Overview 195 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 13 public PoC · 2 EPSS ≥ 0.5
195matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
13public PoC6.7%
2EPSS ≥ 0.51.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
0.5%
Not applicable
194
99.5%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
195
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
13
6.7%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
182
93.3%
split by
peak 133 / year
19991
Not applicable1
Medium1
not blocked1
Working exploit published1
20001
Not applicable1
High1
not blocked1
Working exploit published1
20012
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
20022
Not applicable2
High2
not blocked2
No public exploit2
20034
Not applicable4
Medium4
not blocked4
Working exploit published1
No public exploit3
20046
Not applicable6
High1
Medium5
not blocked6
Working exploit published2
No public exploit4
20054
Not applicable4
Medium4
not blocked4
Working exploit published4
20060
20072
Not applicable2
Critical1
Medium1
not blocked2
Working exploit published1
No public exploit1
20080
20090
20100
20110
20120
20130
20144
Not applicable4
Medium4
not blocked4
Working exploit published1
No public exploit3
20154
Not applicable4
High2
Medium2
not blocked4
Working exploit published1
No public exploit3
20160
2017133
Not applicable133
Critical129
High3
Medium1
not blocked133
No public exploit133
20181
Not applicable1
Medium1
not blocked1
No public exploit1
201926
Outside Waratek scope1
Not applicable25
Critical7
High18
Low1
not blocked26
No public exploit26
20202
Not applicable2
High2
not blocked2
No public exploit2
20210
20221
Not applicable1
Critical1
not blocked1
No public exploit1
20231
Not applicable1
Medium1
not blocked1
No public exploit1
20240
20250
20261
Not applicable1
High1
not blocked1
No public exploit1
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-8658 | High | 2026-06-25 | Not applicable | No public exploit | OS Command Injection vulnerability in Rapid7 InsightConnect Tcpdump Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the options or filter parameters due to insufficient input sanitization in shell command construction. |
| CVE-2023-1801 | Medium | 2023-04-07 | Not applicable | No public exploit | The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet. |
| CVE-2019-15167 | Critical | 2022-08-27 | Not applicable | No public exploit | The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than CVE-2018-14463. |
| CVE-2020-8037 | High | 2020-11-04 | Not applicable | No public exploit | The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory. |
| CVE-2020-8036 | High | 2020-11-04 | Not applicable | No public exploit | The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way. |
| CVE-2019-15166 | High | 2019-10-03 | Outside Waratek scope | No public exploit | lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks. |
| CVE-2018-16452 | High | 2019-10-03 | Not applicable | No public exploit | The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion. |
| CVE-2018-16451 | Critical | 2019-10-03 | Not applicable | No public exploit | The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN. |
| CVE-2018-16301 | High | 2019-10-03 | Not applicable | No public exploit | The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to create a 4GB file on the local filesystem and to specify the file name as the value of the -F command-line argument of tcpdump. |
| CVE-2018-16300 | High | 2019-10-03 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited recursion. |
| CVE-2018-16230 | Critical | 2019-10-03 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI). |
| CVE-2018-16229 | High | 2019-10-03 | Not applicable | No public exploit | The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option(). |
| CVE-2018-16228 | Critical | 2019-10-03 | Not applicable | No public exploit | The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix(). |
| CVE-2018-16227 | High | 2019-10-03 | Not applicable | No public exploit | The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield. |
| CVE-2018-14882 | Critical | 2019-10-03 | Not applicable | No public exploit | The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c. |
| CVE-2018-14881 | Critical | 2019-10-03 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART). |
| CVE-2018-14880 | High | 2019-10-03 | Not applicable | No public exploit | The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr(). |
| CVE-2018-14879 | High | 2019-10-03 | Not applicable | No public exploit | The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file(). |
| CVE-2018-14470 | High | 2019-10-03 | Not applicable | No public exploit | The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2(). |
| CVE-2018-14469 | High | 2019-10-03 | Not applicable | No public exploit | The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print(). |
| CVE-2018-14468 | High | 2019-10-03 | Not applicable | No public exploit | The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print(). |
| CVE-2018-14467 | High | 2019-10-03 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP). |
| CVE-2018-14466 | High | 2019-10-03 | Not applicable | No public exploit | The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert(). |
| CVE-2018-14465 | High | 2019-10-03 | Not applicable | No public exploit | The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). |
| CVE-2018-14464 | High | 2019-10-03 | Not applicable | No public exploit | The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs(). |
| CVE-2018-14463 | High | 2019-10-03 | Not applicable | No public exploit | The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167. |
| CVE-2018-14462 | High | 2019-10-03 | Not applicable | No public exploit | The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print(). |
