CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 06/05/2022 |
| CVE-2022-28164 | MITTEL6.5 | Brocade SANnav before SANnav 2.2.0 application uses the Blowfish symmetric encryption algorithm for the storage of passwords. This could allow an authenticated attacker to decrypt stored account passwords. | 06/05/2022 |
| CVE-2022-28163 | KRITISCH9.8 | In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an attacker to run arbitrary SQL commands. | 06/05/2022 |
| CVE-2022-28487 | HOCH7.5 | Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality. | 04/05/2022 |
| CVE-2022-27418 | HOCH7.8 | Tcpreplay v4.4.1 has a heap-based buffer overflow in do_checksum_math at /tcpedit/checksum.c. | 12/04/2022 |
| CVE-2022-27416 | HOCH7.8 | Tcpreplay v4.4.1 was discovered to contain a double-free via __interceptor_free. | 12/04/2022 |
| CVE-2005-10001 | MITTEL6.1 | A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the file /siteminderagent/pwcgi/smpwservicescgi.exe of the component Login. The manipulation of the argument target leads to an open redirect. The exploit has been disclosed to the public and may be used. | 28/03/2022 |
| CVE-2022-27942 | HOCH7.8 | tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c. | 26/03/2022 |
| CVE-2022-27941 | HOCH7.8 | tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c. | 26/03/2022 |
| CVE-2022-27940 | HOCH7.8 | tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c. | 26/03/2022 |
| CVE-2022-27939 | MITTEL5.5 | tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c. | 26/03/2022 |
| CVE-2022-25484 | MITTEL5.5 | tcpprep v4.4.1 has a reachable assertion (assert(l2len > 0)) in packet2tree() at tree.c in tcpprep v4.4.1. | 22/03/2022 |
| CVE-2021-30650 | MITTEL6.1 | A reflected cross-site scripting (XSS) vulnerability in the Symantec Layer7 API Management OAuth Toolkit (OTK) allows a remote attacker to craft a malicious URL for the OTK web UI and target OTK users with phishing attacks or other social engineering techniques. A successful attack allows injecting malicious code into | 18/02/2022 |
| CVE-2022-23992 | KRITISCH9.8 | XCOM Data Transport for Windows, Linux, and UNIX 11.6 releases contain a vulnerability due to insufficient input validation that could potentially allow remote attackers to execute arbitrary commands with elevated privileges. | 14/02/2022 |
| CVE-2021-45387 | MITTEL5.5 | tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv4() at tree.c. | 11/02/2022 |
| CVE-2021-45386 | MITTEL5.5 | tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv6() at tree.c | 11/02/2022 |
| CVE-2022-22689 | HOCH8.8 | CA Harvest Software Change Manager versions 13.0.3, 13.0.4, 14.0.0, and 14.0.1, contain a vulnerability in the CSV export functionality, due to insufficient input validation, that can allow a privileged user to potentially execute arbitrary code or commands. | 04/02/2022 |