Lucene search
K

8501 matches found

NVD
NVD
added 2016/06/09 4:59 p.m.16 views

CVE-2016-4448

Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors...

10CVSS9.6AI score0.01546EPSS
Exploits0References27
OSV
OSV
added 2016/06/09 4:59 p.m.7 views

CVE-2016-4448

Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors...

9.8CVSS9.6AI score
Exploits0References27
Prion
Prion
added 2016/06/09 4:59 p.m.28 views

Format string

Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors...

10CVSS7AI score0.01546EPSS
Exploits0References27Affected Software19
Cvelist
Cvelist
added 2016/06/09 4:0 p.m.25 views

CVE-2016-4448

Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors...

9.6AI score0.01546EPSS
Exploits0References27
Debian CVE
Debian CVE
added 2016/06/09 4:0 p.m.28 views

CVE-2016-4448

Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors...

10CVSS9.1AI score0.01546EPSS
Exploits0
CVE
CVE
added 2016/06/09 4:0 p.m.218 views

CVE-2016-4448

CVE-2016-4448 is a format-string vulnerability in libxml2 (pre-2.9.4). The connected F5 advisory confirms libxml2 is the vulnerable component across multiple BIG-IP products and lists specific BIG-IP families/versions as vulnerable, with a table guiding upgrades to non‑vulnerable releases. Impact...

10CVSS9.5AI score0.01546EPSS
Exploits0References27Affected Software1
OSV
OSV
added 2016/06/09 12:41 p.m.9 views

SUSE-SU-2016:1538-1 Security update for libxml2

This update for libxml2 fixes the following security issues: - CVE-2016-2073, CVE-2015-8806, CVE-2016-1839: A Heap-buffer overread was fixed in libxml2/dict.c bsc963963, bsc965283, bsc981114. - CVE-2016-4483: Code was added to avoid an out of bound access when serializing malformed strings...

10CVSS6.8AI score0.08565EPSS
Exploits12References30
OSV
OSV
added 2016/06/09 12:0 a.m.2 views

UBUNTU-CVE-2016-4448

Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors...

9.8CVSS7.2AI score0.01546EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2016/06/09 12:0 a.m.43 views

CVE-2016-4448

Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors...

10CVSS7.1AI score0.01546EPSS
Exploits0References2
F5 Networks
F5 Networks
added 2016/06/08 12:0 a.m.48 views

SOL51484039 - PHP 'snmp.c' remote format string vulnerability CVE-2016-4071

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

9.8CVSS2.6AI score0.3258EPSS
Exploits1References4
OSV
OSV
added 2016/05/31 12:0 a.m.68 views

DLA-499-1 php5 - security update

Bulletin has no description...

9.8CVSS8.1AI score0.3258EPSS
Exploits15
CNVD
CNVD
added 2016/05/26 12:0 a.m.1 views

Libxml2 Formatted String Vulnerability

Libxml2 is the GNOME project team developed a C-based language used to parse XML documents library , which supports a variety of encoding formats , Xpath parsing , Well-formed and valid validation and so on. A format string vulnerability exists in Libxml2. An attacker could exploit this...

10CVSS8.5AI score0.01546EPSS
Exploits0References1
FreeBSD
FreeBSD
added 2016/05/23 12:0 a.m.53 views

libxml2 -- multiple vulnerabilities

Daniel Veillard reports: More format string warnings with possible format string vulnerability David Kilzer Avoid building recursive entities Daniel Veillard Heap-based buffer overread in htmlCurrentChar Pranjal Jumde Heap-based buffer-underreads due to xmlParseName David Kilzer Heap use-after-fr...

9.3CVSS0.1AI score0.04546EPSS
Exploits11References6
NVD
NVD
added 2016/05/20 11:0 a.m.14 views

CVE-2016-4071

Format string vulnerability in the phpsnmperror function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via format string specifiers in an SNMP::get call...

9.8CVSS9.8AI score0.3258EPSS
Exploits1References20
OSV
OSV
added 2016/05/20 11:0 a.m.6 views

CVE-2016-4071

Format string vulnerability in the phpsnmperror function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via format string specifiers in an SNMP::get call...

9.8CVSS9.8AI score
Exploits0References20
Cvelist
Cvelist
added 2016/05/20 10:0 a.m.21 views

CVE-2016-4071

Format string vulnerability in the phpsnmperror function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via format string specifiers in an SNMP::get call...

9.6AI score0.3258EPSS
Exploits1References20
Debian CVE
Debian CVE
added 2016/05/20 10:0 a.m.24 views

CVE-2016-4071

Removed by vendor...

9.8CVSS9.4AI score0.3258EPSS
Exploits1
CVE
CVE
added 2016/05/20 10:0 a.m.240 views

CVE-2016-4071

CVE-2016-4071 is a format-string vulnerability in the PHP SNMP error path. The flaw resides in ext/snmp/snmp.c (php_snmp_error) and allows remote code execution via format string specifiers in an SNMP::get call. Affected PHP versions include before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0....

9.8CVSS8AI score0.3258EPSS
Exploits1References20Affected Software1
OpenVAS
OpenVAS
added 2016/05/09 12:0 a.m.48 views

Amazon Linux: Security Advisory (ALAS-2016-698)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8AI score0.60488EPSS
Exploits13References2
ArchLinux
ArchLinux
added 2016/05/06 12:0 a.m.30 views

latex2rtf: arbitrary code execution

A format string vulnerability was found in the CmdKeywords function, where the user-controlled variable 'keywords' is passed as a format argument to vnsprintf, when processing the \keywords command in a TeX file...

4.6AI score0.00877EPSS
Exploits0References2
Rows per page
Query Builder