Lucene search
K

8491 matches found

OSV
OSV
added 2021/07/05 3:15 p.m.1 views

DEBIAN-CVE-2021-35331

In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute the significance of this finding...

7.8CVSS7.8AI score0.00344EPSS
Exploits1References1
OSV
OSV
added 2021/07/05 3:15 p.m.6 views

CVE-2021-35331

In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute the significance of this finding...

7.8CVSS7.6AI score
Exploits0References4
NVD
NVD
added 2021/07/05 3:15 p.m.17 views

CVE-2021-35331

In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute the significance of this finding...

7.8CVSS0.00344EPSS
Exploits1References4
Prion
Prion
added 2021/07/05 3:15 p.m.16 views

Format string

DISPUTED In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute the significance of this finding...

6.8CVSS7.5AI score0.00344EPSS
Exploits1References4Affected Software1
UbuntuCve
UbuntuCve
added 2021/07/05 3:15 p.m.31 views

CVE-2021-35331

In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute the significance of this finding...

7.8CVSS7.1AI score0.00344EPSS
Exploits1References5
Cvelist
Cvelist
added 2021/07/05 2:59 p.m.16 views

CVE-2021-35331

In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute the significance of this finding...

8AI score0.00344EPSS
Exploits1References4
CVE
CVE
added 2021/07/05 2:59 p.m.121 views

CVE-2021-35331

CVE-2021-35331 concerns Tcl 8.6.11, where a format-string vulnerability in nmakehlp.c may allow code execution through a crafted file. Documented details indicate the vulnerability is local in nature with potential for partial confidentiality/integrity/availability impact per CVSS, though explici...

7.8CVSS7.6AI score0.00344EPSS
Exploits1References4Affected Software1
Debian CVE
Debian CVE
added 2021/07/05 2:59 p.m.38 views

CVE-2021-35331

In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute the significance of this finding...

7.8CVSS7.6AI score0.00344EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2021/07/05 2:59 p.m.27 views

CVE-2021-35331

In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute the significance of this finding...

7.8CVSS7.7AI score0.00344EPSS
Exploits1References4
CNNVD
CNNVD
added 2021/07/05 12:0 a.m.3 views

Tcl 格式化字符串错误漏洞

Tcl is a free and available open source package. It provides a powerful platform for creating integrated applications that tie together various applications, protocols, devices, and frameworks. A format string error vulnerability exists in Tcl version 8.6.11, which stems from a format string...

7.8CVSS7.7AI score0.00344EPSS
Exploits1References4
Rosalinux
Rosalinux
added 2021/07/02 6:4 p.m.21 views

Advisory ROSA-SA-2021-1965

Software: rsyslog 8.24.0 OS: Cobalt 7.9 CVE-ID: CVE-2017-12588 CVE-Crit: CRITICAL CVE-DESC: zmq3 input and output modules in rsyslog prior to version 8.28.0 interpreted description fields as format strings, possibly allowing a format string attack with undefined impact. CVE-STATUS: default CVE-RE...

9.8CVSS9.1AI score0.0043EPSS
Exploits0
CNVD
CNVD
added 2021/06/29 12:0 a.m.8 views

Weidmueller Industrial WLAN devices formatting string error vulnerability

Weidmueller Industrial WLAN devices is an industrial WIAN from Weidmueller, Germany. A Format String Error vulnerability exists in Weidmueller Industrial WLAN devices, which stems from a specially crafted time server entry that can lead to a time server buffer overflow that can be exploited by an...

8.8CVSS8AI score0.01907EPSS
Exploits0References1
NVD
NVD
added 2021/06/25 7:15 p.m.9 views

CVE-2021-33535

In Weidmueller Industrial WLAN devices in multiple versions an exploitable format string vulnerability exists in the iwconsole coniowritestr functionality. A specially crafted time server entry can cause an overflow of the time server buffer, resulting in remote code execution. An attacker can se...

8.8CVSS0.01907EPSS
Exploits0References1
OSV
OSV
added 2021/06/25 7:15 p.m.2 views

CVE-2021-33535

In Weidmueller Industrial WLAN devices in multiple versions an exploitable format string vulnerability exists in the iwconsole coniowritestr functionality. A specially crafted time server entry can cause an overflow of the time server buffer, resulting in remote code execution. An attacker can se...

8.8CVSS7.6AI score0.01907EPSS
Exploits0References1
CVE
CVE
added 2021/06/25 6:26 p.m.86 views

CVE-2021-33535

Weidmueller Industrial WLAN devices are affected by a format string vulnerability in the iw_console conio_writestr function. A specially crafted time server entry can cause a buffer overflow, enabling remote code execution. Attack requires authentication as a low-privilege user and the exploit pa...

8.8CVSS9.1AI score0.01907EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/06/25 6:26 p.m.12 views

CVE-2021-33535 WEIDMUELLER: WLAN devices affected by exploitable format string vulnerability

In Weidmueller Industrial WLAN devices in multiple versions an exploitable format string vulnerability exists in the iwconsole coniowritestr functionality. A specially crafted time server entry can cause an overflow of the time server buffer, resulting in remote code execution. An attacker can se...

8.8CVSS9.3AI score0.01907EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/06/25 12:0 a.m.0 views

Weidmueller Industrial WLAN 格式化字符串错误漏洞

Weidmueller Industrial WLAN devices is an industrial WIAN from Weidmueller, Germany. A Format String Error vulnerability exists in Weidmueller Industrial WLAN devices, which stems from a specially crafted time server entry that can lead to a time server buffer overflow that can be exploited by an...

8.8CVSS6.5AI score0.01907EPSS
Exploits0References2
ThreatPost
ThreatPost
added 2021/06/21 4:58 p.m.120 views

iPhone Wi-Fi Crushed by Weird Network

FUD is spreading about a weirdly named personal network that a reverse engineer stumbled across and which he said “permanently” wrecked his iPhone’s Wi-Fi. TL;DR version: The twitching inflicted on his iPhone, which he demonstrated in the 4-second Tweet below, wasn’t permanent. As replies to the...

7.6AI score
Exploits0References13
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2018:3278-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00344EPSS
Exploits1References2
Mageia
Mageia
added 2021/06/08 2:33 p.m.28 views

Updated libpano13 packages fix a security vulnerability

Format string vulnerability in panoFileOutputNamesCreate in libpano13 2.9.20.rc2 and earlier can lead to read and write arbitrary memory values CVE-2021-20307...

9.8CVSS2.2AI score0.00222EPSS
Exploits0References3
Rows per page
Query Builder