CVE-2022-45969

Alist v3.4.0 is vulnerable to Directory Traversal,...

CVE-2017-18497

The liveforms plugin before 3.4.0 for WordPress has XSS...

WordPress Magic the Gathering Card Tooltips plugin <= 3.4.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by muhammad yudha in WordPress Plugin Magic the Gathering Card Tooltips versions = 3.4.0...

Zephyr Security Breach

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr 3.4.0 and earlier versions, which stems from a buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver...

Zephyr Security Breach

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr 3.4.0 and earlier versions, which stems from a buffer overflow vulnerability in component /subsys/net/l2/wifi/wiishell.c. The vulnerability is caused by a buffer...

Zephyr Security Breach

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr 3.4.0 and earlier versions, which originates from a buffer overflow in /drivers/wifi/eswifi/eswificore.c and /drivers/wifi/eswifi/eswifishell.c in the eS-WiFi driv...

ASUS Armoury Crate Service 代码问题漏洞

ASUS Armoury Crate Service is a software utility program from Asus China. It is designed to provide centralized control of supported ROG gaming products. An elevation of privilege vulnerability exists in ASUS Armoury Crate Service version v5.3.4.0, which stems from ASUS SetupAsusServices containi...

CVE-2022-47149

Cross-Site Request Forgery CSRF vulnerability in Pretty Links plugin = 3.4.0 versions...

Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

...

Wireshark 缓冲区错误漏洞

Wireshark formerly Ethereal is a set of network packet analysis software from the Wireshark team. Wireshark versions 3.6.0 and 3.4.0 - 3.4.10 contain an injection vulnerability that stems from a crash in the Sysdig event parser. An attacker could exploit this vulnerability to cause a denial of...

CVE-2021-31838

A command injection vulnerability in MVISION EDR MVEDR prior to 3.4.0 allows an authenticated MVEDR administrator to trigger the EDR client to execute arbitrary commands through PowerShell using the EDR functionality 'execute reaction'...

AZL-7406 CVE-2021-22222 affecting package wireshark for versions less than 3.4.14-1

Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file...

PT-2019-11545

Name of the Vulnerable Software and Affected Versions: Linaro/OP-TEE versions prior to 3.4.0 Description: The issue affects the optee os component and can lead to memory corruption of the TEE itself due to boundary crossing. Recommendations: For versions prior to 3.4.0, update to version 3.4.0 or...

Bootstrap Cross-Site Scripting Vulnerability (CNVD-2019-23270)

Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript . A cross-site scripting vulnerability exists in affix in Bootstrap versions prior to 3.4.0, which can be exploited by remote attackers to inject arbitrary web script or HTML...

CVE-2016-6418

Cross-site scripting XSS vulnerability in Cisco Videoscape Distribution Suite Service Manager VDS-SM 3.0 through 3.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCva14552...