Lucene search
+L

9840 matches found

Prion
Prion
•added 2022/09/06 2:15 a.m.•40 views

Format string

A format string vulnerability in Zyxel NAS326 firmware versions prior to V5.21AAZF.12C0 could allow an attacker to achieve unauthorized remote code execution via a crafted UDP packet...

7.5CVSS9.3AI score0.01743EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/09/06 1:20 a.m.•59 views

CVE-2022-34747

A format string vulnerability in Zyxel NAS326 firmware versions prior to V5.21AAZF.12C0 could allow an attacker to achieve unauthorized remote code execution via a crafted UDP packet...

9.8CVSS9.6AI score0.01743EPSS
SaveExploits0References1
CVE
CVE
•added 2022/09/06 1:20 a.m.•123 views

CVE-2022-34747

The CVE-2022-34747 entry applies to Zyxel NAS326, NAS540, and NAS542 devices with firmware versions prior to V5.21(AAZF.12)C0. The root cause is a format-string vulnerability in UDP packet handling that could allow an attacker to achieve unauthorized remote code execution. Affected models include...

9.8CVSS8.2AI score0.01743EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/06 12:00 a.m.•8 views

CVE-2022-34747: Use of Externally-Controlled Format String

A format string vulnerability in Zyxel NAS326 firmware versions prior to V5.21AAZF.12C0 could allow an attacker to achieve unauthorized remote code execution via a crafted UDP packet...

9.8CVSS8.7AI score0.01743EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/09/05 12:00 a.m.•18 views

PT-2022-4660 · Zyxel · Zyxel Nas326 +2

Name of the Vulnerable Software and Affected Versions: Zyxel NAS326 firmware versions prior to V5.21AAZF.12C0 Zyxel NAS540 firmware versions prior to V5.21AAZF.12C0 Zyxel NAS542 firmware versions prior to V5.21AAZF.12C0 Description: A format string vulnerability could allow an attacker to achieve...

9.8CVSS9.6AI score0.01743EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2022/09/01 2:21 p.m.•13 views

mariadb: lack of proper validation of a user-supplied string before using it as a format specifier

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7.8CVSS7.7AI score0.00657EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2022/08/26 12:00 a.m.•19 views

Ubuntu: Security Advisory (USN-396-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.8AI score0.00411EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/08/26 12:00 a.m.•33 views

Ubuntu: Security Advisory (USN-321-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4CVSS6.6AI score0.28998EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2022/08/26 12:00 a.m.•32 views

Ubuntu: Security Advisory (USN-90-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.5AI score0.04219EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/08/18 12:00 a.m.•9 views

Huawei EulerOS: Security Advisory for libinput (EulerOS-SA-2022-2245)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.0038EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/08/18 12:00 a.m.•9 views

Huawei EulerOS: Security Advisory for libinput (EulerOS-SA-2022-2258)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.0038EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/08/18 12:00 a.m.•12 views

Huawei EulerOS: Security Advisory for tcl (EulerOS-SA-2022-2236)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.01689EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2022/08/18 12:00 a.m.•19 views

Huawei EulerOS: Security Advisory for tcl (EulerOS-SA-2022-2281)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.01689EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2022/08/17 12:00 a.m.•25 views

EulerOS 2.0 SP10 : libinput (EulerOS-SA-2022-2245)

According to the versions of the libinput packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A format string vulnerability was found in libinput CVE-2022-1215 Note that Tenable Network Security has extracted the preceding description...

7.8CVSS7.2AI score0.0038EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/08/17 12:00 a.m.•40 views

EulerOS 2.0 SP8 : tcl (EulerOS-SA-2022-2236)

According to the versions of the tcl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - DISPUTED In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties...

7.8CVSS7.5AI score0.01689EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2022/08/17 12:00 a.m.•51 views

EulerOS 2.0 SP5 : tcl (EulerOS-SA-2022-2281)

According to the versions of the tcl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - DISPUTED In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties...

7.8CVSS7.5AI score0.01689EPSS
SaveExploits1References2
GithubExploit
GithubExploit
•added 2022/08/15 8:43 p.m.•10 views

Exploit for CVE-2022-36163

CVE-2022-36163 Suggested description A format string vul...

9.5AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2022/08/09 12:23 p.m.•8 views

mariadb: lack of proper validation of a user-supplied string before using it as a format specifier

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

7.8CVSS7.7AI score0.00657EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2022/08/05 8:15 p.m.•21 views

CVE-2022-22299

A format string vulnerability CWE-134 in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC version 6.1.0 through 6.1.5, FortiADC version 6.2.0 through 6.2.1, FortiProxy version 1.0.0 through 1.0.7, FortiProxy version 1.1.0 through 1.1.6, FortiProxy version 1.2.0 throu...

7.8CVSS7.3AI score0.00211EPSS
SaveExploits0References2
OSV
OSV
•added 2022/08/05 8:15 p.m.•23 views

CVE-2022-22299

A format string vulnerability CWE-134 in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC version 6.1.0 through 6.1.5, FortiADC version 6.2.0 through 6.2.1, FortiProxy version 1.0.0 through 1.0.7, FortiProxy version 1.1.0 through 1.1.6, FortiProxy version 1.2.0 throu...

7.8CVSS7.2AI score0.00211EPSS
SaveExploits0References1
Rows per page
Query Builder