CVE-2022-1054

The CVE-2022-1054 entry concerns the WordPress RSVP and Event Management plugin before 2.7.8, which lacks authorization checks for exporting entries and hooks the export function to the init action. This allows unauthenticated users to retrieve PII (first name, last name, email) of event-register...

CVE-2022-1054 RSVP and Event Management < 2.7.8 - Unauthenticated Entries Export

The RSVP and Event Management Plugin WordPress plugin before 2.7.8 does not have any authorisation checks when exporting its entries, and has the export function hooked to the init action. As a result, unauthenticated attackers could call it and retrieve PII such as first name, last name and emai...

WordPress RSVP and Event Management plugin <= 2.7.7 - Unauthenticated Entries Export vulnerability

Unauthenticated Entries Export vulnerability discovered by Daniel Ruf in WordPress RSVP and Event Management plugin versions = 2.7.7. Solution Update the WordPress RSVP and Event Management plugin to the latest available version at least 2.7.8...

RSVP and Event Management < 2.7.5 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape various parameters before outputting them back in attributes in admin pages, leading to Reflected Cross-Site Scripting issues https://example.com/wp-admin/admin.php?page=rsvp-top-level&s="alert/XSS-s/&pagesize="alert/XSS-pagesize/...

WordPress RSVP and Event Management plugin <= 2.7.4 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting XSS vulnerability discovered in WordPress RSVP and Event Management plugin versions = 2.7.4. The vulnerability has some limitations in the case of high privilege users. Solution Update the WordPress RSVP and Event Management plugin to the latest availab...

WordPress RSVP and Event Management plugin <= 2.7.4 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress RSVP and Event Management plugin versions = 2.7.4. Solution Update the WordPress RSVP and Event Management plugin to the latest available version at least 2.7.5...

NewStart CGSL MAIN 6.02 : tcpdump Multiple Vulnerabilities (NS-SA-2021-0082)

The remote NewStart CGSL host, running version MAIN 6.02, has tcpdump packages installed that are affected by multiple vulnerabilities: - The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmpprint. CVE-2018-14462 - The ICMPv6 parser in tcpdump before 4.9.3 has a buff...

CVE-2021-0208

An improper input validation vulnerability in the Routing Protocol Daemon RPD service of Juniper Networks Junos OS allows an attacker to send a malformed RSVP packet when bidirectional LSPs are in use, which when received by an egress router crashes the RPD causing a Denial of Service DoS...

Input validation

An improper input validation vulnerability in the Routing Protocol Daemon RPD service of Juniper Networks Junos OS allows an attacker to send a malformed RSVP packet when bidirectional LSPs are in use, which when received by an egress router crashes the RPD causing a Denial of Service DoS...

Oracle Linux 8 : tcpdump (ELSA-2020-4760)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-4760 advisory. 14:4.9.3-1 - Resolves: 1804063 - Rebase tcpdump to 4.9.3 to fix multiple CVEs Tenable has extracted the preceding description block directly from the...

The vulnerability of the rsvp_obj_print() function in the tcpdump network traffic capture and analysis tool allows a hacker to induce a service failure.

The vulnerability of the rsvpobjprint function print-rsvp.c in the packet capture and analysis tool tcpdump is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Denial Of Service (DoS)

tcpdump is vulnerable to denial of service DoS. The vulnerability exists as the RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvpobjprint...

Huawei Data Communication: Deploying RSVP Authentication

RSVP MD5 authentication is deployed to prevent attackers from attempting to use protocols on the control plane to destroy entries on which forwarding depends, such as routes. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...

Huawei Data Communication: Read and parse display mpls rsvp-te interface

Get mpls rsvp-te interface configuration of the VRP device. Please set screen-length of user-interface to 0, otherwise not all configurations are returned. Note: This script only stores information for other Policy Controls. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might b...

Huawei Data Communication: Memory Leak Vulnerability in Some Huawei Products (huawei-sa-20171201-01-router)

Some Huawei products have a memory leak vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...

Huawei Data Communication: DoS Vulnerability in Multiple Huawei Devices (huawei-sa-20161228-01-rsvp)

There is a denial of service DoS vulnerability in multiple Huawei devices. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

EulerOS 2.0 SP3 : tcpdump (EulerOS-SA-2020-1437)

According to the versions of the tcpdump package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - tcpdump before 4.9.3 mishandles the printing of SMB data issue 1 of 2.CVE-2018-10103 - tcpdump before 4.9.3 mishandles the printing of SMB data...

Huawei EulerOS: Security Advisory for tcpdump (EulerOS-SA-2017-1280)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.5.0 : tcpdump (EulerOS-SA-2020-1072)

According to the versions of the tcpdump package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer,...

Vulnerability of the print-rsvp.c:rsvp_obj_print() utility for capturing and analyzing network traffic with tcpdump: This utility allows a intruder to gain unauthorized access to information and compromise its integrity and availability.

The vulnerability in the print-rsvp.c:rsvpobjprint utility for capturing and analyzing network traffic using tcpdump is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to information and compromise...