CVE-2021-39196

pcapture is an open source dumpcap web service interface . In affected versions this vulnerability allows an authenticated but unprivileged user to use the REST API to capture and download packets with no capture filter and without adequate permissions. This is important because the capture filters can effectively limit the scope of information that a user can see in the data captures. If no filter is present, then all data on the local network segment where the program is running can be captured and downloaded. v3.12 fixes this problem. There is no workaround, you must upgrade to v3.12 or greater.

• CWE-287
• CWE-754

• https://github.com/jdhwpgmbca/pcapture/commit/0f74f431e0970a2e5784dbd955cfa4760e3b1ef7Patch, Third Party Advisory
• https://github.com/jdhwpgmbca/pcapture/issues/7Issue Tracking, Patch, Third Party Advisory
• https://github.com/jdhwpgmbca/pcapture/security/advisories/GHSA-3r67-fxpr-p2qxIssue Tracking, Third Party Advisory
• https://github.com/jdhwpgmbca/pcapture/commit/0f74f431e0970a2e5784dbd955cfa4760e3b1ef7Patch, Third Party Advisory
• https://github.com/jdhwpgmbca/pcapture/issues/7Issue Tracking, Patch, Third Party Advisory
• https://github.com/jdhwpgmbca/pcapture/security/advisories/GHSA-3r67-fxpr-p2qxIssue Tracking, Third Party Advisory

Published

Sep 7, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39190The SCCM plugin for GLPI is a plugin to synchronize computer…5.3
• CVE-2021-39191mod_auth_openidc is an authentication/authorization module f…6.1
• CVE-2021-39192Ghost is a Node.js content management system. An error in th…7.2
• CVE-2021-39193Frontier is Substrate's Ethereum compatibility layer. Prior …5.3
• CVE-2021-39194kaml is an open source implementation of the YAML format wit…6.5
• CVE-2021-39195Misskey is an open source, decentralized microblogging platf…6.5
• CVE-2021-39197better_errors is an open source replacement for the standard…8.8
• CVE-2021-39198OroCRM is an open source Client Relationship Management (CRM…5.4
• CVE-2021-39199remark-html is an open source nodejs library which compiles …6.1
• CVE-2021-3920grav-plugin-admin is vulnerable to Improper Neutralization o…5.4
• CVE-2021-39200WordPress is a free and open-source content management syste…5.3
• CVE-2021-39201WordPress is a free and open-source content management syste…5.4