Overview 720 matches · 5 in Waratek scope · 0 protected · 1 exploited · 0 CISA KEV · 56 public PoC · 3 EPSS ≥ 0.5
720matches
5in Waratek scope0.7%
0protected0.0%
1exploited0.1%
0CISA KEV0.0%
56public PoC7.8%
3EPSS ≥ 0.50.4%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
1
0.1%
No exploit published
4
0.6%
Outside Waratek scope
1
0.1%
Not applicable
714
99.2%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
720
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 101 / year
20011
Not applicable1
Medium1
not blocked1
No public exploit1
20020
20033
Not applicable3
Medium3
not blocked3
No public exploit3
20044
Not applicable4
Medium4
not blocked4
Working exploit published1
No public exploit3
20056
Outside Waratek scope1
Not applicable5
Medium6
not blocked6
Working exploit published2
No public exploit4
200625
Not applicable25
Medium25
not blocked25
Working exploit published6
No public exploit19
200728
Not applicable28
Medium28
not blocked28
Working exploit published3
No public exploit25
200822
Not applicable22
Medium22
not blocked22
Working exploit published5
No public exploit17
200920
Not applicable20
Medium20
not blocked20
Working exploit published2
No public exploit18
201011
Not applicable11
Medium11
not blocked11
Working exploit published1
No public exploit10
201125
Not applicable25
Medium25
not blocked25
Working exploit published4
No public exploit21
201229
Not applicable29
Medium29
not blocked29
Working exploit published4
No public exploit25
201364
Not applicable64
Medium64
not blocked64
Working exploit published1
No public exploit63
201435
Not applicable35
Medium35
not blocked35
Working exploit published4
No public exploit31
201546
Not applicable46
Medium46
not blocked46
Working exploit published1
No public exploit45
2016101
Not applicable101
Medium101
not blocked101
Working exploit published19
No public exploit82
20179
Not applicable9
Medium9
not blocked9
No public exploit9
201819
Not applicable19
Medium19
not blocked19
Exploited1
No public exploit18
201919
Not applicable19
Medium19
not blocked19
Working exploit published1
No public exploit18
202016
Not applicable16
Medium16
not blocked16
No public exploit16
202131
Not applicable31
Medium31
not blocked31
No public exploit31
202244
Not applicable44
Medium44
not blocked44
Proof of concept only2
No public exploit42
202339
No exploit published2
Not applicable37
Medium39
not blocked39
Proof of concept only10
No public exploit29
202419
Not applicable19
Medium19
not blocked19
Proof of concept only5
No public exploit14
202512
Mitigation candidate1
No exploit published2
Not applicable9
Medium12
not blocked12
Working exploit published1
Proof of concept only1
No public exploit10
202692
Not applicable92
Medium92
not blocked92
Proof of concept only49
No public exploit43
200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-25263 | Medium | 2026-10-06 | Not applicable | No public exploit | Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters. |
| CVE-2026-96422 | Medium | 2026-09-29 | Not applicable | Proof of concept only | Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96421 | Medium | 2026-09-29 | Not applicable | Proof of concept only | USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96420 | Medium | 2026-09-29 | Not applicable | No public exploit | Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96418 | Medium | 2026-09-29 | Not applicable | Proof of concept only | TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96417 | Medium | 2026-09-29 | Not applicable | No public exploit | RF4CE protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96416 | Medium | 2026-09-29 | Not applicable | Proof of concept only | IEEE 802.11 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-96415 | Medium | 2026-09-29 | Not applicable | Proof of concept only | Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95395 | Medium | 2026-09-29 | Not applicable | Proof of concept only | IEEE C37.118 Synchrophasor protocol dissector memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95394 | Medium | 2026-09-29 | Not applicable | Proof of concept only | Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95393 | Medium | 2026-09-29 | Not applicable | Proof of concept only | CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95392 | Medium | 2026-09-29 | Not applicable | Proof of concept only | MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95391 | Medium | 2026-09-29 | Not applicable | No public exploit | ZigBee ZCL protocol dissector crash in 4.6.0 to 4.6.8 allows denial of service |
| CVE-2026-95390 | Medium | 2026-09-29 | Not applicable | Proof of concept only | PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service |
| CVE-2026-95388 | Medium | 2026-09-29 | Not applicable | Proof of concept only | Sharkd utility crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-95386 | Medium | 2026-09-29 | Not applicable | Proof of concept only | TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service |
| CVE-2026-76929 | Medium | 2026-08-19 | Not applicable | No public exploit | Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76926 | Medium | 2026-08-19 | Not applicable | No public exploit | BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76924 | Medium | 2026-08-19 | Not applicable | No public exploit | Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76923 | Medium | 2026-08-19 | Not applicable | No public exploit | Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76922 | Medium | 2026-08-19 | Not applicable | No public exploit | Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76921 | Medium | 2026-08-19 | Not applicable | No public exploit | CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76920 | Medium | 2026-08-19 | Not applicable | No public exploit | 3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76918 | Medium | 2026-08-19 | Not applicable | No public exploit | SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76917 | Medium | 2026-08-19 | Not applicable | No public exploit | Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76891 | Medium | 2026-08-19 | Not applicable | No public exploit | Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76890 | Medium | 2026-08-19 | Not applicable | No public exploit | Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76889 | Medium | 2026-08-19 | Not applicable | No public exploit | UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76887 | Medium | 2026-08-19 | Not applicable | No public exploit | Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76885 | Medium | 2026-08-19 | Not applicable | No public exploit | Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76884 | Medium | 2026-08-19 | Not applicable | Proof of concept only | ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76883 | Medium | 2026-08-19 | Not applicable | Proof of concept only | Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76882 | Medium | 2026-08-19 | Not applicable | Proof of concept only | Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-76881 | Medium | 2026-08-19 | Not applicable | Proof of concept only | CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service |
| CVE-2026-19696 | Medium | 2026-08-13 | Not applicable | Proof of concept only | Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows |
| CVE-2026-19695 | Medium | 2026-08-13 | Not applicable | Proof of concept only | Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service |
| CVE-2026-19694 | Medium | 2026-08-13 | Not applicable | Proof of concept only | TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service |
| CVE-2026-24099 | Medium | 2026-08-11 | Not applicable | No public exploit | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. System software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. |
| CVE-2026-20891 | Medium | 2026-08-11 | Not applicable | No public exploit | Improper authentication for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (low) and availability (low) impacts. |
| CVE-2026-20886 | Medium | 2026-08-11 | Not applicable | No public exploit | Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts. |
| CVE-2026-20780 | Medium | 2026-08-11 | Not applicable | No public exploit | Uncontrolled resource consumption for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (low) impacts. |
| CVE-2026-20752 | Medium | 2026-08-11 | Not applicable | No public exploit | Improper authentication for some Intel(R) PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. |
| CVE-2026-20737 | Medium | 2026-08-11 | Not applicable | No public exploit | Exposure of sensitive information to an unauthorized actor for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (low) and availability (low) impacts. |
| CVE-2026-24078 | Medium | 2026-08-04 | Not applicable | No public exploit | Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling. |
| CVE-2026-15174 | Medium | 2026-07-08 | Not applicable | Proof of concept only | Catapult DCT2000 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15173 | Medium | 2026-07-08 | Not applicable | Proof of concept only | pcapng file parser crash in Wireshark 4.6.0 to 4.6.6 allows denial of service |
| CVE-2026-15172 | Medium | 2026-07-08 | Not applicable | No public exploit | FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15171 | Medium | 2026-07-08 | Not applicable | Proof of concept only | SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15170 | Medium | 2026-07-08 | Not applicable | Proof of concept only | Z39.50 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15166 | Medium | 2026-07-08 | Not applicable | Proof of concept only | IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-15165 | Medium | 2026-07-08 | Not applicable | Proof of concept only | TLS ECH decryptor crash in Wireshark 4.6.0 to 4.6.6 allows denial of service |
| CVE-2026-15164 | Medium | 2026-07-08 | Not applicable | Proof of concept only | Crash in ciscodump 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2025-59610 | Medium | 2026-06-01 | Not applicable | No public exploit | Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer. |
| CVE-2025-59609 | Medium | 2026-06-01 | Not applicable | No public exploit | Information Disclosure when processing advertisement frames with malformed MBSSID elements of insufficient length. |
| CVE-2026-9759 | Medium | 2026-05-27 | Not applicable | No public exploit | ROHC protocol dissector crash in Wireshark 4.6.0 to 4.6.5 and 4.4.0 to 4.4.15 allows denial of service |
| CVE-2025-27852 | Medium | 2026-05-13 | Not applicable | No public exploit | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a reflected cross site scripting (XSS) attack. This allows an attacker on the local network segment to execute arbitrary JavaScript code within the context of the WDU webpage. Full administrator level access to the device is possible. To initiate an exploit of this vulnerability, the victim must execute two actions: (1) view a specific URL served by the WDU, and (2) click an element on the rendered page. |
| CVE-2026-43901 | Medium | 2026-05-11 | Not applicable | Proof of concept only | Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, then layers in optional Wireshark suite utilities. In 1.1.5 and earlier, wireshark-mcp exposes a wireshark_export_objects MCP tool that accepts an attacker-controlled dest_dir parameter and passes it to tshark's --export-objects flag with no mandatory path restriction. The path sandbox (_allowed_dirs) is None by default and only activates when the environment variable WIRESHARK_MCP_ALLOWED_DIRS is explicitly set. In a default installation, any directory on the filesystem can be used as the export destination. |
| CVE-2026-6525 | Medium | 2026-05-02 | Not applicable | Proof of concept only | IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 |
| CVE-2026-5404 | Medium | 2026-05-01 | Not applicable | No public exploit | K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6870 | Medium | 2026-04-30 | Not applicable | Proof of concept only | GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6869 | Medium | 2026-04-30 | Not applicable | Proof of concept only | WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6867 | Medium | 2026-04-30 | Not applicable | No public exploit | SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6538 | Medium | 2026-04-30 | Not applicable | Proof of concept only | BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6537 | Medium | 2026-04-30 | Not applicable | Proof of concept only | ZigBee protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6536 | Medium | 2026-04-30 | Not applicable | Proof of concept only | DLMS/COSEM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 |
| CVE-2026-6535 | Medium | 2026-04-30 | Not applicable | No public exploit | Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6534 | Medium | 2026-04-30 | Not applicable | Proof of concept only | USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6533 | Medium | 2026-04-30 | Not applicable | Proof of concept only | Dissection engine LZ77 decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6532 | Medium | 2026-04-30 | Not applicable | Proof of concept only | Kismet protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6531 | Medium | 2026-04-30 | Not applicable | No public exploit | SANE protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6530 | Medium | 2026-04-30 | Not applicable | Proof of concept only | DCP-ETSI protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6529 | Medium | 2026-04-30 | Not applicable | No public exploit | iLBC audio codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6528 | Medium | 2026-04-30 | Not applicable | No public exploit | TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of service |
| CVE-2026-6527 | Medium | 2026-04-30 | Not applicable | No public exploit | ASN.1 PER protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6526 | Medium | 2026-04-30 | Not applicable | No public exploit | RTSP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 |
| CVE-2026-6524 | Medium | 2026-04-30 | Not applicable | No public exploit | MySQL protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6523 | Medium | 2026-04-30 | Not applicable | No public exploit | GNW protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6522 | Medium | 2026-04-30 | Not applicable | Proof of concept only | RPKI-Router protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-6521 | Medium | 2026-04-30 | Not applicable | No public exploit | OpenFlow v5 protocol dissector infinite loops in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5409 | Medium | 2026-04-30 | Not applicable | Proof of concept only | Monero protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5408 | Medium | 2026-04-30 | Not applicable | Proof of concept only | BT-DHT protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5407 | Medium | 2026-04-30 | Not applicable | Proof of concept only | SMB2 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5406 | Medium | 2026-04-30 | Not applicable | Proof of concept only | FC-SWILS protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5401 | Medium | 2026-04-30 | Not applicable | Proof of concept only | AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2026-5299 | Medium | 2026-04-30 | Not applicable | Proof of concept only | ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service |
| CVE-2025-47384 | Medium | 2026-03-02 | Not applicable | No public exploit | Transient DOS when MAC configures config id greater than supported maximum value. |
| CVE-2025-47371 | Medium | 2026-03-02 | Not applicable | No public exploit | Transient DOS when an LTE RLC packet with invalid TB is received by UE. |
| CVE-2025-65349 | Medium | 2026-01-15 | Not applicable | Proof of concept only | A Stored Cross-Site Scripting (XSS) vulnerability in Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to execute arbitrary scripts via a crafted payload due to unsanitized repeater AP SSID value when is displayed in any page at /index.htm. |
| CVE-2026-0962 | Medium | 2026-01-14 | Not applicable | Proof of concept only | SOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service |
| CVE-2026-0961 | Medium | 2026-01-14 | Not applicable | Proof of concept only | BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service |
| CVE-2026-0960 | Medium | 2026-01-14 | Not applicable | Proof of concept only | HTTP3 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.2 allows denial of service |
| CVE-2026-0959 | Medium | 2026-01-14 | Not applicable | Proof of concept only | IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service |
| CVE-2025-13946 | Medium | 2025-12-03 | Not applicable | No public exploit | MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service |
| CVE-2025-13945 | Medium | 2025-12-03 | Not applicable | No public exploit | HTTP3 dissector crash in Wireshark 4.6.0 and 4.6.1 allows denial of service |
| CVE-2025-13674 | Medium | 2025-11-26 | Not applicable | No public exploit | BPv7 dissector crash in Wireshark 4.6.0 allows denial of service |
| CVE-2025-60790 | Medium | 2025-10-21 | Not applicable | Proof of concept only | ProcessWire CMS 3.0.246 allows a low-privileged user with lang-edit to upload a crafted ZIP to Language Support that is auto-extracted without limits prior to validation, enabling resource-exhaustion Denial of Service. |
| CVE-2025-11626 | Medium | 2025-10-10 | Not applicable | No public exploit | MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 and 4.2.0 to 4.2.13 allows denial of service |
| CVE-2025-11190 | Medium | 2025-10-10 | Not applicable | No public exploit | The Kiwire Captive Portal contains an open redirection issue via the login-url parameter, allowing an attacker to redirect users to an attacker controlled website. |
| CVE-2025-53672 | Medium | 2025-07-09 | No exploit published | No public exploit | Jenkins Kryptowire Plugin 0.2 and earlier stores the Kryptowire API key unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system. |
| CVE-2025-48066 | Medium | 2025-05-22 | Not applicable | No public exploit | wire-webapp is the web application for the open-source messaging service Wire. A bug fix caused a regression causing an issue with function to delete local data. Instructing the client to delete its local database on user logout does not result in deletion. This is the case for both temporary clients (marking the device as a public computer on login) and regular clients instructing the deletion of all personal information and conversations upon logout. Access to the machine is required to access the data. If encryption-at-rest is used, cryptographic material can't be exported. The underlying issue has been fixed with wire-webapp version 2025-05-14-production.0. In order to mitigate potential impact, the database must be manually deleted on devices where the option "This is a public computer" was used prior to log in or a log out with the request to delete local data with the affected versions has happened before. |