Lucene search
+L

254 matches found

CNNVD
CNNVD
added 2023/11/16 12:00 a.m.6 views

Wireshark Security Vulnerabilities

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in Wireshark versions 4.0.0 through 4.0.10, which stems from a...

6.5CVSS7.1AI score0.00746EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/11/15 12:00 a.m.18 views

PT-2023-7176 · Wireshark +3 · Wireshark +3

Name of the Vulnerable Software and Affected Versions: Wireshark versions 3.6.0 through 3.6.18 Wireshark versions 4.0.0 through 4.0.10 Description: The issue is related to a NetScreen file parser crash in Wireshark, which can be exploited to cause a denial of service via a crafted capture file...

9.8CVSS7.2AI score0.0462EPSS
SaveExploits36References197
RedHat Linux
RedHat Linux
added 2023/11/14 4:07 p.m.11 views

wireshark: NetScaler file parser crash

A flaw was found in the NetScaler file parser of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a buffer overflow, resulting in a denial of service...

6.5CVSS5.9AI score0.01787EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/08/24 12:00 a.m.5 views

Wireshark 安全漏洞

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in Wireshark versions 4.0.0 through 4.0.6, which stems from a...

7.5CVSS7.2AI score0.00486EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2023/08/08 12:00 a.m.5 views

PT-2023-26697 · Unknown · Jackson-Dataformats-Text

Name of the Vulnerable Software and Affected Versions: jackson-dataformats-text affected versions not specified Description: The issue allows for Denial of Service attacks. If the parser is running on user-supplied input, an attacker may supply content that causes the parser to crash by stack...

7.5CVSS7.3AI score0.00914EPSS
SaveExploits0References14
RedHat Linux
RedHat Linux
added 2023/08/07 8:41 a.m.14 views

Mozilla: Crash in DOMParser due to out-of-memory conditions

The Mozilla Foundation Security Advisory describes this flaw as: An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations...

7.5CVSS7.2AI score0.00923EPSS
SaveExploits0References8
NVD
NVD
added 2023/07/25 8:15 a.m.22 views

CVE-2023-21405

Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlighting that the OSDP message parser crashes the pacsiod process, causing a temporary unavailability of the door-controlling functionalities meaning that doors...

6.5CVSS6.5AI score0.00296EPSS
SaveExploits0References1
OSV
OSV
added 2023/07/25 8:15 a.m.10 views

CVE-2023-21405

Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlighting that the OSDP message parser crashes the pacsiod process, causing a temporary unavailability of the door-controlling functionalities meaning that doors...

6.5CVSS5.8AI score0.00296EPSS
SaveExploits0References1
Prion
Prion
added 2023/07/25 8:15 a.m.21 views

Design/Logic Flaw

Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlighting that the OSDP message parser crashes the pacsiod process, causing a temporary unavailability of the door-controlling functionalities meaning that doors...

3.3CVSS6.5AI score0.00296EPSS
SaveExploits0References1Affected Software5
CNNVD
CNNVD
added 2023/07/25 12:00 a.m.13 views

Axis Network Door Controllers 安全漏洞

AXIS Network Door Controllers is a network door controller from AXIS Sweden. A security vulnerability exists in Axis Network Door Controllers, Axis Network Intercoms, which stems from a crash of the OSDP message parser pacsiod process when communicating via OSDP intercom, resulting in a temporary...

6.5CVSS6.5AI score0.00296EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/07/14 12:00 a.m.6 views

Wireshark 安全漏洞

Wireshark is a set of network packet analysis software from the Wireshark Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark has a denial of service vulnerability that stems from not properly handling incoming error...

5.5CVSS9AI score0.0025EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/07/14 12:00 a.m.7 views

Wireshark 缓冲区错误漏洞

Wireshark is a set of network packet analysis software from the Wireshark Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A denial of service vulnerability exists in Wireshark versions 4.0.0 to 4.0.6, which stems from not proper...

5.5CVSS9AI score0.00239EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2023/06/09 4:07 p.m.36 views

CVE-2023-33546

A denial of service vulnerability was found in the janino compiler. If the parser runs on user-supplied input, an attacker could supply content that causes the parser to crash due to a stack overflow...

6.2CVSS5.3AI score0.0033EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2023/06/06 2:15 p.m.5 views

CVE-2023-33457

In Sogou Workflow v0.10.6, memcpy a negtive size in URIParser::parse , may cause buffer-overflow and crash...

8.8CVSS5.8AI score0.00828EPSS
SaveExploits1References2
OSV
OSV
added 2023/06/03 11:05 a.m.6 views

OESA-2023-1321 wireshark security update

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices,and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful featur...

7.8CVSS6.9AI score0.02256EPSS
SaveExploits6References7
NVD
NVD
added 2023/06/01 1:15 p.m.26 views

CVE-2023-33546

Janino 3.1.9 and earlier are subject to denial of service DOS attacks when using the expression evaluator.guess parameter name method. If the parser runs on user-supplied input, an attacker could supply content that causes the parser to crash due to a stack overflow. NOTE: this is disputed by...

5.5CVSS5.4AI score0.0033EPSS
SaveExploits1References2
OSV
OSV
added 2023/05/26 9:15 p.m.1 views

DEBIAN-CVE-2023-2856

VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file...

6.5CVSS6.2AI score0.01787EPSS
SaveExploits1References1
OSV
OSV
added 2023/05/26 9:15 p.m.1 views

DEBIAN-CVE-2023-2854

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file...

6.5CVSS6.6AI score0.00875EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/05/26 12:00 a.m.3 views

Wireshark 缓冲区错误漏洞

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a security vulnerability that stems from a crash in the BLF file parser,...

6.5CVSS8.6AI score0.00875EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2023/05/26 12:00 a.m.10 views

CVE-2023-2854

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file...

5.3CVSS6.3AI score0.00875EPSS
SaveExploits1References5
Rows per page
Query Builder