Overview 1,482 matches · 13 in Waratek scope · 1 protected · 15 exploited · 5 CISA KEV · 116 public PoC · 12 EPSS ≥ 0.5
1,482matches
13in Waratek scope0.9%
1protected0.1%
15exploited1.0%
5CISA KEV0.3%
116public PoC7.8%
12EPSS ≥ 0.50.8%
Protected by Waratek
1
0.1%
Rule in development
0
0.0%
Mitigation candidate
1
0.1%
No exploit published
11
0.7%
Outside Waratek scope
2
0.1%
Not applicable
1,467
99.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
1
0.1%
partly blocked
0
0.0%
not blocked
1,481
99.9%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 158 / year
19991
Not applicable1
Low1
not blocked1
No public exploit1
20000
20011
Not applicable1
Medium1
not blocked1
No public exploit1
20021
Not applicable1
Low1
not blocked1
No public exploit1
20035
Not applicable5
High2
Medium3
not blocked5
Working exploit published2
No public exploit3
20049
Not applicable9
High5
Medium4
not blocked9
Working exploit published2
No public exploit7
200515
Outside Waratek scope1
Not applicable14
High8
Medium6
Low1
not blocked15
Working exploit published3
No public exploit12
200640
Not applicable40
High14
Medium25
Low1
not blocked40
Working exploit published9
No public exploit31
200751
Not applicable51
High20
Medium28
Low3
not blocked51
Working exploit published5
No public exploit46
200827
Not applicable27
High3
Medium22
Low2
not blocked27
Working exploit published5
No public exploit22
200935
Not applicable35
High14
Medium20
Low1
not blocked35
Working exploit published5
No public exploit30
201037
Not applicable37
High22
Medium11
Low4
not blocked37
Working exploit published4
No public exploit33
201133
Not applicable33
High7
Medium25
Low1
not blocked33
Working exploit published8
No public exploit25
201260
Not applicable60
High8
Medium29
Low23
not blocked60
Working exploit published13
No public exploit47
2013102
Not applicable102
High10
Medium64
Low28
not blocked102
Working exploit published1
No public exploit101
201450
Not applicable50
High15
Medium35
not blocked50
Exploited1
Working exploit published6
No public exploit43
201559
Not applicable59
Critical2
High10
Medium46
Low1
not blocked59
Working exploit published3
No public exploit56
2016117
Outside Waratek scope1
Not applicable116
Critical3
High13
Medium101
not blocked117
Working exploit published20
No public exploit97
201783
Not applicable83
Critical5
High69
Medium9
not blocked83
Exploited6
Working exploit published6
No public exploit71
2018119
No exploit published1
Not applicable118
Critical8
High90
Medium19
Low2
not blocked119
Exploited1
Working exploit published2
No public exploit116
201957
Not applicable57
Critical5
High33
Medium19
not blocked57
Exploited2
Working exploit published1
No public exploit54
202058
Not applicable58
Critical10
High32
Medium16
not blocked58
Working exploit published3
No public exploit55
2021142
No exploit published2
Not applicable140
Critical14
High95
Medium31
Low2
not blocked142
Exploited1
Working exploit published1
No public exploit140
202277
No exploit published1
Not applicable76
Critical7
High25
Medium44
Low1
not blocked77
Working exploit published1
Proof of concept only4
No public exploit72
202365
Protected by Waratek1
No exploit published2
Not applicable62
Critical7
High19
Medium39
blocked by ARMR today1
not blocked64
Exploited2
Proof of concept only17
No public exploit46
202449
Not applicable49
Critical3
High27
Medium19
not blocked49
Proof of concept only15
No public exploit34
202531
Mitigation candidate1
No exploit published2
Not applicable28
Critical2
High17
Medium12
not blocked31
Exploited1
Working exploit published1
Proof of concept only1
No public exploit28
2026158
No exploit published3
Not applicable155
Critical2
High62
Medium92
Low2
not blocked158
Exploited1
Proof of concept only64
No public exploit93
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-5656 | High | 2026-05-01 | Not applicable | No public exploit | Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution |
| CVE-2026-5405 | High | 2026-05-01 | Not applicable | No public exploit | RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution |
| CVE-2026-5404 | Medium | 2026-05-01 | Not applicable | No public exploit | K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5403 | High | 2026-05-01 | Not applicable | No public exploit | SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code execution |
| CVE-2026-7379 | High | 2026-04-30 | Not applicable | No public exploit | Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-7378 | High | 2026-04-30 | Not applicable | No public exploit | Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-7376 | High | 2026-04-30 | Not applicable | Proof of concept only | Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-7375 | High | 2026-04-30 | Not applicable | No public exploit | UDS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6870 | Medium | 2026-04-30 | Not applicable | Proof of concept only | GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6869 | Medium | 2026-04-30 | Not applicable | Proof of concept only | WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6868 | High | 2026-04-30 | Not applicable | No public exploit | HTTP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6867 | Medium | 2026-04-30 | Not applicable | No public exploit | SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6538 | Medium | 2026-04-30 | Not applicable | Proof of concept only | BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6537 | Medium | 2026-04-30 | Not applicable | Proof of concept only | ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6536 | Medium | 2026-04-30 | Not applicable | Proof of concept only | DLMS/COSEM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 |
| CVE-2026-6535 | Medium | 2026-04-30 | Not applicable | No public exploit | Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6534 | Medium | 2026-04-30 | Not applicable | Proof of concept only | USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6533 | Medium | 2026-04-30 | Not applicable | Proof of concept only | Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6532 | Medium | 2026-04-30 | Not applicable | Proof of concept only | Kismet protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6531 | Medium | 2026-04-30 | Not applicable | No public exploit | SANE protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6530 | Medium | 2026-04-30 | Not applicable | Proof of concept only | DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6529 | Medium | 2026-04-30 | Not applicable | No public exploit | iLBC audio codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6528 | Medium | 2026-04-30 | Not applicable | No public exploit | TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service |
| CVE-2026-6527 | Medium | 2026-04-30 | Not applicable | No public exploit | ASN.1 PER protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6526 | Medium | 2026-04-30 | Not applicable | No public exploit | RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 |
| CVE-2026-6524 | Medium | 2026-04-30 | Not applicable | No public exploit | MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6523 | Medium | 2026-04-30 | Not applicable | No public exploit | GNW protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6522 | Medium | 2026-04-30 | Not applicable | Proof of concept only | RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6521 | Medium | 2026-04-30 | Not applicable | No public exploit | OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6520 | High | 2026-04-30 | Not applicable | No public exploit | OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6519 | High | 2026-04-30 | Not applicable | Proof of concept only | MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5657 | High | 2026-04-30 | Not applicable | Proof of concept only | iLBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5655 | High | 2026-04-30 | Not applicable | Proof of concept only | SDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 allows denial of service |
| CVE-2026-5654 | High | 2026-04-30 | Not applicable | Proof of concept only | AMR-NB codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5653 | High | 2026-04-30 | Not applicable | Proof of concept only | DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5409 | Medium | 2026-04-30 | Not applicable | Proof of concept only | Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5408 | Medium | 2026-04-30 | Not applicable | Proof of concept only | BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5407 | Medium | 2026-04-30 | Not applicable | Proof of concept only | SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5406 | Medium | 2026-04-30 | Not applicable | Proof of concept only | FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5402 | High | 2026-04-30 | Not applicable | No public exploit | TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution |
| CVE-2026-5401 | Medium | 2026-04-30 | Not applicable | Proof of concept only | AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5299 | Medium | 2026-04-30 | Not applicable | Proof of concept only | ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2025-47392 | High | 2026-04-06 | Not applicable | No public exploit | Memory corruption when decoding corrupted satellite data files with invalid signature offsets. |
| CVE-2026-32642 | Low | 2026-03-24 | No exploit published | No public exploit | Incorrect Authorization (CWE-863) vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application using the OpenWire protocol attempts to create a non-durable JMS topic subscription on an address that doesn't exist with an authenticated user which has the "createDurableQueue" permission but does not have the "createAddress" permission and address auto-creation is disabled. In this circumstance, a temporary address will be created whereas the attempt to create the non-durable subscription should instead fail since the user is not authorized to create the corresponding address. When the OpenWire connection is closed the address is removed. This issue affects Apache Artemis: from 2.50.0 through 2.52.0; Apache ActiveMQ Artemis: from 2.0.0 through 2.44.0. Users are recommended to upgrade to version 2.53.0, which fixes the issue. |
| CVE-2026-21385 | High | 2026-03-02 | Not applicable | Exploited | Memory corruption while using alignments for memory allocation. |
| CVE-2025-47384 | Medium | 2026-03-02 | Not applicable | No public exploit | Transient DOS when MAC configures config id greater than supported maximum value. |
| CVE-2025-47383 | High | 2026-03-02 | Not applicable | No public exploit | Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE. |
| CVE-2025-47379 | High | 2026-03-02 | Not applicable | No public exploit | Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources. |
| CVE-2025-47371 | Medium | 2026-03-02 | Not applicable | No public exploit | Transient DOS when an LTE RLC packet with invalid TB is received by UE. |
| CVE-2026-27899 | High | 2026-02-26 | Not applicable | No public exploit | WireGuard Portal (or wg-portal) is a web-based configuration portal for WireGuard server management. Prior to version 2.1.3, any authenticated non-admin user can become a full administrator by sending a single PUT request to their own user profile endpoint with `"IsAdmin": true` in the JSON body. After logging out and back in, the session picks up admin privileges from the database. When a user updates their own profile, the server parses the full JSON body into the user model, including the `IsAdmin` boolean field. A function responsible for preserving calculated or protected attributes pins certain fields to their database values (such as base model data, linked peer count, and authentication data), but it does not do this for `IsAdmin`. As a result, whatever value the client sends for `IsAdmin` is written directly to the database. After the exploit, the attacker has full admin access to the WireGuard VPN management portal. The problem was fixed in v2.1.3. The docker images for the tag 'latest' built from the master branch also include the fix. |
| CVE-2026-3203 | High | 2026-02-25 | Not applicable | No public exploit | RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service |
| CVE-2026-3202 | High | 2026-02-25 | Not applicable | No public exploit | NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of service |
| CVE-2026-3201 | High | 2026-02-25 | Not applicable | No public exploit | USB HID protocol dissector memory exhaustion in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of service |
| CVE-2025-65349 | Medium | 2026-01-15 | Not applicable | Proof of concept only | A Stored Cross-Site Scripting (XSS) vulnerability in Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to execute arbitrary scripts via a crafted payload due to unsanitized repeater AP SSID value when is displayed in any page at /index.htm. |
| CVE-2026-0962 | Medium | 2026-01-14 | Not applicable | Proof of concept only | SOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service |
| CVE-2026-0961 | Medium | 2026-01-14 | Not applicable | Proof of concept only | BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service |
| CVE-2026-0960 | Medium | 2026-01-14 | Not applicable | Proof of concept only | HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service |
| CVE-2026-0959 | Medium | 2026-01-14 | Not applicable | Proof of concept only | IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service |
| CVE-2025-13946 | Medium | 2025-12-03 | Not applicable | No public exploit | MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service |
| CVE-2025-13945 | Medium | 2025-12-03 | Not applicable | No public exploit | HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service |
| CVE-2025-13674 | Medium | 2025-11-26 | Not applicable | No public exploit | BPv7 dissector crash in Wireshark 4.6.0 allows denial of service |
| CVE-2025-13499 | High | 2025-11-21 | Not applicable | No public exploit | Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service |
| CVE-2025-60790 | Medium | 2025-10-21 | Not applicable | Proof of concept only | ProcessWire CMS 3.0.246 allows a low-privileged user with lang-edit to upload a crafted ZIP to Language Support that is auto-extracted without limits prior to validation, enabling resource-exhaustion Denial of Service. |
| CVE-2025-11626 | Medium | 2025-10-10 | Not applicable | No public exploit | MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service |
| CVE-2025-11190 | Medium | 2025-10-10 | Not applicable | No public exploit | The Kiwire Captive Portal contains an open redirection issue via the login-url parameter, allowing an attacker to redirect users to an attacker controlled website. |
| CVE-2025-11189 | High | 2025-10-10 | Not applicable | No public exploit | The Kiwire Captive Portal contains a reflected cross-site scripting (XSS) vulnerability within the login-url parameter, allowing for Javascript execution. |
| CVE-2025-11188 | High | 2025-10-10 | Not applicable | No public exploit | The Kiwire Captive Portal contains a blind SQL injection in the nas-id parameter, allowing for SQL commands to be issued and to compromise the corresponding database. |
| CVE-2025-9817 | High | 2025-09-03 | Not applicable | No public exploit | SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service |
| CVE-2025-54068 | Critical | 2025-07-17 | Not applicable | Exploited | Livewire is a full-stack framework for Laravel. In Livewire v3 up to and including v3.6.3, a vulnerability allows unauthenticated attackers to achieve remote command execution in specific scenarios. The issue stems from how certain component property updates are hydrated. This vulnerability is unique to Livewire v3 and does not affect prior major versions. Exploitation requires a component to be mounted and configured in a particular way, but does not require authentication or user interaction. This issue has been patched in Livewire v3.6.4. All users are strongly encouraged to upgrade to this version or later as soon as possible. No known workarounds are available. |
