Lucene search
+L

3137 matches found

RedhatCVE
RedhatCVE
added 2025/05/21 9:16 p.m.10 views

CVE-2004-2160

Format string vulnerability in xmlelem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow attackers to cause a denial of service or execute arbitrary code...

6.4CVSS7.7AI score0.01695EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 9:6 p.m.17 views

CVE-2003-0784

Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root privileges via login, and local users to gain privileges via login, su, or passwd, with a username that contains format string specifiers...

10CVSS7.2AI score0.02095EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:57 p.m.10 views

CVE-2005-2236

Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via format strings in command line arguments...

7.2CVSS7.7AI score0.01074EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:36 p.m.15 views

CVE-2002-2236

Format string vulnerability in the awplog function in apt-www-proxy 0.1 allows remote attackers to execute arbitrary code...

10CVSS7.8AI score0.04822EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:24 p.m.10 views

CVE-2002-1789

Format string vulnerability in newsx NNTP client before 1.4.8 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a call to the syslog function...

7.2CVSS7.6AI score0.00421EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 6:37 p.m.9 views

CVE-2009-5141

Format string vulnerability in War FTP Daemon warftpd 1.82 RC 12 allows remote authenticated users to cause a denial of service crash via format string specifiers in a LIST command...

4CVSS6.5AI score0.02819EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2025/05/14 12:0 a.m.6 views

Alibaba Cloud Linux 3 : 0140: libinput (ALINUX3-SA-2022:0140)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2022:0140 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-1215: A format string vulnerability was...

7.8CVSS7.2AI score0.00368EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/03/26 4:5 a.m.53 views

Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities

Summary IBM Security Guardium has addressed these vulnerabilities with an update. Vulnerability Details CVEID:CVE-2018-17336 DESCRIPTION: UDisks could allow a local attacker to obtain sensitive information, caused by a format string vulnerability in udiskslog in udiskslogging.c. By using a...

8.6CVSS9.4AI score0.11334EPSS
SaveExploits2Affected Software1
NVD
NVD
added 2025/03/11 3:15 p.m.16 views

CVE-2024-45324

A use of externally-controlled format string vulnerability CWE-134 in FortiOS version 7.4.0 through 7.4.4, version 7.2.0 through 7.2.9, version 7.0.0 through 7.0.15 and before 6.4.15, FortiProxy version 7.4.0 through 7.4.6, version 7.2.0 through 7.2.12 and before 7.0.19, FortiPAM version 1.4.0...

7.2CVSS0.00673EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/11 3:15 p.m.4 views

CVE-2024-45324

A use of externally-controlled format string vulnerability CWE-134 in FortiOS version 7.4.0 through 7.4.4, version 7.2.0 through 7.2.9, version 7.0.0 through 7.0.15 and before 6.4.15, FortiProxy version 7.4.0 through 7.4.6, version 7.2.0 through 7.2.12 and before 7.0.19, FortiPAM version 1.4.0...

7.2CVSS5.9AI score0.00673EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/11 2:54 p.m.35 views

CVE-2024-45324

A use of externally-controlled format string vulnerability CWE-134 in FortiOS version 7.4.0 through 7.4.4, version 7.2.0 through 7.2.9, version 7.0.0 through 7.0.15 and before 6.4.15, FortiProxy version 7.4.0 through 7.4.6, version 7.2.0 through 7.2.12 and before 7.0.19, FortiPAM version 1.4.0...

7.2CVSS0.00673EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/11 12:0 a.m.10 views

Fortinet FortiWeb Multiple format string vulnerabilities (FG-IR-24-325)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-325 advisory. - A use of externally-controlled format string vulnerability CWE-134 in FortiOS version 7.4.0 through 7.4.4, version 7.2.0...

7.2CVSS5.9AI score0.00673EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/11 12:0 a.m.28 views

Fortinet Fortigate Multiple format string vulnerabilities (FG-IR-24-325)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-325 advisory. - A use of externally-controlled format string vulnerability CWE-134 in FortiOS version 7.4.0 through 7.4.4, version 7.2.0...

7.2CVSS5.9AI score0.00673EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2022-1215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A format string vulnerability was found in libinput CVE-2022-1215 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVE...

7.8CVSS7.1AI score0.00368EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2012-5580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Format string vulnerability in the printproxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service...

7.5CVSS6.1AI score0.03125EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/02/11 12:0 a.m.4 views

Fortinet Fortigate - Format string vulnerability in CLI commands (FG-IR-23-261)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-261 advisory. - A use of externally-controlled format string vulnerability CWE-134 in Fortinet FortiOS version 7.4.0 through 7.4.1 and befo...

6.7CVSS6.3AI score0.00242EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/02/11 12:0 a.m.7 views

PT-2025-6253 · Fortinet · Fortiproxy +3

Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS versions 7.4.0 through 7.4.1 and prior to 7.2.6 FortiProxy versions 7.4.0 and prior to 7.2.7 FortiPAM versions 1.1.2 and prior to 1.0.3 FortiSwitchManager versions 7.2.0 through 7.2.2 and prior to 7.0.2 Description: A use of...

6.7CVSS7.9AI score0.00242EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/02/05 8:3 p.m.10 views

CVE-2022-22299

A format string vulnerability CWE-134 in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC version 6.1.0 through 6.1.5, FortiADC version 6.2.0 through 6.2.1, FortiProxy version 1.0.0 through 1.0.7, FortiProxy version 1.1.0 through 1.1.6, FortiProxy version 1.2.0 throu...

7.8CVSS7.3AI score0.00209EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:55 p.m.19 views

CVE-2019-5143

An exploitable format string vulnerability exists in the iwconsole coniowritestr functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted time server entry can cause an overflow of the time server buffer, resulting in remote code execution. An attacker can send commands whil...

8.8CVSS7.8AI score0.04471EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:0 a.m.14 views

The vulnerability of the QuTS operating systems and QTS network devices allows unauthorized access to protected information with root privileges, due to insufficient handling of format lines.

The vulnerability of the QuTS operating systems and QTS network devices involves insufficient handling of the format string. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information with root privileges...

6.5CVSS5.5AI score0.00533EPSS
SaveExploits0References2
Rows per page
Query Builder