| CVE-2018-14461 | High | 2019-10-03 | Not applicable | No public exploit | The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print(). |
| CVE-2018-10105 | Critical | 2019-10-03 | Not applicable | No public exploit | tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2). |
| CVE-2018-10103 | Critical | 2019-10-03 | Not applicable | No public exploit | tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2). |
| CVE-2019-1010220 | Low | 2019-07-22 | Not applicable | No public exploit | tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Over-read. The impact is: May expose Saved Frame Pointer, Return Address etc. on stack. The component is: line 234: "ND_PRINT((ndo, "%s", buf));", in function named "print_prefix", in "print-hncp.c". The attack vector is: The victim must open a specially crafted pcap file. |
| CVE-2018-19519 | Medium | 2018-11-25 | Not applicable | No public exploit | In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization. |
| CVE-2017-16808 | Medium | 2017-11-13 | Not applicable | No public exploit | tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c. |
| CVE-2015-3138 | High | 2017-09-28 | Not applicable | No public exploit | print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash). |
| CVE-2017-13725 | Critical | 2017-09-14 | Not applicable | No public exploit | The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print(). |
| CVE-2017-13690 | Critical | 2017-09-14 | Not applicable | No public exploit | The IKEv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. |
| CVE-2017-13689 | Critical | 2017-09-14 | Not applicable | No public exploit | The IKEv1 parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c:ikev1_id_print(). |
| CVE-2017-13688 | Critical | 2017-09-14 | Not applicable | No public exploit | The OLSR parser in tcpdump before 4.9.2 has a buffer over-read in print-olsr.c:olsr_print(). |
| CVE-2017-13687 | Critical | 2017-09-14 | Not applicable | No public exploit | The Cisco HDLC parser in tcpdump before 4.9.2 has a buffer over-read in print-chdlc.c:chdlc_print(). |
| CVE-2017-13055 | Critical | 2017-09-14 | Not applicable | No public exploit | The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv(). |
| CVE-2017-13054 | Critical | 2017-09-14 | Not applicable | No public exploit | The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print(). |
| CVE-2017-13053 | Critical | 2017-09-14 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info(). |
| CVE-2017-13052 | Critical | 2017-09-14 | Not applicable | No public exploit | The CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print(). |
| CVE-2017-13051 | Critical | 2017-09-14 | Not applicable | No public exploit | The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). |
| CVE-2017-13050 | Critical | 2017-09-14 | Not applicable | No public exploit | The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print(). |
| CVE-2017-13049 | Critical | 2017-09-14 | Not applicable | No public exploit | The Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print(). |
| CVE-2017-13048 | Critical | 2017-09-14 | Not applicable | No public exploit | The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). |
| CVE-2017-13047 | Critical | 2017-09-14 | Not applicable | No public exploit | The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print(). |
| CVE-2017-13046 | Critical | 2017-09-14 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:bgp_attr_print(). |
| CVE-2017-13045 | Critical | 2017-09-14 | Not applicable | No public exploit | The VQP parser in tcpdump before 4.9.2 has a buffer over-read in print-vqp.c:vqp_print(). |
| CVE-2017-13044 | Critical | 2017-09-14 | Not applicable | No public exploit | The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv4_print(). |
| CVE-2017-13043 | Critical | 2017-09-14 | Not applicable | No public exploit | The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_multicast_vpn(). |
| CVE-2017-13042 | Critical | 2017-09-14 | Not applicable | No public exploit | The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6_print(). |
| CVE-2017-13041 | Critical | 2017-09-14 | Not applicable | No public exploit | The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print(). |
| CVE-2017-13040 | Critical | 2017-09-14 | Not applicable | No public exploit | The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions. |
| CVE-2017-13039 | Critical | 2017-09-14 | Not applicable | No public exploit | The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions. |
| CVE-2017-13038 | Critical | 2017-09-14 | Not applicable | No public exploit | The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:handle_mlppp(). |
| CVE-2017-13037 | Critical | 2017-09-14 | Not applicable | No public exploit | The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printts(). |
| CVE-2017-13036 | Critical | 2017-09-14 | Not applicable | No public exploit | The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6_decode_v3(). |
| CVE-2017-13035 | Critical | 2017-09-14 | Not applicable | No public exploit | The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_id(). |
| CVE-2017-13034 | Critical | 2017-09-14 | Not applicable | No public exploit | The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). |
| CVE-2017-13033 | Critical | 2017-09-14 | Not applicable | No public exploit | The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print(). |
| CVE-2017-13032 | Critical | 2017-09-14 | Not applicable | No public exploit | The RADIUS parser in tcpdump before 4.9.2 has a buffer over-read in print-radius.c:print_attr_string(). |
| CVE-2017-13031 | Critical | 2017-09-14 | Not applicable | No public exploit | The IPv6 fragmentation header parser in tcpdump before 4.9.2 has a buffer over-read in print-frag6.c:frag6_print(). |
