Search CVE reports
1 – 10 of 58461 results
Ettercap through 0.8.4.1 contains a stack buffer underwrite vulnerability in the telnet dissector in src/dissectors/ec_telnet.c that decrements the output pointer on backspace without a lower bound check. Attackers can send a...
1 affected package
ettercap
| Package | 22.04 LTS |
|---|---|
| ettercap | Needs evaluation |
Ettercap through 0.8.4.1 contains an out-of-bounds read vulnerability in Parse_NTLM_Auth() in src/dissectors/ec_http.c due to unvalidated NTLM message offsets. Attackers can send a crafted HTTP Authorization header observed by...
1 affected package
ettercap
| Package | 22.04 LTS |
|---|---|
| ettercap | Needs evaluation |
Ettercap through 0.8.4.1 contains an integer underflow in ccmp_decrypt() in src/ec_encryption_ccmp.c that subtracts the 8-byte CCMP trailer without checking minimum length. Attackers on a network whose WPA key is loaded can send a...
1 affected package
ettercap
| Package | 22.04 LTS |
|---|---|
| ettercap | Needs evaluation |
Ettercap through 0.8.4.1 contains an out-of-bounds read and size_t underflow vulnerability in sslw_remove_sts() in src/ec_sslwrap.c, caused by a stale length and an unchecked memmem() result when...
1 affected package
ettercap
| Package | 22.04 LTS |
|---|---|
| ettercap | Needs evaluation |
Ettercap through 0.8.4.1 contains a heap out-of-bounds read vulnerability in sslw_get_clienthello_sni() in src/ec_sslwrap.c that trusts the unchecked 16-bit SNI length field. Network-adjacent attackers can send crafted...
1 affected package
ettercap
| Package | 22.04 LTS |
|---|---|
| ettercap | Needs evaluation |
Ettercap through 0.8.4.1 contains a heap buffer overflow vulnerability in gg_get_version() in src/dissectors/ec_gg.c that writes up to 44 bytes into a 30-byte allocation. Remote attackers can send Gadu-Gadu traffic on TCP port...
1 affected package
ettercap
| Package | 22.04 LTS |
|---|---|
| ettercap | Needs evaluation |
Ettercap through 0.8.4.1 contains a use-after-free vulnerability in func_pcre() in src/ec_filter.c that reads the PCRE2 ovector after freeing match data. Network-adjacent attackers can send packets matching a loaded pcre_regex()...
1 affected package
ettercap
| Package | 22.04 LTS |
|---|---|
| ettercap | Needs evaluation |
Not in release
Ampache before 8.4.0 contains a stored cross-site scripting vulnerability that allows users with upload rights to inject script through unescaped song lyrics in LyricsView.php getLyrics() and show_lyrics.inc.php. Attackers can...
1 affected package
ampache
| Package | 22.04 LTS |
|---|---|
| ampache | Not in release |
Not in release
FreeRDP before 3.33.0 contains a heap use-after-free vulnerability in update_gdi_patblt(), update_gdi_polygon_cb() and update_gdi_mem3blt() that retain stale brush cache pointers. A malicious RDP server can resend CACHE_BRUSH to...
1 affected package
freerdp
| Package | 22.04 LTS |
|---|---|
| freerdp | Not in release |
Not in release
Movim through 0.35.5 contains an authorization bypass vulnerability in Post::ajaxGetPost that allows authenticated users to read restricted posts by supplying server, node and nodeid values. Attackers who know item identifiers can...
1 affected package
movim
| Package | 22.04 LTS |
|---|---|
| movim | Not in release |