Lucene search
+L

3218 matches found

Cvelist
Cvelist
•added 2017/03/03 4:00 p.m.•52 views

CVE-2016-7406

Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the 1 username or 2 host argument...

9.7AI score0.10217EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2017/03/03 4:00 p.m.•56 views

CVE-2016-7406

Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the 1 username or 2 host argument...

10CVSS9.8AI score0.10217EPSS
SaveExploits0
Mend
Mend
•added 2017/03/03 4:00 p.m.•2 views

CVE-2016-7406

Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the 1 username or 2 host argument...

10CVSS0.10217EPSS
SaveExploits0References8
CVE
CVE
•added 2017/03/03 4:00 p.m.•484 views

CVE-2016-7406

Dropbear SSH before 2016.74 is vulnerable to a format-string vulnerability in the username or host arguments, enabling remote code execution. The CVE-2016-7406 entry describes this flaw and references that upgrades to version 2016.74 or later mitigate it. Connected sources also note related advis...

10CVSS9.6AI score0.10217EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2017/03/03 3:59 p.m.•14 views

UBUNTU-CVE-2017-5613

Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary code via format string specifiers in a template file...

7.8CVSS7.5AI score0.0256EPSS
SaveExploits1References3
CVE
CVE
•added 2017/03/03 3:00 p.m.•96 views

CVE-2017-5613

The cgiemail and cgiecho CGI programs are vulnerable to a format string injection vulnerability. A local attacker with permissions to provide a cgiemail template file can supply arbitrary format strings to execute arbitrary code as the webserver user . To remediate this, the software has been upd...

7.8CVSS7.1AI score0.0256EPSS
SaveIn wildExploits1References3Affected Software2
CNVD
CNVD
•added 2017/02/10 12:00 a.m.•16 views

cgiemail and cgiecho format string vulnerabilities

cPanel is a Web-based hosting control management system from the U.S. company cPanel. The management system is mainly used to automate the control of web sites and servers. cgiemail is one of the mail servers. A format string vulnerability exists in cgiemail and cgiecho. An attacker can exploit...

7.8CVSS7.1AI score0.0256EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2017/01/27 12:00 a.m.•46 views

SUSE SLED12 / SLES12 Security Update : dbus-1 (SUSE-SU-2017:0292-1)

This update for dbus-1 to version 1.8.22 fixes one security issue and bugs. The following security issue was fixed : - bsc1003898: Do not treat ActivationFailure message received from root-owned systemd name as a format string. The following upstream changes are included : - Change the default...

5.7AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2016/12/15 10:11 p.m.•15 views

libxml2: Format string vulnerability

Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors...

10CVSS7.2AI score0.07039EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2016/11/15 11:40 a.m.•15 views

php: Format string vulnerability in php_snmp_error()

Format string vulnerability in the phpsnmperror function in ext/snmp/snmp.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via format string specifiers in an SNMP::get call...

9.8CVSS7.8AI score0.20452EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2016/10/17 4:00 a.m.•36 views

CVE-2003-0584

Format string vulnerability in Backup and Restore Utility for Unix BRU 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via format string specifiers in a command line argument...

7.3AI score0.01064EPSS
SaveExploits2References1
CVE
CVE
•added 2016/10/17 4:00 a.m.•64 views

CVE-2003-0584

The vulnerability CVE-2003-0584 affects the Backup and Restore Utility for Unix (BRU) versions 17.0 and earlier. The root cause is a format string vulnerability in a command line argument when BRU runs with setuid privileges, allowing a local attacker to execute arbitrary code. The available docu...

7.2CVSS7.7AI score0.01064EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/10/17 12:00 a.m.•6 views

CVE-2003-0584: Undefined Security Weakness

Format string vulnerability in Backup and Restore Utility for Unix BRU 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via format string specifiers in a command line argument...

7.2CVSS6.5AI score0.01064EPSS
SaveExploits2References1
myhack58
myhack58
•added 2016/10/13 12:00 a.m.•42 views

PHP 7 is due. 0. 0 format string vulnerability with the EIP hijack analysis-vulnerability warning-the black bar safety net

PHP 7 is due. 0. 0 this format string vulnerability is 1 5 year 1 2 On On exploit-db. When found, the author in Beijing to the North-East of a information security company to work, then busy, and failed to delve into it. In recent days inadvertently saw this vulnerability and found this...

7AI score
SaveExploits0
NVD
NVD
•added 2016/09/26 4:59 p.m.•25 views

CVE-2016-6901

Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers with software before V200R007C00SPC900 allows remote authenticated users to cause a denial of servic...

6.8CVSS6AI score0.00987EPSS
SaveExploits0References2
OSV
OSV
•added 2016/09/26 4:59 p.m.•18 views

CVE-2016-6901

Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers with software before V200R007C00SPC900 allows remote authenticated users to cause a denial of servic...

6.5CVSS5.8AI score0.00987EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2016/09/26 4:00 p.m.•35 views

CVE-2016-6901

Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers with software before V200R007C00SPC900 allows remote authenticated users to cause a denial of servic...

6AI score0.00987EPSS
SaveExploits0References2
CVE
CVE
•added 2016/09/26 4:00 p.m.•66 views

CVE-2016-6901

CVE-2016-6901 is a Huawei format-string vulnerability affecting AR100/120/150/200/500/550/1200/2200/2500/3200/3600 routers and NetEngine 16EX with software before V200R007C00SPC900. It allows remote authenticated users to cause a denial of service via format specifiers when processing partial com...

6.8CVSS5.8AI score0.00987EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2016/09/25 8:59 p.m.•12 views

CVE-2016-5169

Format string vulnerability in Google Chrome OS before 53.0.2785.103 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

8.8CVSS5.8AI score0.00891EPSS
SaveExploits0References3
Prion
Prion
•added 2016/09/25 8:59 p.m.•25 views

Format string

Format string vulnerability in Google Chrome OS before 53.0.2785.103 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

6.8CVSS7.8AI score0.00891EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder