Lucene search
+L

596 matches found

OSV
OSV
•added 2014/12/09 1:54 a.m.•10 views

USN-2435-1 graphviz vulnerability

It was discovered that graphviz incorrectly handled parsing errors. An attacker could use this issue to cause graphviz to crash or possibly execute arbitrary code...

7.5CVSS7AI score0.05569EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2014/12/09 12:00 a.m.•22 views

Ubuntu 14.04 LTS : Graphviz vulnerability (USN-2435-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2435-1 advisory. It was discovered that graphviz incorrectly handled parsing errors. An attacker could use this issue to cause graphviz to crash or possibly execute arbitrary code...

7.5CVSS7.5AI score0.05569EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2014/12/08 12:00 a.m.•26 views

Fedora Update for graphviz FEDORA-2014-15811

Check the version of graphviz SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868561";...

10CVSS7.7AI score0.06082EPSS
SaveExploits3References2
Fedora
Fedora
•added 2014/12/07 4:40 a.m.•37 views

[SECURITY] Fedora 19 Update: graphviz-2.30.1-13.fc19

A collection of tools for the manipulation and layout of graphs as in nodes and edges, not as in barcharts...

10CVSS1.5AI score0.06082EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
•added 2014/12/07 12:00 a.m.•37 views

Fedora 19 : graphviz-2.30.1-13.fc19 (2014-15811)

This is an update fixing format string vulnerability in cgraph. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

7.5CVSS6.9AI score0.05569EPSS
SaveExploits1References3
Fedora
Fedora
•added 2014/12/06 2:28 a.m.•36 views

[SECURITY] Fedora 20 Update: graphviz-2.34.0-10.fc20

A collection of tools for the manipulation and layout of graphs as in nodes and edges, not as in barcharts...

10CVSS1.5AI score0.06082EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
•added 2014/12/06 12:00 a.m.•39 views

Fedora 20 : graphviz-2.34.0-10.fc20 (2014-15812)

This is an update fixing format string vulnerability in cgraph. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

7.5CVSS6.9AI score0.05569EPSS
SaveExploits1References3
OpenVAS
OpenVAS
•added 2014/12/06 12:00 a.m.•29 views

Fedora Update for graphviz FEDORA-2014-15812

Check the version of graphviz SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868551";...

10CVSS7.7AI score0.06082EPSS
SaveExploits3References2
NVD
NVD
•added 2014/12/03 9:59 p.m.•21 views

CVE-2014-9157

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.5CVSS6.8AI score0.05569EPSS
SaveExploits1References10
OSV
OSV
•added 2014/12/03 9:59 p.m.•10 views

DEBIAN-CVE-2014-9157

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.5CVSS7.2AI score0.05569EPSS
SaveExploits1References1
OSV
OSV
•added 2014/12/03 9:59 p.m.•10 views

CVE-2014-9157

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

6.7AI score
SaveExploits0References16
Prion
Prion
•added 2014/12/03 9:59 p.m.•27 views

Format string

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.5CVSS7.3AI score0.05569EPSS
SaveExploits1References10Affected Software1
Cvelist
Cvelist
•added 2014/12/03 9:00 p.m.•33 views

CVE-2014-9157

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.7AI score0.05569EPSS
SaveExploits1References10
Mend
Mend
•added 2014/12/03 9:00 p.m.•1 views

CVE-2014-9157

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.5CVSS0.05569EPSS
SaveExploits1References13
CVE
CVE
•added 2014/12/03 9:00 p.m.•120 views

CVE-2014-9157

Summary (CVE-2014-9157): Affected software is Graphviz, specifically the format string vulnerability in the yyerror function (lib/cgraph/scan.l). The issue allows remote attackers to cause unspecified impact via format string specifiers in error strings. Connected documents reference multiple ven...

7.5CVSS7.6AI score0.05569EPSS
SaveExploits1References10Affected Software1
Debian CVE
Debian CVE
•added 2014/12/03 9:00 p.m.•28 views

CVE-2014-9157

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.5CVSS7.4AI score0.05569EPSS
SaveExploits1
UbuntuCve
UbuntuCve
•added 2014/12/03 12:00 a.m.•32 views

CVE-2014-9157

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.5CVSS6.9AI score0.05569EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2014/12/03 12:00 a.m.•8 views

PT-2014-8857 · At&T +1 · Graphviz +1

Name of the Vulnerable Software and Affected Versions: Graphviz affected versions not specified Description: The issue is related to a format string vulnerability in the yyerror function in lib/cgraph/scan.l of Graphviz. This vulnerability allows remote attackers to have an unspecified impact via...

7.5CVSS7AI score0.05569EPSS
SaveExploits1References25
ArchLinux
ArchLinux
•added 2014/12/03 12:00 a.m.•48 views

graphviz: format string vulnerability

A format string vulnerability has been found in the error reporting part of the parser used by graphviz...

7.5CVSS2.7AI score0.05569EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/12/03 12:00 a.m.•4 views

CVE-2014-9157: Use of Externally-Controlled Format String

Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string...

7.5CVSS5.9AI score0.05569EPSS
SaveExploits1References2
Rows per page
Query Builder