| CVE-2025-53672 | Medium | 2025-07-09 | No exploit published | No public exploit | Jenkins Kryptowire Plugin 0.2 and earlier stores the Kryptowire API key unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system. |
| CVE-2025-5601 | High | 2025-06-04 | Not applicable | No public exploit | Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file |
| CVE-2025-48066 | Medium | 2025-05-22 | Not applicable | No public exploit | wire-webapp is the web application for the open-source messaging service Wire. A bug fix caused a regression causing an issue with function to delete local data. Instructing the client to delete its local database on user logout does not result in deletion. This is the case for both temporary clients (marking the device as a public computer on login) and regular clients instructing the deletion of all personal information and conversations upon logout. Access to the machine is required to access the data. If encryption-at-rest is used, cryptographic material can't be exported. The underlying issue has been fixed with wire-webapp version 2025-05-14-production.0. In order to mitigate potential impact, the database must be manually deleted on devices where the option "This is a public computer" was used prior to log in or a log out with the request to delete local data with the affected versions has happened before. |
| CVE-2025-20618 | High | 2025-05-13 | Not applicable | No public exploit | Stack-based buffer overflow for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a privileged user to potentially enable denial of service via local access. |
| CVE-2025-20062 | High | 2025-05-13 | Not applicable | No public exploit | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
| CVE-2025-20046 | High | 2025-05-13 | Not applicable | No public exploit | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
| CVE-2025-20039 | Medium | 2025-05-13 | Not applicable | No public exploit | Race condition for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
| CVE-2025-20032 | High | 2025-05-13 | Not applicable | No public exploit | Improper input validation for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a privileged user to potentially enable denial of service via local access. |
| CVE-2025-20026 | High | 2025-05-13 | Not applicable | No public exploit | Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
| CVE-2025-20006 | High | 2025-05-13 | Not applicable | No public exploit | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
| CVE-2025-27533 | Medium | 2025-05-07 | Mitigation candidate | Working exploit published | Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ. During unmarshalling of OpenWire commands the size value of buffers was not properly validated which could lead to excessive memory allocation and be exploited to cause a denial of service (DoS) by depleting process memory, thereby affecting applications and services that rely on the availability of the ActiveMQ broker when not using mutual TLS connections. This issue affects Apache ActiveMQ: from 6.0.0 before 6.1.6, from 5.18.0 before 5.18.7, from 5.17.0 before 5.17.7, before 5.16.8. ActiveMQ 5.19.0 is not affected. Users are recommended to upgrade to version 6.1.6+, 5.19.0+, 5.18.7+, 5.17.7, or 5.16.8 or which fixes the issue. Existing users may implement mutual TLS to mitigate the risk on affected brokers. |
| CVE-2025-29953 | Critical | 2025-04-18 | Not applicable | No public exploit | Deserialization of Untrusted Data vulnerability in Apache ActiveMQ NMS OpenWire Client. This issue affects Apache ActiveMQ NMS OpenWire Client before 2.1.1 when performing connections to untrusted servers. Such servers could abuse the unbounded deserialization in the client to provide malicious responses that may eventually cause arbitrary code execution on the client. Version 2.1.0 introduced a allow/denylist feature to restrict deserialization, but this feature could be bypassed. The .NET team has deprecated the built-in .NET binary serialization feature starting with .NET 9 and suggests migrating away from binary serialization. The project is considering to follow suit and drop this part of the NMS API altogether. Users are recommended to upgrade to version 2.1.1, which fixes the issue. We also recommend to migrate away from relying on .NET binary serialization as a hardening method for the future. |
| CVE-2024-58103 | Medium | 2025-03-16 | No exploit published | No public exploit | Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt. |
| CVE-2025-1492 | High | 2025-02-20 | Not applicable | No public exploit | Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file |
| CVE-2024-23971 | High | 2025-01-31 | Not applicable | No public exploit | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of OCPP messages. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. |
| CVE-2024-23970 | Medium | 2025-01-31 | Not applicable | No public exploit | This vulnerability allows network-adjacent attackers to compromise transport security on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CURLOPT_SSL_VERIFYHOST setting. The issue results from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. |
| CVE-2024-23969 | High | 2025-01-31 | Not applicable | No public exploit | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the wlanchnllst function. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of root. |
| CVE-2024-23968 | High | 2025-01-31 | Not applicable | No public exploit | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SrvrToSmSetAutoChnlListMsg function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. |
| CVE-2024-23921 | High | 2025-01-31 | Not applicable | No public exploit | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the wlanapp module. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. |
| CVE-2024-23920 | High | 2025-01-31 | Not applicable | No public exploit | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the onboardee module. The issue results from improper access control. An attacker can leverage this vulnerability to execute code in the context of root. |
| CVE-2024-11596 | High | 2024-11-21 | Not applicable | Proof of concept only | ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file |
| CVE-2024-11595 | High | 2024-11-21 | Not applicable | No public exploit | FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file |
| CVE-2021-1379 | Medium | 2024-11-18 | Not applicable | No public exploit | Multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations for Cisco IP Phone Series 68xx/78xx/88xx could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP phone. These vulnerabilities are due to missing checks when the IP phone processes a Cisco Discovery Protocol or LLDP packet. An attacker could exploit these vulnerabilities by sending a malicious Cisco Discovery Protocol or LLDP packet to the targeted IP phone. A successful exploit could allow the attacker to execute code on the affected IP phone or cause it to reload unexpectedly, resulting in a denial of service (DoS) condition.Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. |
| CVE-2024-28049 | Medium | 2024-11-13 | Not applicable | No public exploit | Improper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi wireless products before version 23.40 may allow an unauthenticated user to enable denial of service via adjacent access. |
| CVE-2024-25563 | Medium | 2024-11-13 | Not applicable | No public exploit | Improper initialization in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi before version 23.40 may allow a privileged user to potentially enable information disclosure via local access. |
| CVE-2024-23198 | Medium | 2024-11-13 | Not applicable | No public exploit | Improper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi products before version 23.40 may allow an unauthenticated user to enable denial of service via adjacent access. |
| CVE-2024-9781 | High | 2024-10-10 | Not applicable | Proof of concept only | AppleTalk and RELOAD Framing dissector crash in Wireshark 4.4.0 and 4.2.0 to 4.2.7 allows denial of service via packet injection or crafted capture file |
| CVE-2024-9780 | High | 2024-10-10 | Not applicable | Proof of concept only | ITS dissector crash in Wireshark 4.4.0 allows denial of service via packet injection or crafted capture file |
| CVE-2024-47823 | High | 2024-10-08 | Not applicable | Proof of concept only | Livewire is a full-stack framework for Laravel that allows for dynamic UI components without leaving PHP. In livewire/livewire prior to `2.12.7` and `v3.5.2`, the file extension of an uploaded file is guessed based on the MIME type. As a result, the actual file extension from the file name is not validated. An attacker can therefore bypass the validation by uploading a file with a valid MIME type (e.g., `image/png`) and a “.php” file extension. If the following criteria are met, the attacker can carry out an RCE attack: 1. Filename is composed of the original file name using `$file->getClientOriginalName()`. 2. Files stored directly on your server in a public storage disk. 3. Webserver is configured to execute “.php” files. This issue has been addressed in release versions `2.12.7` and `3.5.2`. All users are advised to upgrade. There are no known workarounds for this vulnerability. |
| CVE-2024-44097 | Critical | 2024-10-02 | Not applicable | No public exploit | According to the researcher: "The TLS connections are encrypted against tampering or eavesdropping. However, the application does not validate the server certificate properly while initializing the TLS connection. This allows for a network attacker to intercept the connection and read the data. The attacker could the either send the client a malicious response, or forward the (possibly modified) data to the real server." |
| CVE-2024-20470 | High | 2024-10-02 | Not applicable | No public exploit | A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. In order to exploit this vulnerability, the attacker must have valid admin credentials. This vulnerability exists because the web-based management interface does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by sending crafted HTTP input to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system. |