Lucene search
+L

9923 matches found

Cvelist
Cvelist
•added 2018/03/28 10:00 p.m.•47 views

CVE-2018-0175

Format String vulnerability in the Link Layer Discovery Protocol LLDP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition or execute arbitrary code with elevated privileges o...

8.9AI score0.03478EPSS
SaveExploits0References6
Veracode
Veracode
•added 2018/03/28 8:33 a.m.•21 views

Information Disclosure Through C Format String

grpc is vulnerable to information disclosure through a C Format String vulnerability. The vulnerability exists as the %s string format is not specified, potentially allowing other data to be read, and in some cases causes the application to crash...

6.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/28 12:00 a.m.•7 views

CVE-2018-0175: Improper Restriction of Operations within the Bounds of a Memory Buffer

Format String vulnerability in the Link Layer Discovery Protocol LLDP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition or execute arbitrary code with elevated privileges o...

8CVSS7.8AI score0.03478EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2018/03/28 12:00 a.m.•12 views

PT-2018-3804

Name of the Vulnerable Software and Affected Versions Cisco IOS Software affected versions not specified Cisco IOS XE Software affected versions not specified Cisco IOS XR Software affected versions not specified Description A Format String vulnerability in the Link Layer Discovery Protocol LLDP...

8CVSS8.2AI score0.03478EPSS
SaveExploits0References14
RedHat Linux
RedHat Linux
•added 2018/03/26 10:20 a.m.•23 views

ruby: Buffer underrun vulnerability in Kernel.sprintf

A buffer underflow was found in ruby's sprintf function. An attacker, with ability to control its format string parameter, could send a specially crafted string that would disclose heap memory or crash the interpreter...

9.1CVSS7.4AI score0.09718EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
•added 2018/03/26 9:39 a.m.•16 views

ruby: Buffer underrun vulnerability in Kernel.sprintf

A buffer underflow was found in ruby's sprintf function. An attacker, with ability to control its format string parameter, could send a specially crafted string that would disclose heap memory or crash the interpreter...

9.1CVSS7.4AI score0.09718EPSS
SaveExploits1References5
Prion
Prion
•added 2018/03/14 1:29 p.m.•26 views

Format string

Format String vulnerability in KeepKey version 4.0.0 allows attackers to trigger information display of information that should not be accessible, related to text containing characters that the device's font lacks...

5CVSS7.3AI score0.0109EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2018/03/14 1:29 p.m.•31 views

CVE-2018-6875

Format String vulnerability in KeepKey version 4.0.0 allows attackers to trigger information display of information that should not be accessible, related to text containing characters that the device's font lacks...

7.5CVSS7.3AI score0.0109EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2018/03/14 1:29 p.m.•18 views

CVE-2018-6875

Format String vulnerability in KeepKey version 4.0.0 allows attackers to trigger information display of information that should not be accessible, related to text containing characters that the device's font lacks...

7.5CVSS5.8AI score0.0109EPSS
SaveExploits0References1
CVE
CVE
•added 2018/03/14 1:00 p.m.•60 views

CVE-2018-6875

CVE-2018-6875 affects KeepKey v4.0.0: a Format String vulnerability could cause the device to display information it should not access, triggered by text containing characters the device font cannot render. The issue is described across multiple sources (e.g., NVD entry and CNVD/CVE mirrors) as a...

7.5CVSS7.3AI score0.0109EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/03/14 1:00 p.m.•37 views

CVE-2018-6875

Format String vulnerability in KeepKey version 4.0.0 allows attackers to trigger information display of information that should not be accessible, related to text containing characters that the device's font lacks...

7.4AI score0.0109EPSS
SaveExploits0References1
Mend
Mend
•added 2018/03/14 2:23 a.m.•8 views

WS-2018-0609

In gRPC v1.10.0-pre1 to 1.10.1 “rbcompressionoptions” ruby extension is vulnerable to a format string attack that could lead to information disclosure and denial of service...

6.9CVSS5.8AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/14 12:00 a.m.•8 views

CVE-2018-6875: Use of Externally-Controlled Format String

Format String vulnerability in KeepKey version 4.0.0 allows attackers to trigger information display of information that should not be accessible, related to text containing characters that the device's font lacks...

7.5CVSS7.2AI score0.0109EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2018/03/12 12:00 a.m.•33 views

Solaris 10 (x86) : 122082-01

SunOS 5.10x86: perl format string patch. Date this patch was last updated by Sun : Feb/23/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

4.6CVSS9AI score0.01374EPSS
SaveExploits2References2
Prion
Prion
•added 2018/03/05 7:29 p.m.•32 views

Format string

Huawei VP9660 V500R002C10 has a uncontrolled format string vulnerability when the license module output the log information. An authenticated local attacker could exploit this vulnerability to cause a denial of service...

2.1CVSS5.2AI score0.00207EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2018/03/05 7:29 p.m.•34 views

CVE-2017-17132

Huawei VP9660 V500R002C10 has a uncontrolled format string vulnerability when the license module output the log information. An authenticated local attacker could exploit this vulnerability to cause a denial of service...

5.5CVSS5.2AI score0.00207EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2018/03/05 7:29 p.m.•22 views

CVE-2017-17132

Huawei VP9660 V500R002C10 has a uncontrolled format string vulnerability when the license module output the log information. An authenticated local attacker could exploit this vulnerability to cause a denial of service...

5.5CVSS5.8AI score0.00207EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/03/05 7:00 p.m.•39 views

CVE-2017-17132

Huawei VP9660 V500R002C10 has a uncontrolled format string vulnerability when the license module output the log information. An authenticated local attacker could exploit this vulnerability to cause a denial of service...

5.3AI score0.00207EPSS
SaveExploits0References1
CVE
CVE
•added 2018/03/05 7:00 p.m.•79 views

CVE-2017-17132

CVE-2017-17132: Affected Huawei VP9660 (V500R002C10) license module exhibits an uncontrolled format string in log output. This enables a local, authenticated attacker to trigger a denial of service. The vulnerability stems from improper handling of log formatting inside the license module. Public...

5.5CVSS5.2AI score0.00207EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/05 12:00 a.m.•11 views

CVE-2017-17132: Use of Externally-Controlled Format String

Huawei VP9660 V500R002C10 has a uncontrolled format string vulnerability when the license module output the log information. An authenticated local attacker could exploit this vulnerability to cause a denial of service...

5.5CVSS5.9AI score0.00207EPSS
SaveExploits0References2
Rows per page
Query Builder