9923 matches found
CVE-2018-16554
CVE-2018-16554 affects jhead 3.00, where ProcessGpsInfo in gpsinfo.c mishandles a sprintf format string for TAG_GPS_ALT due to float/double mismatch, enabling a remote attacker to cause a denial-of-service or unspecified impact via a crafted JPEG. Public advisories (openSUSE/SUSE patches) show th...
CVE-2018-16554: Use of Externally-Controlled Format String
The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAGGPSALT handling...
CVE-2018-15749
The Pulse Secure Desktop macOS 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability...
CVE-2018-15749
The Pulse Secure Desktop macOS 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability...
Format string
The Pulse Secure Desktop macOS 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability...
CVE-2018-15749
The Pulse Secure Desktop macOS 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability...
CVE-2018-15749
Pulse Secure Desktop for macOS is affected by CVE-2018-15749. The issue is a format string vulnerability in macOS clients versions 5.3RX prior to 5.3R5 and 9.0R1, enabling a local attacker to trigger information display (information that should not be accessible). Exploitation is local, and the i...
PT-2018-13179
Name of the Vulnerable Software and Affected Versions Pulse Secure Desktop macOS versions 5.3RX through 5.3R4 Pulse Secure Desktop macOS version 9.0R1 Description The issue is related to a Format String Vulnerability. Recommendations For Pulse Secure Desktop macOS versions 5.3RX through 5.3R4,...
CVE-2018-15749: Use of Externally-Controlled Format String
The Pulse Secure Desktop macOS 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability...
CVE-2018-14799
In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, the PageWriter device does not sanitize data entered by user. This can lead to buffer overflow or format string vulnerabilities...
CVE-2018-14799
In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, the PageWriter device does not sanitize data entered by user. This can lead to buffer overflow or format string vulnerabilities...
CVE-2018-14799
CVE-2018-14799 affects Philips PageWriter TC10/TC20/TC30/TC50/TC70 Cardiographs (all versions prior to May 2018). The vulnerability arises from improper input validation / unsanitized user data, enabling potential buffer overflow and format string issues within the device. Impact details in the c...
PT-2018-12733
Name of the Vulnerable Software and Affected Versions Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs versions prior to May 2018 Description The issue arises from the device's failure to sanitize user-entered data, potentially leading to buffer overflow or format string...
CVE-2018-14799: Improper Input Validation
In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, the PageWriter device does not sanitize data entered by user. This can lead to buffer overflow or format string vulnerabilities...
ABB Panel Builder SIMATIC_TI500 UserSettings Format String Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ABB Panel Builder 800. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...
ABB Panel Builder YAMAHA_VIP_robot_Pre Format String Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ABB Panel Builder 800. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...
ABB Panel Builder KEB_COMBIVERT_Pre UserSettings Format String Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ABB Panel Builder 800. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...
Security Bulletin: Format string vulnerability in IBM® Db2® tool db2support (CVE-2018-1566).
Summary Db2 tool db2support is affected by format string vulnerability. As installed this tool does not run with elevated privileges setuid and when called directly the vulnerability does not lead to privilege escalation. However, if a customer’s own application or script runs with elevated...