| CVE-2017-13030 | Critical | 2017-09-14 | Not applicable | No public exploit | The PIM parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c, several functions. |
| CVE-2017-13029 | Critical | 2017-09-14 | Not applicable | No public exploit | The PPP parser in tcpdump before 4.9.2 has a buffer over-read in print-ppp.c:print_ccp_config_options(). |
| CVE-2017-13028 | Critical | 2017-09-14 | Not applicable | No public exploit | The BOOTP parser in tcpdump before 4.9.2 has a buffer over-read in print-bootp.c:bootp_print(). |
| CVE-2017-13027 | Critical | 2017-09-14 | Not applicable | No public exploit | The LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_mgmt_addr_tlv_print(). |
| CVE-2017-13026 | Critical | 2017-09-14 | Not applicable | No public exploit | The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions. |
| CVE-2017-13025 | Critical | 2017-09-14 | Not applicable | No public exploit | The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print(). |
| CVE-2017-13024 | Critical | 2017-09-14 | Not applicable | No public exploit | The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print(). |
| CVE-2017-13023 | Critical | 2017-09-14 | Not applicable | No public exploit | The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_opt_print(). |
| CVE-2017-13022 | Critical | 2017-09-14 | Not applicable | No public exploit | The IP parser in tcpdump before 4.9.2 has a buffer over-read in print-ip.c:ip_printroute(). |
| CVE-2017-13021 | Critical | 2017-09-14 | Not applicable | No public exploit | The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_print(). |
| CVE-2017-13020 | Critical | 2017-09-14 | Not applicable | No public exploit | The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print(). |
| CVE-2017-13019 | Critical | 2017-09-14 | Not applicable | No public exploit | The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). |
| CVE-2017-13018 | Critical | 2017-09-14 | Not applicable | No public exploit | The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print(). |
| CVE-2017-13017 | Critical | 2017-09-14 | Not applicable | No public exploit | The DHCPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-dhcp6.c:dhcp6opt_print(). |
| CVE-2017-13016 | Critical | 2017-09-14 | Not applicable | No public exploit | The ISO ES-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:esis_print(). |
| CVE-2017-13015 | Critical | 2017-09-14 | Not applicable | No public exploit | The EAP parser in tcpdump before 4.9.2 has a buffer over-read in print-eap.c:eap_print(). |
| CVE-2017-13014 | Critical | 2017-09-14 | Not applicable | No public exploit | The White Board protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-wb.c:wb_prep(), several functions. |
| CVE-2017-13013 | Critical | 2017-09-14 | Not applicable | No public exploit | The ARP parser in tcpdump before 4.9.2 has a buffer over-read in print-arp.c, several functions. |
| CVE-2017-13012 | Critical | 2017-09-14 | Not applicable | No public exploit | The ICMP parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp.c:icmp_print(). |
| CVE-2017-13011 | Critical | 2017-09-14 | Not applicable | No public exploit | Several protocol parsers in tcpdump before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal(). |
| CVE-2017-13010 | Critical | 2017-09-14 | Not applicable | No public exploit | The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:l_strnstart(). |
| CVE-2017-13009 | Critical | 2017-09-14 | Not applicable | No public exploit | The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobility_print(). |
| CVE-2017-13008 | Critical | 2017-09-14 | Not applicable | No public exploit | The IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c:parse_elements(). |
| CVE-2017-13007 | Critical | 2017-09-14 | Not applicable | No public exploit | The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktap_if_print(). |
| CVE-2017-13006 | Critical | 2017-09-14 | Not applicable | No public exploit | The L2TP parser in tcpdump before 4.9.2 has a buffer over-read in print-l2tp.c, several functions. |
| CVE-2017-13005 | Critical | 2017-09-14 | Not applicable | No public exploit | The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xid_map_enter(). |
| CVE-2017-13004 | Critical | 2017-09-14 | Not applicable | No public exploit | The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniper_parse_header(). |
| CVE-2017-13003 | Critical | 2017-09-14 | Not applicable | No public exploit | The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmp_print(). |
| CVE-2017-13002 | Critical | 2017-09-14 | Not applicable | No public exploit | The AODV parser in tcpdump before 4.9.2 has a buffer over-read in print-aodv.c:aodv_extension(). |
| CVE-2017-13001 | Critical | 2017-09-14 | Not applicable | No public exploit | The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfs_printfh(). |
| CVE-2017-13000 | Critical | 2017-09-14 | Not applicable | No public exploit | The IEEE 802.15.4 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_15_4.c:ieee802_15_4_if_print(). |
| CVE-2017-12999 | Critical | 2017-09-14 | Not applicable | No public exploit | The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print(). |
| CVE-2017-12998 | Critical | 2017-09-14 | Not applicable | No public exploit | The IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_extd_ip_reach(). |
| CVE-2017-12997 | Critical | 2017-09-14 | Not applicable | No public exploit | The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print(). |
| CVE-2017-12996 | Critical | 2017-09-14 | Not applicable | No public exploit | The PIMv2 parser in tcpdump before 4.9.2 has a buffer over-read in print-pim.c:pimv2_print(). |
| CVE-2017-12995 | Critical | 2017-09-14 | Not applicable | No public exploit | The DNS parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-domain.c:ns_print(). |