy peripheral implementation on Texas Instruments SIMPLELINK-CC2640R2-SDK through 3.30.00.20 and BLE-STACK through 1.5.0 before Q4 2019 for CC2640R2 and CC2540/1 devices does not properly restrict the advertisement connection request packet on reception, allowing attackers i...

6.1CVSS6.7AI score0.00703EPSS
SaveExploits0References2Affected Software2
Prion
Prion
added 2020/02/10 9:51 p.m.26 views

Code injection

The Bluetooth Low Energy implementation on Texas Instruments SDK through 3.30.00.20 for CC2640R2 devices does not properly restrict the SM Public Key packet on reception, allowing attackers in radio range to cause a denial of service crash via crafted packets...

6.1CVSS6.4AI score0.0181EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/02/10 12:00 a.m.32 views

CVE-2019-17520

The Bluetooth Low Energy implementation on Texas Instruments SDK through 3.30.00.20 for CC2640R2 devices does not properly restrict the SM Public Key packet on reception, allowing attackers in radio range to cause a denial of service crash via crafted packets. Recent assessments: pbarry-r7 at Apr...

6.5CVSS3.1AI score0.0181EPSS
SaveExploits1References4
Kitploit
Kitploit
added 2020/02/07 11:30 a.m.138 views

Re2Pcap - Create PCAP file from raw HTTP request or response in seconds

Re2Pcap is abbreviation for Request2Pcap and Response2Pcap. Community users can quickly create PCAP file using Re2Pcap and test them against Snort rules. Re2Pcap allow you to quickly create PCAP file for raw HTTP request shown below POST /admin/tools/iplogging.cgi HTTP/1.1 Host: 192.168.13.31:80...

7.6AI score
SaveExploits0References3
CNVD
CNVD
added 2020/02/07 12:00 a.m.5 views

Libslirp Code Execution Vulnerability

libslirp is a user-mode networking library for use by virtual machines, containers, or various tools. A code execution vulnerability exists in libslirp, which can be exploited by an attacker to execute arbitrary code by sending specially crafted packets...

6.8CVSS8.5AI score0.02486EPSS
SaveExploits0References1
OSV
OSV
added 2020/02/06 2:15 p.m.7 views

DEBIAN-CVE-2016-9928

MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as an entity on a 3rd party's roster as another user, which will also garner associated privileges, via crafted XMPP packets...

7.4CVSS6.1AI score0.04512EPSS
SaveExploits2References1
NVD
NVD
added 2020/02/06 2:15 p.m.28 views

CVE-2016-9928

MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as an entity on a 3rd party's roster as another user, which will also garner associated privileges, via crafted XMPP packets...

7.4CVSS7.3AI score0.04512EPSS
SaveExploits2References10
OSV
OSV
added 2020/02/06 2:15 p.m.15 views

CVE-2016-9928

MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as an entity on a 3rd party's roster as another user, which will also garner associated privileges, via crafted XMPP packets...

7.4CVSS7.3AI score
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2020/02/06 2:15 p.m.35 views

CVE-2016-9928

MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as an entity on a 3rd party's roster as another user, which will also garner associated privileges, via crafted XMPP packets...

7.4CVSS6.4AI score0.04512EPSS
SaveExploits2References4
Prion
Prion
added 2020/02/06 2:15 p.m.17 views

Code injection

MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as an entity on a 3rd party's roster as another user, which will also garner associated privileges, via crafted XMPP packets...

5.8CVSS7AI score0.04512EPSS
SaveExploits2References10Affected Software3
Cvelist
Cvelist
added 2020/02/06 1:16 p.m.48 views

CVE-2016-9928

MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as an entity on a 3rd party's roster as another user, which will also garner associated privileges, via crafted XMPP packets...

7.2AI score0.04512EPSS
SaveExploits2References10
Debian CVE
Debian CVE
added 2020/02/06 1:16 p.m.57 views

CVE-2016-9928

MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as an entity on a 3rd party's roster as another user, which will also garner associated privileges, via crafted XMPP packets...

7.4CVSS5.7AI score0.04512EPSS
SaveExploits2
CNVD
CNVD
added 2020/02/06 12:00 a.m.12 views

FreeBSD Security Vulnerabilities

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. FreeBSD has a security vulnerability. An attacker can re-inject old packets, which will be accepted and processed by the IPsec endpoint. No details of the vulnerability are provided at this time...

9.8CVSS6.9AI score0.00578EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/02/06 12:00 a.m.20 views

Cisco Discovery Protocol Denial of Service Vulnerability in Cisco FXOS, IOS XR and NX-OS Software

Cisco NX-OS Software and others are products of Cisco Corporation.Cisco NX-OS Software is a suite of data center-grade operating system software for use in switches.Cisco FXOS Software is a suite of firewall software that runs in Cisco security appliances.Cisco IOS XR is a suite of operating...

7.4CVSS6.8AI score0.01639EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2020/02/05 7:14 p.m.32 views

CVE-2020-7045

An invalid memory access vulnerability was discovered in Wireshark when processing malformed Bluetooth packets. An attacker could use this flaw to send malicious Bluetooth packets that can crash Wireshark, or trick a user into running the tool on a malformed packet trace file...

6.5CVSS1.9AI score0.01457EPSS
SaveExploits1References3
OSV
OSV
added 2020/02/05 6:15 p.m.6 views

CVE-2020-3111

A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute code with root privileges or cause a reload of an affected IP phone. The vulnerability is due to missing checks when processing Cisco Discove...

8.8CVSS7.6AI score0.03095EPSS
SaveExploits0References2
OSV
OSV
added 2020/02/05 3:15 p.m.24 views

CVE-2020-7216

An nidhcp4parseresponse memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets without a message type option...

7.5CVSS6.5AI score
SaveExploits0References2
NVD
NVD
added 2020/02/05 3:15 p.m.27 views

CVE-2020-7216

An nidhcp4parseresponse memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets without a message type option...

7.5CVSS8.2AI score0.01099EPSS
SaveExploits0References2
Prion
Prion
added 2020/02/05 3:15 p.m.21 views

Design/Logic Flaw

An nidhcp4parseresponse memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets without a message type option...

5CVSS7.2AI score0.01099EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder