CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 06/05/2022 |
| CVE-2022-28164 | 보통6.5 | Brocade SANnav before SANnav 2.2.0 application uses the Blowfish symmetric encryption algorithm for the storage of passwords. This could allow an authenticated attacker to decrypt stored account passwords. | 06/05/2022 |
| CVE-2022-28163 | 심각9.8 | In Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management are susceptible to SQL injection, allowing an attacker to run arbitrary SQL commands. | 06/05/2022 |
| CVE-2022-28487 | 높음7.5 | Tcpreplay version 4.4.1 contains a memory leakage flaw in fix_ipv6_checksums() function. The highest threat from this vulnerability is to data confidentiality. | 04/05/2022 |
| CVE-2022-27418 | 높음7.8 | Tcpreplay v4.4.1 has a heap-based buffer overflow in do_checksum_math at /tcpedit/checksum.c. | 12/04/2022 |
| CVE-2022-27416 | 높음7.8 | Tcpreplay v4.4.1 was discovered to contain a double-free via __interceptor_free. | 12/04/2022 |
| CVE-2005-10001 | 보통6.1 | A vulnerability was found in Netegrity SiteMinder up to 4.5.1 and classified as critical. Affected by this issue is the file /siteminderagent/pwcgi/smpwservicescgi.exe of the component Login. The manipulation of the argument target leads to an open redirect. The exploit has been disclosed to the public and may be used. | 28/03/2022 |
| CVE-2022-27942 | 높음7.8 | tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c. | 26/03/2022 |
| CVE-2022-27941 | 높음7.8 | tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c. | 26/03/2022 |
| CVE-2022-27940 | 높음7.8 | tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c. | 26/03/2022 |
| CVE-2022-27939 | 보통5.5 | tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c. | 26/03/2022 |
| CVE-2022-25484 | 보통5.5 | tcpprep v4.4.1 has a reachable assertion (assert(l2len > 0)) in packet2tree() at tree.c in tcpprep v4.4.1. | 22/03/2022 |
| CVE-2021-30650 | 보통6.1 | A reflected cross-site scripting (XSS) vulnerability in the Symantec Layer7 API Management OAuth Toolkit (OTK) allows a remote attacker to craft a malicious URL for the OTK web UI and target OTK users with phishing attacks or other social engineering techniques. A successful attack allows injecting malicious code into | 18/02/2022 |
| CVE-2022-23992 | 심각9.8 | XCOM Data Transport for Windows, Linux, and UNIX 11.6 releases contain a vulnerability due to insufficient input validation that could potentially allow remote attackers to execute arbitrary commands with elevated privileges. | 14/02/2022 |
| CVE-2021-45387 | 보통5.5 | tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv4() at tree.c. | 11/02/2022 |
| CVE-2021-45386 | 보통5.5 | tcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv6() at tree.c | 11/02/2022 |
| CVE-2022-22689 | 높음8.8 | CA Harvest Software Change Manager versions 13.0.3, 13.0.4, 14.0.0, and 14.0.1, contain a vulnerability in the CSV export functionality, due to insufficient input validation, that can allow a privileged user to potentially execute arbitrary code or commands. | 04/02/2022 |